A Java Rasp Demo
☆103Dec 2, 2021Updated 4 years ago
Alternatives and similar repositories for javaopenrasp
Users that are interested in javaopenrasp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆28Jul 18, 2020Updated 6 years ago
- ☆10Jan 4, 2015Updated 11 years ago
- a passive scanner based on Mitmproxy and Arachni☆105Aug 17, 2017Updated 9 years ago
- 专注于JVM的运行时防御系统RASP☆297Jun 14, 2024Updated 2 years ago
- 简单实现的 Java RASP☆36Oct 14, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆37Oct 26, 2021Updated 5 years ago
- 备份下比赛附件☆22Jan 23, 2023Updated 3 years ago
- IAST 灰盒扫描工具☆448Jul 19, 2022Updated 4 years ago
- 🔥Open source RASP solution☆2,990Oct 2, 2025Updated last year
- Golang bindings for libinjection☆11May 22, 2015Updated 11 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆51Aug 8, 2023Updated 3 years ago
- rmi、jndi、ldap、jrmp、jmx、jms一些demo测试☆310Jun 17, 2022Updated 4 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆454Mar 24, 2022Updated 4 years ago
- OpenRASP 漏洞测试环境☆314Oct 31, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 《Spring漏洞研究》☆47Apr 26, 2022Updated 4 years ago
- ☆14Jan 7, 2019Updated 7 years ago
- BkScanner 分布式、插件化web漏洞扫描器☆105Jan 15, 2016Updated 10 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆699Dec 25, 2023Updated 2 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago
- JAVA IAST Example☆48Dec 13, 2021Updated 4 years ago
- ☆94Oct 3, 2026Updated last month
- Shiro-721 Padding Oracle Attack☆73Jun 4, 2021Updated 5 years ago
- 一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)☆173Jan 4, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A web vulnerability scanner framework☆138May 22, 2016Updated 10 years ago
- WEB 跨域postMessage() 漏洞挖掘工具,基本原理:使用AJAX 获取页面代码,结合iframe 和data 协议构造测试环境,然后在iframe 下的window.onmessage 中插入hook 监控onmessage 的参数,最后通过能否被原来的onme…☆11Sep 13, 2016Updated 10 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,093Jun 15, 2021Updated 5 years ago
- Native Java serialization filter blacklist for common gadgets☆20Sep 12, 2019Updated 7 years ago
- 利用链、漏洞检测工具☆376Jul 31, 2024Updated 2 years ago
- Ph4nt0m Webzine☆40Mar 21, 2015Updated 11 years ago
- fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java☆402Dec 16, 2022Updated 3 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆390Apr 16, 2022Updated 4 years ago
- 当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆87Jul 21, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler☆19Dec 24, 2013Updated 12 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Jan 31, 2017Updated 9 years ago
- Python 探针实现原理☆29Apr 6, 2016Updated 10 years ago
- 用于快速探测未授权MongoDB数据库结构，取第一条内容，并统计数据数量。A tool for unauthorized MongoDB database , take the first content, and the number of statistical da…☆26Dec 5, 2016Updated 9 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆320Dec 9, 2021Updated 4 years ago
- Feigong，针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script☆106Jan 24, 2017Updated 9 years ago