ramos-dev Goto Github PK

android_code_arbiter

针对Android Studio的源码扫描工具

attackjavac

attackjavac

autosource

Automated SonarQube

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

bom

all security

bsimm-graphs-data

Repo to hold data for BSIMM-Graphs (which imports this as submodule)

coveritycase

cve-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

dependency-track

Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

fastjson

A fast JSON parser/generator for Java.

fastjson-blacklist

git-dependency

扫描GIT仓库Java依赖库

gitpoc

glue

Application Security Automation

graph4code

超硬核！使用图数据技术发现软件漏洞

graphscope

GraphScope: A One-Stop Large-Scale Graph Computing System from Alibaba

incubator-dubbo

Apache Dubbo (incubating) is a high-performance, java based, open source RPC framework.

jndi-injection-bypass

Some payloads of JNDI Injection in JDK 1.8.0_191+

marcus

XssFilter

marshalsec

maturity-models

Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM

mc-rpm

Application whitelist--verify exectuabl/so ELF and script and interp program signature when will running in kernel

osstunnel

基于亚马逊S3\阿里云OSS\腾讯COS通信隧道的远程管理工具

owasp-threat-dragon

An open source, online threat modelling tool from OWASP

pysonar2

pytm

A Pythonic framework for threat modeling

qlexpress

QLExpress is a powerful, lightweight, dynamic language for the Java platform aimed at improving developers’ productivity in different business scenes.

r9000

rmi

securitypaper-web

Security Paper