vsdwef/StarCodeSecurity external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

vsdwef/StarCodeSecurity

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/vsdwef/StarCodeSecurity)

Close

vsdwef / StarCodeSecurityView on GitHubMore

• External links
• Readme badge

这是一款图形化的代码审计工具，支持对规则进行增删改查。可协助代码审计人员在日常代审中对于规则的积累。其中配置页面可配置：审计文件后缀、审计路径关键字、禁止审计路径关键字。支持 java php net项目审计。

☆124Jan 16, 2025Updated last year

Alternatives and similar repositories for StarCodeSecurity

Users that are interested in StarCodeSecurity are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• pureqh / xxl-job-attack

  View on GitHub
  xxl-job漏洞综合利用工具
  ☆151Jun 3, 2025Updated 10 months ago
• CllmsyK / YYBaby-Spring_Scan

  View on GitHub
  一款针对Spring框架的漏洞扫描及漏洞利用图形化工具
  ☆218Mar 4, 2025Updated last year
• VirgoLee / Virgol

  View on GitHub
  Virgol渗透测试工具
  ☆96Jun 11, 2025Updated 9 months ago
• P001water / P1soda

  View on GitHub
  一款渗透场景下的内网漏洞自动化扫描工具
  ☆365Jun 8, 2025Updated 10 months ago
• 0x584A / Plumb

  View on GitHub
  一个轮子，用于渗透测试优化的 DNS/HTTP 日志工具，简洁、轻便、更易于使用。
  ☆16Sep 29, 2024Updated last year
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• 7wkajk / Frchannel

  View on GitHub
  帆软bi反序列化漏洞利用工具
  ☆418Jan 25, 2025Updated last year
• K-7H7l / Jeecg_Tools

  View on GitHub
  本工具为jeecg框架漏洞利用工具非jeecg-boot！
  ☆183Aug 13, 2024Updated last year
• Chanzi-keji / chanzi

  View on GitHub
  "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability ru…
  ☆484Feb 1, 2026Updated 2 months ago
• Lotus6 / JavaGadgetGenerator

  View on GitHub
  JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...
  ☆560Updated this week
• h0ny / NacosExploit

  View on GitHub
  Nacos 综合漏洞利用工具
  ☆603Nov 3, 2025Updated 5 months ago
• BambiZombie / FrchannelPlus

  View on GitHub
  帆软bi反序列化漏洞利用工具
  ☆192Mar 23, 2024Updated 2 years ago
• eeeeeeeeee-code / e0e1-config

  View on GitHub
  综合后渗透方面的杂烩
  ☆580Mar 1, 2026Updated last month
• z-bool / Venom-JWT

  View on GitHub
  针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …
  ☆283Aug 12, 2025Updated 7 months ago
• JaveleyQAQ / SQL-Injection-Scout

  View on GitHub
  SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。
  ☆247Feb 6, 2026Updated 2 months ago
• Wordpress hosting with auto-scaling on Cloudways • Ad
  Fully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
• vsdwef / James_synthesis_tooL

  View on GitHub
  旨在帮助技术人员在日常渗透测试或攻防演练中对于漏洞及指纹的积累，形成自己强大的漏洞库及指纹库。相比于nuclei脚本可能会相对无脑简化！且采用GUI设置，使用起来也更加方便！
  ☆49Jan 16, 2025Updated last year
• 0ofo / Deswing

  View on GitHub
  图形化Java反序列化利用工具，集成Ysoserial
  ☆353May 8, 2024Updated last year
• pureqh / Hyacinth

  View on GitHub
  一款java漏洞集合工具
  ☆1,114Jan 13, 2026Updated 2 months ago
• lxflxfcl / DTGO

  View on GitHub
  DTGO (灯塔狩猎者) 是一个用于批量管理和监控资产灯塔系统任务的图形化工具。它能够自动发现灯塔系统、批量提交任务、监控任务状态，并支持导出任务结果。
  ☆37Feb 10, 2025Updated last year
• Zjackky / CodeScan

  View on GitHub
  一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具
  ☆409Oct 6, 2024Updated last year
• kk12-30 / RouteVulScan_go

  View on GitHub
  递归式主动检测脆弱路径的工具
  ☆17Mar 24, 2025Updated last year
• Di-duo / HostAttack

  View on GitHub
  一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。
  ☆13Mar 7, 2025Updated last year
• Conan924 / GodInfo

  View on GitHub
  GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。
  ☆246Apr 29, 2025Updated 11 months ago
• chasingboy / dirsx

  View on GitHub
  dirsx 是一款能够自动化过滤扫描结果的目录扫描工具
  ☆359Mar 12, 2026Updated 3 weeks ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
• T3nk0 / CScan

  View on GitHub
  CScan 是一个基于Go语言开发的网络空间资产搜索工具，支持多个主流网络空间搜索引擎：FOFA Hunter Quake，能够快速搜索IP、域名等资产信息。
  ☆40Jan 16, 2025Updated last year
• wh1t3zer / SpringBootVul-GUI

  View on GitHub
  一个半自动化springboot打点工具，内置目前springboot所有漏洞
  ☆779Sep 30, 2025Updated 6 months ago
• Scorcsoft / forBy

  View on GitHub
  一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具。
  ☆95Mar 26, 2025Updated last year
• DeEpinGh0st / MDUT-Extend-Release

  View on GitHub
  MDUT-Extend(扩展版本)
  ☆907Mar 27, 2026Updated last week
• errors11 / TomcatVuln

  View on GitHub
  Tomcat漏洞利用工具
  ☆317Nov 29, 2024Updated last year
• M0untainShley / FEExploit

  View on GitHub
  某 FE 平台一键漏洞探测工具，支持单 url 以及批量探测
  ☆33Nov 11, 2024Updated last year
• CRlife / Rscan

  View on GitHub
  自动化扫描利器，指纹识别更精准，漏洞扫描更全面
  ☆379Oct 29, 2025Updated 5 months ago
• perlh / Wavely

  View on GitHub
  Nuclei POC 管理与漏洞验证工具
  ☆536Mar 17, 2026Updated 3 weeks ago
• B0T1eR / ysoSimple

  View on GitHub
  ysoSimple：简易的Java漏洞利用工具，集成Java反序列化，Hessian反序列化，XStream反序列化，SnakeYaml反序列化，Shiro550，JSF反序列化，SSTI模板注入，JdbcAttackPayload，JNDIAttack，字节码生成。
  ☆108Jan 20, 2026Updated 2 months ago
• End-to-end encrypted cloud storage - Proton Drive • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
• xiaogang000 / XG_NTAI

  View on GitHub
  用于Webshell木马免杀、流量加密传输，多多支持star
  ☆1,041Jun 27, 2025Updated 9 months ago
• howmp / WinDump

  View on GitHub
  后渗透信息/密码/凭证收集工具
  ☆289May 7, 2025Updated 11 months ago
• bcvgh / daydayEXP

  View on GitHub
  支持自定义Poc文件的图形化漏洞利用工具
  ☆231Nov 5, 2024Updated last year
• kN6jq / gatherBurp

  View on GitHub
  一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。
  ☆668Mar 20, 2026Updated 2 weeks ago
• lizhianyuguangming / TomcatScanPro

  View on GitHub
  tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含
  ☆286Apr 6, 2025Updated last year
• P001water / P1finger

  View on GitHub
  P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步
  ☆440Aug 5, 2025Updated 8 months ago
• Y5neKO / Y5_VulnHub

  View on GitHub
  个人漏洞收集项目，包括复现环境、POC、EXP等
  ☆30Mar 14, 2025Updated last year