Alternatives and similar repositories for codeql

Users that are interested in codeql are comparing it to the libraries listed below

• ldbfpiaoran / springboot-acl-bypass
  springboot getRequestURI acl bypass
  ☆37Updated 4 years ago
• 0linlin0 / CyberBox
  Java Exp FrameWork
  ☆104Updated 4 years ago
• iSafeBlue / presentation-slides
  ☆33Updated 3 years ago
• CHYbeta / URLFilterBypassDemo
  ☆29Updated 4 years ago
• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Updated 2 years ago
• DVPNET / Report_Public
  DVPNET 公开漏洞知识库
  ☆93Updated 4 years ago
• javasec / log4j-patch
  log4j-patch 修改字节码实现补丁防御
  ☆20Updated 3 years ago
• threedr3am / GuanYu
  JVM runtime class loading protection agent.（JVM类加载保护agent）
  ☆49Updated 4 years ago
• Dor-Tumarkin / CVE-2021-25641-Proof-of-Concept
  Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…
  ☆52Updated 4 years ago
• Afant1 / RemoteObjectInvocationHandler
  bypass JEP290 RaspHook code
  ☆62Updated 5 years ago
• iSafeBlue / redis-rce
  Redis RCE 的几种方法
  ☆90Updated last year
• feihong-cs / jre8u20_gadget
  jre8u20 gadget
  ☆34Updated 4 years ago
• Wfzsec / ysoserial-poc
  记录调试分析ysoserial系列的学习过程，主要包含手动构造的一些poc，便于加深对漏洞和工具的理解
  ☆30Updated 5 years ago
• Y4er / javaagent-tomcat-memshell
  使用java agent反序列化注入内存shell
  ☆68Updated 5 years ago
• TomAPU / checkburp
  Detect burp
  ☆34Updated 4 years ago
• Draven996 / jniwebshell
  ☆42Updated 6 years ago
• Marcono1234 / codeql-jdk-docker
  Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK
  ☆49Updated last year
• SummerSec / LookupInterface
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆163Updated 3 years ago
• Ramos-dev / R9000
  ☆58Updated 5 years ago
• haby0 / sec-note
  记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。
  ☆115Updated 3 years ago
• potats0 / cve_2020_14644
  ☆69Updated 5 years ago
• Y4er / CVE-2020-14756
  WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar
  ☆80Updated 4 years ago
• lijiejie / log4j2_vul_local_scanner
  Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…
  ☆85Updated 3 years ago
• threedr3am / log-agent
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆126Updated 5 years ago
• potats0 / AgentMemShellScanner
  清除基于java agent木马
  ☆80Updated 4 years ago
• UnicodeSec / Blogs
  宽字节安全团队的博客
  ☆31Updated 4 years ago
• 1135 / Kong_exploit
  ☆41Updated 5 years ago
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 5 years ago
• EvilPulsar / S2-061
  some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute
  ☆70Updated 4 years ago
• jas502n / fastjson-1.2.61-RCE
  fastjson-1.2.61-RCE
  ☆33Updated 6 years ago