cokeBeer / go-sec-code
Go-sec-code is a project for learning Go vulnerability code.
☆35Updated last year
Related projects ⓘ
Alternatives and complementary repositories for go-sec-code
- 收录go语言编写的项目、框架和组件出现的cve，或者一些相关的利用方式的文章☆37Updated last year
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆47Updated 2 years ago
- TongASDP漏洞测试环境☆34Updated last year
- 基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell☆20Updated 2 years ago
- Scanner platform based on Kubernetes and Argo-Workflow 基于k8s和argo工作流的扫描器☆106Updated last year
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆90Updated 2 years ago
- 是我阅读各种源码写的笔记☆71Updated 2 years ago
- 简单实现的 Java RASP☆35Updated 4 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆35Updated last month
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆56Updated last year
- 用来将Tai-e改造为开箱即用的静态代码安全分析框架的一些demo☆33Updated 7 months ago
- CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE☆38Updated 2 years ago
- Easy burp sign extension!☆23Updated 2 weeks ago
- java☆54Updated last year
- nativeRasp that can hook native methods☆24Updated last year
- CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库☆29Updated 2 years ago
- 《Spring漏洞研究》☆44Updated 2 years ago
- ☆41Updated 3 years ago
- Apache Dubbo Hessian2 CVE-2021-43297 demo☆46Updated 2 years ago
- 当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆78Updated 2 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated last year
- Java Agent memory horse scanner combined with Call Graph modus☆61Updated last year
- CodeQL 寻找 JNDI利用 Lookup接口☆162Updated 2 years ago
- API Security DAST & Oprations☆16Updated last year
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆30Updated last week
- 手把手教你写IAST系列☆24Updated 10 months ago
- Web Cache Poisoning Vulnerability Scanner☆33Updated 2 months ago
- 代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema☆25Updated last month