Alternatives and similar repositories for taint

Users that are interested in taint are comparing it to the libraries listed below

• fate0 / xmark

  View on GitHub
  A PHP7 extension that can hook most functions/classes and parts of opcodes
  ☆243Sep 17, 2021Updated 4 years ago
• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆483May 25, 2019Updated 6 years ago
• OneSourceCat / phpvulhunter

  View on GitHub
  A tool that can scan php vulnerabilities automatically using static analysis methods
  ☆488Mar 20, 2018Updated 7 years ago
• myvyang / chromium_for_spider

  View on GitHub
  dynamic crawler for web vulnerability scanner
  ☆253Mar 4, 2020Updated 5 years ago
• lcatro / PHP_Source_Audit_Tools

  View on GitHub
  PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
  ☆148May 14, 2018Updated 7 years ago
• Qihoo360 / phptrace

  View on GitHub
  A tracing and troubleshooting tool for PHP scripts.
  ☆1,679Nov 28, 2018Updated 7 years ago
• opensec-cn / chip

  View on GitHub
  a simple tool to detect potential security threat in php code
  ☆317Sep 9, 2024Updated last year
• FeeiCN / Cobra

  View on GitHub
  Source Code Security Audit (源代码安全审计)
  ☆3,188Sep 16, 2022Updated 3 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆255Jul 1, 2016Updated 9 years ago
• laruence / yaconf

  View on GitHub
  A PHP Persistent Configurations Container
  ☆1,048Jul 29, 2025Updated 6 months ago
• yongchuan / msafe

  View on GitHub
  通过劫持Zend底层opcode编译，还原部分混淆加密的php源码，检测网站木马加入日志，禁用危险方法，禁用特定目录PHP文件的执行
  ☆125Dec 5, 2017Updated 8 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆403Dec 16, 2022Updated 3 years ago
• phith0n / arbitrary-php-extension

  View on GitHub
  这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。
  ☆198Oct 22, 2018Updated 7 years ago
• ysrc / GourdScanV2

  View on GitHub
  被动式漏洞扫描系统
  ☆873Nov 1, 2017Updated 8 years ago
• ircmaxell / php-cfg

  View on GitHub
  A Control Flow Graph implementation in PHP
  ☆247Sep 20, 2025Updated 4 months ago
• shengqi158 / pyvulhunter

  View on GitHub
  python audit tool 审计 注入 inject
  ☆182Feb 25, 2016Updated 9 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• GoSecure / php7-opcache-override

  View on GitHub
  Security-related PHP7 OPcache abuse tools and demo
  ☆317Jan 2, 2023Updated 3 years ago
• zsdlove / Hades

  View on GitHub
  Static code auditing system
  ☆468Jan 8, 2021Updated 5 years ago
• Tr3jer / dnsAutoRebinding

  View on GitHub
  ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
  ☆217Aug 17, 2017Updated 8 years ago
• knownsec / wam

  View on GitHub
  Web App Monitor
  ☆228Sep 20, 2018Updated 7 years ago
• shengqi158 / svn_git_scanner

  View on GitHub
  用于扫描git，svn泄露
  ☆78Jul 29, 2015Updated 10 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago
• LoRexxar / Kunlun-M

  View on GitHub
  KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。
  ☆2,379Jan 16, 2026Updated 3 weeks ago
• 80vul / phpcodz

  View on GitHub
  Php Codz Hacking
  ☆669Sep 5, 2015Updated 10 years ago
• lightless233 / Java-Unserialization-Study

  View on GitHub
  QAQ Just study unserialize vulnerabilities in Java :)
  ☆196Aug 22, 2018Updated 7 years ago
• QAX-A-Team / redis_lua_exploit

  View on GitHub
  ☆146Jun 20, 2018Updated 7 years ago
• l3m0n / whatweb

  View on GitHub
  更快速的进行Web应用指纹识别
  ☆172May 9, 2019Updated 6 years ago
• netxfly / passive_scan

  View on GitHub
  基于http代理的web漏洞扫描器的实现
  ☆354Mar 19, 2016Updated 9 years ago
• baidu / openrasp

  View on GitHub
  🔥Open source RASP solution
  ☆2,952Oct 2, 2025Updated 4 months ago
• JackOfMostTrades / gadgetinspector

  View on GitHub
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,080Jun 15, 2021Updated 4 years ago
• laruence / yar

  View on GitHub
  Light, concurrent RPC framework for PHP & C
  ☆1,437Jul 29, 2025Updated 6 months ago
• NickstaDB / BaRMIe

  View on GitHub
  Java RMI enumeration and attack tool.
  ☆745Sep 28, 2017Updated 8 years ago
• Cryin / Paper

  View on GitHub
  Web Security Technology & Vulnerability Analysis Whitepapers
  ☆549Jan 1, 2019Updated 7 years ago
• rebeyond / memShell

  View on GitHub
  a webshell resides in the memory of java web server
  ☆698Jun 26, 2018Updated 7 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆436May 8, 2023Updated 2 years ago
• pangudashu / php7-internal

  View on GitHub
  PHP7内核剖析
  ☆3,413May 12, 2022Updated 3 years ago
• jjf012 / PassiveScanner

  View on GitHub
  a passive scanner based on Mitmproxy and Arachni
  ☆109Aug 17, 2017Updated 8 years ago
• zerothoughts / spring-jndi

  View on GitHub
  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
  ☆116May 17, 2019Updated 6 years ago