GreHack 2021 CodeQL for Java workshop
☆73Nov 19, 2021Updated 4 years ago
Alternatives and similar repositories for codeql_grehack_workshop
Users that are interested in codeql_grehack_workshop are comparing it to the libraries listed below
Sorting:
- My CodeQL queries collection☆99Aug 28, 2023Updated 2 years ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆205Mar 19, 2022Updated 3 years ago
- Java web路由内存分析工具☆437May 22, 2025Updated 9 months ago
- Place for random PoCs☆18May 21, 2020Updated 5 years ago
- ☆34Sep 19, 2022Updated 3 years ago
- Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>☆267Jun 17, 2022Updated 3 years ago
- CodeQL Java 全网最全的中文学习资料☆799Mar 18, 2022Updated 3 years ago
- ☆101Oct 7, 2023Updated 2 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆345Jan 6, 2024Updated 2 years ago
- 自动反编译闭源应用,创建codeql数据库☆316Mar 2, 2022Updated 3 years ago
- ☆22Nov 3, 2022Updated 3 years ago
- 个人使用CodeQL编写的一些规则☆180Mar 30, 2022Updated 3 years ago
- ☆60Jan 9, 2023Updated 3 years ago
- Java Exp FrameWork☆104Apr 23, 2021Updated 4 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆458Mar 24, 2022Updated 3 years ago
- CLI tool for tracking dependents repositories and sorting result by Stars ⭐☆43Jan 25, 2024Updated 2 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆386Apr 16, 2022Updated 3 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆117Dec 30, 2021Updated 4 years ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆132Jul 12, 2023Updated 2 years ago
- Codeql学习笔记☆900Apr 25, 2022Updated 3 years ago
- Java RCE 回显测试代码☆1,016Oct 15, 2020Updated 5 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,635Jan 17, 2026Updated last month
- Dependencies with Log4j2 Checklist☆35Dec 14, 2021Updated 4 years ago
- ☆72Mar 26, 2022Updated 3 years ago
- ☆274Oct 28, 2021Updated 4 years ago
- JRE8u20_RCE_Gadget☆255Jul 1, 2016Updated 9 years ago
- PoC for CVE-2021-43557☆22Nov 22, 2021Updated 4 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆126Dec 11, 2021Updated 4 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆613Mar 4, 2021Updated 4 years ago
- woodpecker框架weblogic信息探测插件☆185Mar 23, 2022Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- notes☆27Oct 10, 2022Updated 3 years ago
- Oracle Access Manager Unauthenticated Attacker Vulnerability CVE-2021-35587☆42Mar 14, 2022Updated 3 years ago
- GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.☆211Sep 27, 2024Updated last year
- PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.☆81Aug 14, 2022Updated 3 years ago
- Finding Java gadget chains with CodeQL☆184Jan 14, 2025Updated last year
- forked from frohoff/ysoserial and added my own payloads.☆154Mar 6, 2020Updated 5 years ago