pascal-lab / java-benchmarks
☆10Updated last year
Related projects ⓘ
Alternatives and complementary repositories for java-benchmarks
- A benchmark to evaluate taint analysis☆30Updated 2 years ago
- Taint analysis implementation based on Heros and Soot☆41Updated 6 months ago
- a dataflow analysis framework implemented in Go, like soot☆29Updated 2 years ago
- Tai-e学习记录☆11Updated 7 months ago
- ☆12Updated 3 years ago
- 基于Java ASM技术和GadgetInspector的原理,尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析☆36Updated 3 years ago
- ☆41Updated 3 years ago
- solution to buggyLoader of 0CTF/TCTF 2021 Finals☆20Updated 3 years ago
- Personal CodeQL queries☆58Updated last week
- 一些Java RASP demo☆11Updated 5 years ago
- neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin☆16Updated 10 months ago
- S&P2023 Paper☆39Updated 2 years ago
- WALA 学习笔记☆13Updated last year
- Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis☆73Updated 8 months ago
- gosec动态规则修改版☆12Updated 3 years ago
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆23Updated 10 months ago
- 《深入理解Semgrep》Finding vulnerabilities with Semgrep.☆40Updated last year
- A Vulnerable Web App written by JavaScript (Vue+Egg)☆12Updated 3 weeks ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆56Updated last year
- This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by …☆20Updated 2 years ago
- Precision-guided context sensitivity for pointer analysis☆57Updated last year
- CodeQL中文资料和常见使用解释。Chinese version of Codeql documents☆9Updated 4 years ago
- Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications (NDSS 2022)☆23Updated 9 months ago
- ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection☆75Updated last year
- ☆20Updated 2 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆47Updated 2 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆51Updated last year
- Utilize Tai-e to identify the Log4shell (a.k.a. CVE-2021-44228) Vulnerability☆9Updated last year
- nativeRasp that can hook native methods☆24Updated last year