My CodeQL queries collection
☆99Aug 28, 2023Updated 2 years ago
Alternatives and similar repositories for codeql-queries
Users that are interested in codeql-queries are comparing it to the libraries listed below
Sorting:
- ☆274Oct 28, 2021Updated 4 years ago
- notes☆27Oct 10, 2022Updated 3 years ago
- Custom / Experimental CodeQL queries☆37Apr 21, 2022Updated 3 years ago
- Personal CodeQL queries☆62Dec 15, 2025Updated 2 months ago
- 个人使用CodeQL编写的一些规则☆180Mar 30, 2022Updated 3 years ago
- GreHack 2021 CodeQL for Java workshop☆73Nov 19, 2021Updated 4 years ago
- Codeql学习笔记☆900Apr 25, 2022Updated 3 years ago
- CodeQL Java 全网最全的中文学习资料☆799Mar 18, 2022Updated 3 years ago
- CodeQL extractor for java, which don't need to compile java source☆348Nov 25, 2022Updated 3 years ago
- attackRmi☆258Oct 14, 2020Updated 5 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆458Mar 24, 2022Updated 3 years ago
- Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…☆53Jun 6, 2021Updated 4 years ago
- GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.☆211Sep 27, 2024Updated last year
- 自动反编译闭源应用，创建codeql数据库☆316Mar 2, 2022Updated 3 years ago
- fastjson 1.2.68 版本 autotype bypass☆142Jun 17, 2022Updated 3 years ago
- Ready to use docker image for CodeQL☆90Jan 10, 2024Updated 2 years ago
- Conote 综合安全测试平台社区版。☆374Aug 15, 2024Updated last year
- 一个Java攻击框架☆23Nov 27, 2020Updated 5 years ago
- ☆232Jan 3, 2022Updated 4 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆647Feb 15, 2025Updated last year
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆212May 19, 2020Updated 5 years ago
- JDBC Connection URL Attack☆438Sep 10, 2021Updated 4 years ago
- Flask 内存马☆313Mar 26, 2021Updated 4 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆357Sep 20, 2022Updated 3 years ago
- 编译原理学习代码仓库☆23Jan 17, 2022Updated 4 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,079Jun 15, 2021Updated 4 years ago
- ☆143Jan 21, 2021Updated 5 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆126Dec 11, 2021Updated 4 years ago
- Finding Java gadget chains with CodeQL☆184Jan 14, 2025Updated last year
- [Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instea…☆85May 1, 2024Updated last year
- ☆523Sep 16, 2022Updated 3 years ago
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆268Oct 17, 2025Updated 4 months ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆205Mar 19, 2022Updated 3 years ago
- An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability☆469Sep 16, 2023Updated 2 years ago
- 主流供应商的一些攻击性漏洞汇总☆809Nov 8, 2021Updated 4 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,635Jan 17, 2026Updated last month