wdeilim / Audit-Rules
A curated list of audit rules which extract from Source Code Auditing tools.
☆13Updated 4 years ago
Alternatives and similar repositories for Audit-Rules:
Users that are interested in Audit-Rules are comparing it to the libraries listed below
- ☆131Updated 2 years ago
- Java 反序列化学习的实验代码 Java_deserialize_vuln_lab☆87Updated 6 years ago
- PHP Static Program Analysis☆40Updated last year
- ☆58Updated 4 years ago
- 一些Java RASP demo☆11Updated 5 years ago
- Java After-Deserialization Attack☆79Updated 3 years ago
- ☆41Updated 3 years ago
- bypass JEP290 RaspHook code☆62Updated 4 years ago
- 个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。☆60Updated 4 years ago
- Struts2 vuln env☆43Updated 2 years ago
- TongASDP漏洞测试环境☆34Updated last year
- 关于Struts2框架的历史漏洞个人分析文章☆53Updated 4 years ago
- ☆28Updated 4 years ago
- solution to buggyLoader of 0CTF/TCTF 2021 Finals☆20Updated 3 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆24Updated 5 years ago
- ☆80Updated 7 years ago
- A benchmark to evaluate taint analysis☆30Updated 2 years ago
- kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609☆90Updated 5 years ago
- ☆72Updated 2 years ago
- struts2 漏洞环境源代码☆75Updated 2 years ago
- ☆58Updated 4 years ago
- GreHack 2021 CodeQL for Java workshop☆75Updated 3 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆52Updated last year
- Writeup and environment for XCTF2021Final-Dubbo☆44Updated 3 years ago
- python audit tool 审计 注入 inject☆34Updated 8 years ago
- Phantom eye——A passive business logic vulnerability auditing tool☆56Updated 5 years ago
- java xxe defense demo☆47Updated 5 years ago
- Spring Boot Actuator + Spring Cloud Vul Env☆19Updated 5 years ago
- fastjson-1.2.47☆66Updated 5 years ago
- 总结了一下2019年在JVM环境中使用XXE攻击的知识☆57Updated 5 years ago