Alternatives and similar repositories for python-fortify

Users that are interested in python-fortify are comparing it to the libraries listed below

• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 2 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆247Updated 8 years ago
• advanced-security / custom-codeql-bundle
  An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…
  ☆25Updated 3 years ago
• githubsatelliteworkshops / codeql
  GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.
  ☆210Updated 10 months ago
• cdaller / security_taint_propagation
  Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.
  ☆28Updated 6 years ago
• appsecco / json-flash-csrf-poc
  This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
  ☆77Updated 7 years ago
• codeplutos / java-security-manager-bypass
  ☆147Updated 6 years ago
• pwntester / XStreamPOC
  POC for XStream RCE
  ☆13Updated 11 years ago
• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆123Updated 7 years ago
• Marcono1234 / codeql-java-queries
  Personal CodeQL queries
  ☆64Updated last month
• mogwailabs / rmi-deserialization
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆100Updated 5 years ago
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆107Updated 9 years ago
• we1h0 / Security-Development-Lifecycle-Reference
  Security Development LifeCycle Process (安全开发生命周期参考)
  ☆27Updated 6 years ago
• atorralba / GHSL_CTF_4
  My solution for GitHub Security Lab CTF 4: CodeQL and Chill - The Java Edition
  ☆19Updated 5 years ago
• pwntester / JRE8u20_RCE_Gadget
  JRE8u20_RCE_Gadget
  ☆251Updated 9 years ago
• GitHubSecurityLab / gh-qldb
  CodeQL database manager
  ☆48Updated 3 months ago
• zerothoughts / spring-jndi
  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
  ☆116Updated 6 years ago
• Bypass007 / vuln
  Record some Vulnerabilities
  ☆44Updated 2 years ago
• dschadow / Java-Web-Security
  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
  ☆219Updated last week
• mogwaisec / mjet
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆173Updated 9 years ago
• ramshazar / orangetsai-springboot-actuator-poc
  ☆27Updated 4 years ago
• julianvilas / rooted2k15
  Additional materials for RootedCON 2015 Apache Struts talk
  ☆30Updated 10 years ago
• wdeilim / Audit-Rules
  A curated list of audit rules which extract from Source Code Auditing tools.
  ☆14Updated 5 years ago
• pwntester / SpringBreaker
  Exploit PoC for Spring RCE issue (CVE-2011-2894)
  ☆43Updated last year
• cldrn / codeql-queries
  My CodeQL queries collection
  ☆98Updated last year
• PortSwigger / json-web-token-attacker
  ☆108Updated 3 years ago
• phantom0301 / PTEye
  Phantom eye——A passive business logic vulnerability auditing tool
  ☆55Updated 6 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆374Updated 3 years ago
• vulhub / java
  Java every minor versions.
  ☆71Updated 2 years ago