Alternatives and similar repositories for tongasdp-test

Users that are interested in tongasdp-test are comparing it to the libraries listed below

• fynch3r / WALAStudy

  View on GitHub
  WALA 学习笔记
  ☆14Aug 8, 2023Updated 2 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 4 years ago
• waderwu / nativeRasp

  View on GitHub
  nativeRasp that can hook native methods
  ☆24Apr 24, 2023Updated 2 years ago
• BytecodeDL / ByteCodeDL

  View on GitHub
  A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
  ☆344Jan 6, 2024Updated 2 years ago
• h2-stack / LL-RASP

  View on GitHub
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆69Oct 19, 2025Updated 3 months ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• synacktiv / QLinspector

  View on GitHub
  Finding Java gadget chains with CodeQL
  ☆184Jan 14, 2025Updated last year
• jpapayan / aspis

  View on GitHub
  A PHP code transformer to provide protection against injection attacks
  ☆10Jul 11, 2011Updated 14 years ago
• iiiusky / java_iast_example

  View on GitHub
  JAVA IAST Example
  ☆49Dec 13, 2021Updated 4 years ago
• pascal-lab / java-benchmarks

  View on GitHub
  ☆12Nov 21, 2023Updated 2 years ago
• Lay0us / CVE-2022-32532

  View on GitHub
  Apache Shiro CVE-2022-32532
  ☆13Jun 28, 2022Updated 3 years ago
• DeEpinGh0st / CVE-2022-28346

  View on GitHub
  Django QuerySet.annotate(), aggregate(), extra() SQL 注入
  ☆24May 31, 2022Updated 3 years ago
• j5s / goon

  View on GitHub
  goon，是一款基于golang开发的扫描工具，暂时支持portscan、webscan、titlescan、dirscan、fofascan、pluginscan等模块功能，当然也支持将这些模块联动起来的autoscan。后期也会慢慢加入其他零件模块，感谢您的使用，也希望…
  ☆10Jun 28, 2021Updated 4 years ago
• tengfeipu / How-Tomcat-Works

  View on GitHub
  在JDK8下运行《How Tomcat Works》的源码
  ☆12Apr 16, 2019Updated 6 years ago
• zsdlove / Artemis-release

  View on GitHub
  A static code analysis tool
  ☆17Mar 17, 2025Updated 10 months ago
• ice-doom / codeql_compile

  View on GitHub
  自动反编译闭源应用，创建codeql数据库
  ☆316Mar 2, 2022Updated 3 years ago
• mishmashclone / GrrrDog-Java-Deserialization-Cheat-Sheet

  View on GitHub
  https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
  ☆54Sep 11, 2021Updated 4 years ago
• angelwhu / jvm-rasp

  View on GitHub
  基于JVM-Sandbox实现RASP安全监控防护
  ☆53Aug 8, 2023Updated 2 years ago
• p1n93r / SpringBootAdmin-thymeleaf-SSTI

  View on GitHub
  SpringBootAdmin-thymeleaf-SSTI which can cause RCE
  ☆86Jul 18, 2023Updated 2 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆185Sep 1, 2021Updated 4 years ago
• ddworken / ide-worm

  View on GitHub
  ☆15Aug 6, 2021Updated 4 years ago
• javaweb-rasp / javaweb-vuln

  View on GitHub
  RASP测试靶场
  ☆192Dec 22, 2022Updated 3 years ago
• PL-Ninja / MySootScript

  View on GitHub
  oh my soot !
  ☆93Aug 10, 2022Updated 3 years ago
• Y4er / fastjson-bypass-autotype-1.2.68

  View on GitHub
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆229Oct 12, 2022Updated 3 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆753Apr 14, 2021Updated 4 years ago
• jas502n / fastjson-1.2.61-RCE

  View on GitHub
  fastjson-1.2.61-RCE
  ☆33Sep 26, 2019Updated 6 years ago
• MortalAndTry / ProxyRelay

  View on GitHub
  Exchange ProxyRelay POC
  ☆37Oct 20, 2022Updated 3 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 6 years ago
• su18 / Xstream

  View on GitHub
  payloads
  ☆15Mar 17, 2021Updated 4 years ago
• jorgectf / jdk4QL

  View on GitHub
  Java JDK 8-18 CodeQL databases
  ☆17Jun 2, 2024Updated last year
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• codeplutos / java-security-manager-bypass

  View on GitHub
  ☆153Jun 24, 2019Updated 6 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• HXSecurity / DongTai-agent-java

  View on GitHub
  Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…
  ☆696Dec 25, 2023Updated 2 years ago
• Fraunhofer-AISEC / cpg-neo4j

  View on GitHub
  Neo4J visualisation tool for the Code Property Graph
  ☆14May 17, 2021Updated 4 years ago
• javaweb-rasp / rasp

  View on GitHub
  ☆20Jan 16, 2024Updated 2 years ago
• CHYbeta / CVE-2017-11427-DEMO

  View on GitHub
  The Demo for CVE-2017-11427
  ☆12Mar 3, 2018Updated 7 years ago