基于Java ASM技术和GadgetInspector的原理,尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析
☆39Oct 26, 2021Updated 4 years ago
Alternatives and similar repositories for CodeInspector
Users that are interested in CodeInspector are comparing it to the libraries listed below
Sorting:
- 针对于Spring框架的自动Java代码审计工具☆37Jan 24, 2022Updated 4 years ago
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆23Nov 24, 2024Updated last year
- jre8u20 gadget☆34May 23, 2021Updated 4 years ago
- ☆12Aug 5, 2021Updated 4 years ago
- Java静态代码安全审计工具,使用JavaParser项目做语法分析,计划支持常见的Web漏洞与组件漏洞☆21Sep 20, 2021Updated 4 years ago
- 一个java代码审计辅助工具☆29Nov 2, 2022Updated 3 years ago
- Java RMI反序列化漏洞插件☆49Jun 11, 2021Updated 4 years ago
- JAVA IAST Example☆49Dec 13, 2021Updated 4 years ago
- payloads☆15Mar 17, 2021Updated 4 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆151Sep 16, 2021Updated 4 years ago
- JavaWeb漏洞审计工具,构建方法调用链并模拟栈帧进行分析☆334Jun 3, 2023Updated 2 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆345Jan 6, 2024Updated 2 years ago
- ☆19Mar 4, 2023Updated 2 years ago
- 7bits安全团队-《Java安全-记一次实战使用memoryshell》代码样例☆19Nov 13, 2022Updated 3 years ago
- 一个基于jvm-sandbox高度定制化rasp☆58Sep 28, 2023Updated 2 years ago
- ☆37Aug 25, 2020Updated 5 years ago
- log4j-patch 修改字节码实现补丁防御☆20Dec 10, 2021Updated 4 years ago
- java反序列化漏洞笔记☆23Apr 6, 2019Updated 6 years ago
- ☆42Jul 23, 2019Updated 6 years ago
- 开发和安全和运营:DevSecOps-Software development (Dev) and Security (Sec) and IT operations (Ops).☆28Apr 13, 2024Updated last year
- 项目监控工具 以及 Codeql 自动运行☆313Apr 13, 2023Updated 2 years ago
- SyscallLoader☆11Sep 13, 2021Updated 4 years ago
- ☆11Mar 19, 2022Updated 3 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆458Mar 24, 2022Updated 3 years ago
- Tomcat 冰蝎内存马。☆214Sep 14, 2020Updated 5 years ago
- ☆198Sep 26, 2024Updated last year
- Java代码审计案例☆24May 16, 2021Updated 4 years ago
- 一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)☆176Jan 4, 2022Updated 4 years ago
- 专注于JVM的运行时防御系统RASP☆295Jun 14, 2024Updated last year
- 个人使用CodeQL编写的一些规则☆180Mar 30, 2022Updated 3 years ago
- Springboot的一个webshell☆45Jul 10, 2019Updated 6 years ago
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- 静态分析及代码审计自动化相关资料收集☆298Jul 29, 2022Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- a exec jsp shell, simply like weevely php C/S shell.☆14Jun 21, 2022Updated 3 years ago
- This is an implementation of the Language Server Protocol for Jimple. It enables your IDE to provide code exploring features while workin…☆12Dec 15, 2023Updated 2 years ago
- Monitor and prevent unexpected behavior of Java programs.☆14Jul 6, 2021Updated 4 years ago
- CVE-2019-2890 WebLogic 反序列化RCE漏洞☆44Dec 8, 2019Updated 6 years ago
- ☆12Nov 21, 2023Updated 2 years ago