基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析
☆37Oct 26, 2021Updated 5 years ago
Alternatives and similar repositories for CodeInspector
Users that are interested in CodeInspector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 针对于Spring框架的自动Java代码审计工具☆37Jan 24, 2022Updated 4 years ago
- Java静态代码安全审计工具，使用JavaParser项目做语法分析，计划支持常见的Web漏洞与组件漏洞☆21Sep 20, 2021Updated 5 years ago
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆22Nov 24, 2024Updated last year
- ☆12Aug 5, 2021Updated 5 years ago
- jre8u20 gadget☆34May 23, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 静态分析及代码审计自动化相关资料收集☆300Jul 29, 2022Updated 4 years ago
- java反序列化漏洞笔记☆24Apr 6, 2019Updated 7 years ago
- JAVA IAST Example☆48Dec 13, 2021Updated 4 years ago
- payloads☆15Mar 17, 2021Updated 5 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆454Mar 24, 2022Updated 4 years ago
- JavaWeb漏洞审计工具，构建方法调用链并模拟栈帧进行分析☆332Jun 3, 2023Updated 3 years ago
- 7bits安全团队-《Java安全-记一次实战使用memoryshell》代码样例☆19Nov 13, 2022Updated 3 years ago
- Java RMI反序列化漏洞插件☆49Jun 11, 2021Updated 5 years ago
- JDBC Connection URL Attack☆447Sep 10, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 开发和安全和运营：DevSecOps-Software development (Dev) and Security (Sec) and IT operations (Ops).☆28Apr 13, 2024Updated 2 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆147Sep 16, 2021Updated 5 years ago
- ☆40Jul 23, 2019Updated 7 years ago
- Codeql学习笔记☆901Apr 25, 2022Updated 4 years ago
- ☆21Mar 4, 2023Updated 3 years ago
- 记录学习codeql的过程☆397Jun 9, 2023Updated 3 years ago
- ☆11Oct 10, 2018Updated 8 years ago
- ☆37Aug 25, 2020Updated 6 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆271Mar 4, 2022Updated 4 years ago
- ☆11Mar 19, 2022Updated 4 years ago
- log4j-patch 修改字节码实现补丁防御☆20Dec 10, 2021Updated 4 years ago
- 个人博客网站☆61Updated this week
- 一个LDAP请求监听器，摆脱dnslog平台☆287Apr 7, 2023Updated 3 years ago
- CVE-2019-2890 WebLogic 反序列化RCE漏洞☆44Dec 8, 2019Updated 6 years ago
- 个人使用CodeQL编写的一些规则☆180Mar 30, 2022Updated 4 years ago
- 利用链、漏洞检测工具☆375Jul 31, 2024Updated 2 years ago
- Springboot的一个webshell☆45Jul 10, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A neo4j procedure for tabby☆135May 17, 2025Updated last year
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- 一个基于jvm-sandbox高度定制化rasp☆57Sep 28, 2023Updated 3 years ago
- Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to s…☆20Jan 30, 2025Updated last year
- Jsp Decoder Source Code☆16Mar 23, 2021Updated 5 years ago
- 内存马Demo合集 memshell demo for java / php / python☆423May 31, 2021Updated 5 years ago