Java静态代码安全审计工具,使用JavaParser项目做语法分析,计划支持常见的Web漏洞与组件漏洞
☆20Sep 20, 2021Updated 4 years ago
Alternatives and similar repositories for XVulnFinder
Users that are interested in XVulnFinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个java代码审计辅助工具☆27Nov 2, 2022Updated 3 years ago
- 基于Java ASM技术和GadgetInspector的原理,尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析☆37Oct 26, 2021Updated 4 years ago
- 针对于Spring框架的自动Java代码审计工具☆37Jan 24, 2022Updated 4 years ago
- study_summary☆10Aug 8, 2022Updated 3 years ago
- 又一个Java Web代码审计工具☆98May 7, 2018Updated 8 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- JEECMS FreeMarker-RCE☆12Nov 12, 2021Updated 4 years ago
- 整理的一些hw前期准备工作 以及针对攻击者的溯源思路 水平较菜,如有错误或者遗漏的地方还请各位指正 参考资料较多 动态 IP 移动基站 代理池IP(谷歌、百度 是否有处于代理池C段) 国外扫描傀儡机(被标记时间普遍较久、扫描目标众多) 动态域名服务商(如花生壳、公云等) …☆21Apr 3, 2021Updated 5 years ago
- Rexo-UI - VueJS & HTML 网站/后台管理模板☆10Nov 1, 2023Updated 2 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆148Sep 16, 2021Updated 4 years ago
- This project deals with vulnerability analysis and classification using machine learning techniques i.e. Natural Language Processing.☆10Feb 21, 2019Updated 7 years ago
- JNDI/LDAP注入利用工具,对命令进行两种编码,支持多种绕过高版本JDK的方式(参考大佬代码造的轮子)☆43Dec 22, 2021Updated 4 years ago
- 一个burpsuite插件,用于被动检测可能存在的XSS漏洞的请求。后续将完善对于可以请求的xss探针、xss攻击以及DOM型xss检测。☆14Dec 26, 2018Updated 7 years ago
- java UI 插件化漏洞扫描工具☆19Apr 14, 2020Updated 6 years ago
- ☆11Jan 16, 2018Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 个人博客网站☆59Updated this week
- ☆10May 6, 2021Updated 5 years ago
- 简单实现的 Java RASP☆37Oct 14, 2020Updated 5 years ago
- ☆19Jul 6, 2023Updated 3 years ago
- java 代码审计学习靶场☆120Jan 11, 2024Updated 2 years ago
- 网站实时监控文件变动及webshell检测查杀工具☆36Jun 30, 2022Updated 4 years ago
- ☆13Aug 31, 2024Updated last year
- 一款简单的Web漏洞扫描器(学习专用)☆11Jul 5, 2024Updated 2 years ago
- 一款碾压sqlmap的sql注入漏洞检测系统^^☆16Jan 1, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 动态链接库加载工具☆21Jan 26, 2022Updated 4 years ago
- 简单的sql和xss探测burp插件☆18Jun 25, 2022Updated 4 years ago
- CSRF Scanner Extension for Burp Suite Pro☆20Jun 5, 2018Updated 8 years ago
- Java 设计模式梳理☆37Jun 20, 2022Updated 4 years ago
- java decompile audit tools☆224Oct 9, 2022Updated 3 years ago
- JAVA IAST Example☆48Dec 13, 2021Updated 4 years ago
- JavaWeb漏洞审计工具,构建方法调用链并模拟栈帧进行分析☆336Jun 3, 2023Updated 3 years ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆135Jul 12, 2023Updated 3 years ago
- java代码审计笔记☆23Jun 8, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- The function of the tool is to inject JNDI through LDAP☆29Dec 21, 2021Updated 4 years ago
- java 内存马系列 实现(Servlets 、组件、Agent)☆11Mar 7, 2022Updated 4 years ago
- ☆12Oct 29, 2018Updated 7 years ago
- Spring Cloud Function SPEL RCE demo☆11Apr 2, 2022Updated 4 years ago
- A neo4j procedure for tabby☆136May 17, 2025Updated last year
- CSI Tool 监控模式下双向CSI采集(同时发送并接收数据) CSI-Tool monitor-mode send and receive packet at the same time☆16Apr 7, 2019Updated 7 years ago
- 一些简单的scripts,慢慢push☆14Apr 18, 2024Updated 2 years ago