Search

Security · Java · By wgpsec

6 skills found.
Search results
#SkillRepositoryStarsUsed inTokensAuto-checkLicenceUpdated
1

CTF 挑战中的源码审计方法。当发现 .git 目录、.bak/.zip 备份、/proc/self/environ 泄露源码时使用。与真实代码审计不同——CTF 源码中的漏洞是故意设置的,通常只有 1-2 个关键点。先找危险函数(sink),再追溯输入(source)到该函数的路径。覆盖 PHP/Python/Node.js/Java 四种语言的危险函数和漏洞模式

wgpsec/AboutSecurity1.8k—~1.4kAutomated safety check: NotesNo licenceyesterday
2

Java 源码认证与配置安全审计。当在 Java 白盒审计中需要检测认证绕过、权限缺陷或安全配置问题时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity1.8k—~888Automated safety check: PassNo licenceyesterday
3

Java 源码文件操作类漏洞审计。当在 Java 白盒审计中需要检测文件相关漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity1.8k—~989Automated safety check: PassNo licenceyesterday
4

Java 框架特定漏洞源码审计。当在 Java 白盒审计中需要检测框架层面的已知漏洞模式时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity1.8k—~1.3kAutomated safety check: PassNo licenceyesterday
5

Java 源码前端安全类漏洞审计。当在 Java 白盒审计中需要检测前端安全漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity1.8k—~1.4kAutomated safety check: PassNo licenceyesterday
6

Java 源码序列化类漏洞审计。当在 Java 白盒审计中需要检测序列化/反序列化相关漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity1.8k—~1kAutomated safety check: PassNo licenceyesterday