JQF + Zest: Coverage-guided semantic fuzzing for Java.

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Datadog APM client for Java

用于host碰撞而生的小工具,专门检测渗透中需要绑定hosts才能访问的主机或内部系统

SSRF plugin for burp Automates SSRF Detection in all of the Request

云安全利用工具-云平台AK/SK-WEB利用工具，添加AK/SK自动检测资源，无需手动执行，支持云服务器、存储桶、数据库操作

xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

Java漏洞靶场

获取 alibaba druid 一些 sessions , sql , urls

JAVA 安全靶场，IAST 测试用例，JAVA漏洞复现，代码审计，SAST测试用例，安全扫描（主动和被动），JAVA漏洞靶场，RASP测试用例 ； Java Security Testbed, IAST Test Cases, Java Vulnerability Reproduction, Code Auditing, SAST Test Cases, Security Scanning…

书籍《通用源码阅读指导书——MyBatis源码详解》配套示例

Java编写的Web漏洞靶场

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during applicati…