Alternatives and similar repositories for python-fortify

Users that are interested in python-fortify are comparing it to the libraries listed below

• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆251Updated 8 years ago
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 3 years ago
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆108Updated 9 years ago
• githubsatelliteworkshops / codeql
  GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.
  ☆211Updated last year
• advanced-security / custom-codeql-bundle
  An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…
  ☆25Updated 3 years ago
• zerothoughts / spring-jndi
  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
  ☆116Updated 6 years ago
• Marcono1234 / codeql-java-queries
  Personal CodeQL queries
  ☆63Updated 2 months ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆53Updated 2 years ago
• mwielgoszewski / jython-burp-api
  Develop Burp extensions in Jython
  ☆179Updated 9 years ago
• mogwaisec / mjet
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆174Updated 9 years ago
• codeplutos / java-security-manager-bypass
  ☆152Updated 6 years ago
• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆124Updated 7 years ago
• GitHubSecurityLab / gh-qldb
  CodeQL database manager
  ☆48Updated 7 months ago
• imagemlt / myQLrules
  some codeql rules
  ☆15Updated 5 years ago
• summitt / burp-ysoserial
  YSOSERIAL Integration with burp suite
  ☆166Updated 2 years ago
• pwntester / XStreamPOC
  POC for XStream RCE
  ☆13Updated 11 years ago
• Bypass007 / vuln
  Record some Vulnerabilities
  ☆44Updated 3 years ago
• we1h0 / Security-Development-Lifecycle-Reference
  Security Development LifeCycle Process (安全开发生命周期参考)
  ☆27Updated 7 years ago
• pwntester / JRE8u20_RCE_Gadget
  JRE8u20_RCE_Gadget
  ☆253Updated 9 years ago
• bedirhan / wivet
  Web Input Vector Extractor Teaser
  ☆132Updated 3 years ago
• vulhub / java
  Java every minor versions.
  ☆73Updated 2 years ago
• sensepost / anapickle
  Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.
  ☆85Updated 8 years ago
• mogwailabs / rmi-deserialization
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Updated 6 years ago
• Morningstar / GoASQ
  General Open Architecture Security Questionnaire
  ☆32Updated 2 years ago
• Barro / java-afl
  Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.
  ☆90Updated 7 years ago
• julianvilas / rooted2k15
  Additional materials for RootedCON 2015 Apache Struts talk
  ☆30Updated 10 years ago
• Contrast-Security-OSS / go-test-bench
  Intentionally vulnerable Go web app.
  ☆43Updated last month
• ryohare / fortify-structural-rules-guide
  A technique for developing Fortify structural rules and characterization rules.
  ☆14Updated 6 years ago
• appsecco / json-flash-csrf-poc
  This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
  ☆77Updated 7 years ago
• ssexxe / XXEBugFind
  A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
  ☆72Updated 11 years ago