Alternatives and similar repositories for openrasp-testcases

Users that are interested in openrasp-testcases are comparing it to the libraries listed below

• baidu-security / app-env-docker
  基于 Docker 的真实应用测试环境
  ☆263Updated last year
• baidu-security / openrasp-iast
  IAST 灰盒扫描工具
  ☆447Updated 3 years ago
• alpha1e0 / kiwi
  kiwi：安全源码审计工具
  ☆242Updated 5 years ago
• JoyChou93 / sks
  Security Knowledge Structure(安全知识汇总)
  ☆244Updated 6 years ago
• 0Kee-Team / JavaProbe
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Updated 4 years ago
• DragonGrowlTeam / Address
  ☆212Updated 10 months ago
• bit4woo / code2sec.com
  xmind\code\articles for my personal blog 个人博客上的资源备份存储，也是个人分享的汇总
  ☆259Updated 2 years ago
• Cryin / JavaID
  java source code static code analysis and danger function identify prog
  ☆535Updated 6 years ago
• sie504 / Struts-S2-xxx
  整理收集Struts2漏洞环境
  ☆265Updated 7 years ago
• lightless233 / Java-Unserialization-Study
  QAQ Just study unserialize vulnerabilities in Java :)
  ☆196Updated 6 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆309Updated 3 years ago
• gyyyy / footprint
  个人笔记
  ☆216Updated 5 years ago
• yingshang / banruo
  ☆147Updated 3 years ago
• jiangsir404 / POC-S
  POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
  ☆360Updated 5 years ago
• yaofeifly / Vub_ENV
  跟踪真实漏洞相关靶场环境搭建
  ☆240Updated 7 years ago
• jiangsir404 / PHP-code-audit
  php code audit for cms vulnerabilities / 代码审计，对一些大型cms漏洞的复现研究，更新源码和漏洞exp
  ☆279Updated 6 years ago
• SkewwG / VulScan
  漏洞扫描：st2、tomcat、未授权访问等等
  ☆287Updated 6 years ago
• fnmsd / awvs_script_decode
  解密好的AWVS10.5 data/script/目录下的脚本
  ☆267Updated 7 years ago
• NomadCN112 / Chinese-translation-ATT-CK-framework
  ATT&CK 框架图中文翻译版 原为安恒奖品，自我二次翻译，修改了一些小的翻译错误问题，自我保存即可
  ☆265Updated 5 years ago
• 5up3rc / weblogic_cmd
  weblogic t3 deserialization rce
  ☆270Updated 8 years ago
• Chora10 / FuzzDomain
  FuzzDomain
  ☆269Updated 8 years ago
• kxcode / JNDI-Exploit-Bypass-Demo
  Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>
  ☆262Updated 3 years ago
• aedoo / Allscanner
  数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
  ☆134Updated 6 years ago
• njcx / pocsuite_poc_collect
  collection poc use pocsuite framework 收集一些 poc with pocsuite框架
  ☆157Updated 6 years ago
• knownsec / wam
  Web App Monitor
  ☆226Updated 6 years ago
• guimaizi / get_domain
  ☆401Updated 5 years ago
• threedr3am / gadgetinspector
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆450Updated 3 years ago
• SewellDinG / LFIboomCTF
  📖本地文件包含漏洞实践源码及相应协议利用指南
  ☆169Updated 8 years ago
• webanalyzer / rules
  通用的指纹识别规则
  ☆372Updated 2 years ago
• shengqi158 / fastjson-remote-code-execute-poc
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆404Updated 2 years ago