ice-doom / CodeQLRule

Related projects: ⓘ

• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆174Updated 2 years ago
• yaklang / syntaxflow
  Lessons for syntaxflow zero to hero
  ☆36Updated this week
• woodpecker-appstore / jexpr-encoder-utils
  Java表达式语句生成器
  ☆176Updated 11 months ago
• kezibei / fastjson_payload
  ☆171Updated 2 weeks ago
• javaweb-rasp / javaweb-vuln
  RASP测试靶场
  ☆139Updated last year
• ZhuriLab / Yi
  项目监控工具 以及 Codeql 自动运行
  ☆307Updated last year
• luelueking / Deserial_Sink_With_JDBC
  Some ReadObject Sink With JDBC
  ☆177Updated 4 months ago
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 2 years ago
• 4ra1n / ShortPayload
  ☆210Updated this week
• Lonely-night / fastjsonVul
  fastjson 80 远程代码执行漏洞复现
  ☆178Updated 2 years ago
• wh1t3p1g / tabby-path-finder
  A neo4j procedure for tabby
  ☆111Updated 3 months ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆233Updated 3 years ago
• l3yx / jdwp-codeifier
  基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）
  ☆212Updated 3 months ago
• safe6Sec / MemoryShell
  内存马学习
  ☆168Updated 2 years ago
• Er1cccc / ACAF
  Auto Code Audit Framework for Java
  ☆97Updated 2 years ago
• ccdr4gon / Dr4gonSword
  ☆95Updated 10 months ago
• depycode / fastjson-c3p0
  fastjson不出网利用、c3p0
  ☆245Updated 3 years ago
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆140Updated 2 years ago
• timwhitez / Frog-checkCDN
  批量检查目标是否为cdn
  ☆139Updated 3 years ago
• rmb122 / easyrasp
  简单实现的 Java RASP
  ☆34Updated 3 years ago
• Ppsoft1991 / CodeReviewTools
  通过正则搜索、批量反编译特定Jar包中的class名称
  ☆302Updated 2 years ago
• kyo-w / router-router
  Java web路由内存分析工具
  ☆411Updated 3 months ago
• fengupupup / RocB
  鹏 RocB - Java代码审计IDEA插件 SAST
  ☆146Updated 3 years ago
• pen4uin / code-review-lab
  ☆132Updated this week
• KpLi0rn / Log4j2Scan
  ☆161Updated this week
• wa1ki0g / NoAuth
  java-web 自动化鉴权绕过
  ☆203Updated last month
• WAY29 / pocV
  Compatible with xray and nuclei poc framework
  ☆188Updated last year
• yzddmr6 / Java-Js-Engine-Payloads
  Java Js Engine Payloads All in one
  ☆255Updated last year
• r00t4dm / aLIEz
  杀内存马的工具，欢迎code review，提出更好的意见
  ☆181Updated 8 months ago
• jweny / check_jsonp_based_on_ast
  基于AST的JSONP劫持漏洞自动化挖掘
  ☆94Updated 4 years ago