Alternatives and similar repositories for tabby-vul-finder

Users that are interested in tabby-vul-finder are comparing it to the libraries listed below

• tabby-sec / tabby-path-finder

  View on GitHub
  A neo4j procedure for tabby
  ☆137May 17, 2025Updated 8 months ago
• tabby-sec / tabby-intellij-plugin

  View on GitHub
  A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily
  ☆39Nov 12, 2024Updated last year
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated last year
• Whoopsunix / utf-8-overlong-encoding

  View on GitHub
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆139Mar 11, 2024Updated last year
• fdu-sec / JDD

  View on GitHub
  ☆206Oct 27, 2025Updated 3 months ago
• waderwu / nativeRasp

  View on GitHub
  nativeRasp that can hook native methods
  ☆24Apr 24, 2023Updated 2 years ago
• yezere / codeql_n1ght

  View on GitHub
  方便自己搭建codeql环境和数据库的工具。
  ☆64Aug 16, 2025Updated 6 months ago
• whocansee / FilelessAgentMemShell

  View on GitHub
  无需文件落地Agent内存马生成器
  ☆248May 30, 2024Updated last year
• whami-root / SSLShell

  View on GitHub
  ☆24Jan 7, 2025Updated last year
• h3h3qaq / JavaDecompiler

  View on GitHub
  一个基于 Vineflower 引擎的多线程 Java 批量反编译工具，支持快速处理大量的 class 文件和 JAR 文件。
  ☆58Apr 28, 2025Updated 9 months ago
• yulate / tabby-pipeline

  View on GitHub
  用于快速启动tabby 分析漏洞或者gadget的环境
  ☆94Jul 14, 2025Updated 7 months ago
• X1r0z / hacking-espresso

  View on GitHub
  Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack
  ☆36Aug 27, 2025Updated 5 months ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• kyo-w / router-router

  View on GitHub
  Java web路由内存分析工具
  ☆437May 22, 2025Updated 8 months ago
• Whoopsunix / JavaRce

  View on GitHub
  Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式
  ☆545Mar 6, 2025Updated 11 months ago
• Boogipop / MetabaseRceTools

  View on GitHub
  CVE-2023-38646 Metabase RCE
  ☆55Oct 11, 2023Updated 2 years ago
• Java-Chains / chains-plugin-demo

  View on GitHub
  Java Chains 插件编写 demo
  ☆14Mar 5, 2025Updated 11 months ago
• luelueking / jvm-sandbox-rasp

  View on GitHub
  一个基于jvm-sandbox高度定制化rasp
  ☆58Sep 28, 2023Updated 2 years ago
• SummerSec / SPATool

  View on GitHub
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆132Jul 12, 2023Updated 2 years ago
• X1r0z / hessian-overlong-encoding

  View on GitHub
  Hessian UTF-8 Overlong Encoding
  ☆21Mar 9, 2024Updated last year
• yzddmr6 / Java-Js-Engine-Payloads

  View on GitHub
  Java Js Engine Payloads All in one
  ☆289Aug 21, 2023Updated 2 years ago
• c0ny1 / ascii-jar

  View on GitHub
  构造字节在ASCII范围内的jar
  ☆139Feb 14, 2022Updated 4 years ago
• zhzhdoai / flowspot-intellij-plugin

  View on GitHub
  IntelliJ IDEA plugin for static code analysis powered by Joern.
  ☆63Jan 29, 2026Updated 2 weeks ago
• tabby-sec / tabby

  View on GitHub
  A CAT called tabby ( Code Analysis Tool )
  ☆1,635Jan 17, 2026Updated 3 weeks ago
• ax1sX / RouteCheck-Alpha

  View on GitHub
  A Java Route Collection Tool
  ☆102Aug 1, 2024Updated last year
• woodpecker-appstore / jexpr-encoder-utils

  View on GitHub
  Java表达式语句生成器
  ☆194Oct 9, 2023Updated 2 years ago
• kezibei / fastjson_payload

  View on GitHub
  ☆236Jun 4, 2025Updated 8 months ago
• Y4Sec-Team / mysql-jdbc-tricks

  View on GitHub
  JDBC Attack Tricks
  ☆154Sep 3, 2023Updated 2 years ago
• Phelaine / SinkFinder

  View on GitHub
  闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数
  ☆502Jan 12, 2026Updated last month
• luelueking / ClazzSearcher

  View on GitHub
  一款使用Yaml定义搜索规则来搜索Class的工具
  ☆108Aug 2, 2023Updated 2 years ago
• BeichenDream / JDR

  View on GitHub
  ☆146Jan 16, 2023Updated 3 years ago
• cwkiller / Java-Puzzle

  View on GitHub
  一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合
  ☆117Dec 24, 2025Updated last month
• l3yx / Java-RASP-Research-Env

  View on GitHub
  之前方便自己研究RASP原理和绕过时顺手写的，用于快速启动和重置RASP环境
  ☆71Oct 13, 2024Updated last year
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• yulate / jdbc-tricks

  View on GitHub
  《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…
  ☆569Feb 7, 2026Updated last week
• hldfight / Tai-e-WebPlugin

  View on GitHub
  Tai-e的Web插件
  ☆23Jun 11, 2024Updated last year
• ax1sX / SpringSecurity

  View on GitHub
  A list for Spring Security
  ☆128Jan 16, 2024Updated 2 years ago
• luelueking / Bypass_JVM_Verifier

  View on GitHub
  Bypass JVM Class ByteCode Verifier , 对抗反编译器
  ☆117Sep 21, 2023Updated 2 years ago
• yuebusao / AJ-REPORT-EXPLOIT

  View on GitHub
  ☆24May 11, 2024Updated last year