hxcorp Goto Github PK

benchmarkjava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

benchmarkutils

OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

dongtai-agent-go

Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

dongtai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

dongtai-agent-python

Python Agent is a Python application probe of DongTai IAST, which collects method invocation data during runtime of Python application by dynamic hooks.

dongtai-base-image

DongTai-Base-Image is used to build DongTai's basic services, including MySql, Redis

dongtai-benchmark

DongTai agent performance test

dongtai-core

Provides the Django Model class that the DongTai project depends on, the Django API abstract class of the DongTai project, the vulnerability detection engine, constants, documents, etc.

dongtai-engine

DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, data packet replay processing, etc.

dongtai-govwa

dongtai-go-agent 靶场

dongtai-openapi

DongTai-openapi is used to process probe registration, issue hook strategies, receive method call data/component data/error log/heartbeat data, issue vulnerability detection tasks, issue packet replay data, etc.

dongtai-plugin-idea

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

dongtai-web

dongtai web is the front-end project of "huoxian DongTaiIast" and is responsible for page display

dongtai-webapi

DongTai-WebAPI is used to DongTai IAST user resource management

go-hsperfdata

Quite fast jps/jstat

jattach

JVM Dynamic Attach utility

jrasp-agent

技术细节请参照官网

openruntimepatch

OpenPatch is committed to adding soft patches to the software to solve security risks

privacymethodhooker

init

range-all