483 matches found
static-code-analysis-helper
静的コード解析ヘルパー 説明 プロジェクトフォルダ内の多くのWebプログラミング言語およびフレームワークにおいて、攻撃手法を引き起こす可能性が高い関数を検出します。 静的コード解析の実施を支援します。 注：ここで説明する関数の多くは、必ずしも脆弱性を引き起こすとは限りません。 スクリーンショット 対応プログラミング言語 Go Python Ruby PHP JavaScript Java Rust Perl Ruby on Rails Swift Golang Scala Kotlin Julia Dart ASP.NET Core 結果に関連する攻撃の種類...
Joern 4.0.646
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
osed-scripts
osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...
vulnerable-code-snippets
脆弱性コードスニペット 脆弱性 | プログラミング言語 | 脆弱性コードスニペットの実行 | インストール | 更新 YesWeHack は、安全な Docker 環境でコード分析の練習ができる、さまざまな脆弱性を含むコードスニペットを提供します。この脆弱性コードスニペットは、あらゆるスキルレベルに適しています。 毎週金曜日に Twitter @yeswehack で新しい脆弱性コードスニペット を公開しています！ 🗒 特別なものをご希望の場合や、脆弱性コードスニペットについてアイデアがある場合は、お気軽に "New Issue"...
whispers
Whispers "내 작은 새들은 어디에나 있어, 북쪽에도 있지. 그들은 나에게 가장 이상한 이야기들을 속삭여." - 바리스 경 Whispers는 하드코딩된 자격 증명과 위험한 함수를 찾기 위해 다양한 일반적인 데이터 형식을 분석하도록 설계된 정적 코드 분석 도구입니다. Whispers는 CLI에서 실행하거나 CI/CD 파이프라인에 통합할 수 있습니다. 감지 항목 비밀번호 API 토큰 AWS 키 개인 키 해시된 자격 증명 인증 토큰 위험한 함수 민감한 파일 지원되는 형식 Whispers는 구조화된 텍스트 파서로 설계되었으며, ...
Joern 4.0.645
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
cabir_analysis
description: Bluetooth-Worm:SymbOS/Cabir 분석 Bluetooth-Worm:SymbOS/Cabir 분석 읽기 시작하기 전에, 공지 하나 할게 있음 : 여기 적힌 모든 내용은 그냥 걸러들어. 나는 SymbianOS 개발자도, SymbianOS 환경에 익숙한 사람도 전혀 아니니까. 그런데 왜 이렇게 오래된 걸 분석하는 거지? 음, 왜냐하면 이게 리모트 해킹에 입문하기 가장 쉬운 방법이기 때문이야. 요즘 이런 유형의 짓은 1백만 달러 가치의 ndays/0days로 이루어지거든 🤑🤑🤑. 그리고 나는 아직...
Joern 4.0.644
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.643
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.641
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.640
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.639
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.637
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.636
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.635
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
shannon v3.3.0
!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...
Joern 4.0.633
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Joern 4.0.631
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
CodeQL 1.27.0
Discover vulnerabilities across a codebase with CodeQL, an industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same...
Joern 4.0.630
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...