Coder Social home page Coder Social logo

cafje's Introduction

CAFJE

Code Audit For Java Enterprise

一个代码审计的工具，计划包含以下分析引擎：

  1. 语义分析:分析程序中不安全的函数,方法的使用的安全问题
  2. 配置分析:分析项目配置文件中的敏感信息和配置缺失的安全问题
  3. 数据流分析:跟踪,记录并分析程序中的数据传递过程的安全问题
  4. 控制流分析:分析程序特定时间,状态下执行操作指令的安全问题
  5. 结构分析:分析程序上下文环境,结构中的安全问题

目前完成：

正则匹配.....=-=，即引擎2（部分），规则还需优化

用法

java -jar CAFJE.jar config.properties

Rules

SSRF.xml 服务端请求伪造
UserInfoLeak.xml 用户信息泄露
SQLiHibernate.xml
File.xml 操作文件
XXE.xml XXE
Exec.xml 命令执行
SQLiIbatis.xml
IntranetIPLeak.xml
SQLiJdbc.xml
SQLiMybatis.xml
FilePathManipulation.xml 操作文件路径
XSS.xml XSS
DemoRule.xml 规则Demo
URL-Redirect.xml
ObjectDeserialization.xml 反序列化
FileUpload.xml 文件上传

更多：CAFJE 又一个Java Web代码审计工具

cafje's People

Contributors

mtxiaowangzi avatar

Watchers

avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.