Repositories list

• DongTai

  Public
  Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

  Python

  •

  Apache License 2.0

  •147•1.3k•39•11•Updated Dec 26, 2024Dec 26, 2024

• Dongtai-Base-Image

  Public
  DongTai-Base-Image is used to build DongTai's basic services, including MySql, Redis

  PLpgSQL

  •

  Apache License 2.0

  •12•8•0•1•Updated Dec 18, 2024Dec 18, 2024

• DongTai-website

  Public
  DongTai-website

  HTML

  •6•1•0•0•Updated Sep 14, 2024Sep 14, 2024

• DongTai-docs

  Public
  TypeScript

  •

  Apache License 2.0

  •16•3•1•1•Updated Aug 29, 2024Aug 29, 2024

• DongTai-agent-java

  Public
  Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

  iastdevsecopsappsec-tutorials+ 5applicationsecuritymonitoringdongtai-iastsecurity-scanjavaagent

  Java

  •

  Apache License 2.0

  •195•685•11•1•Updated Dec 25, 2023Dec 25, 2023

• DongTai-web

  Public
  dongtai web is the front-end project of "huoxian DongTaiIast" and is responsible for page display

  csshtmltypescript+ 3vueiastdongtai

  CSS

  •

  Apache License 2.0

  •24•16•4•2•Updated Nov 3, 2023Nov 3, 2023

• range-all

  Public
  Shell

  •

  Apache License 2.0

  •2•0•0•0•Updated Oct 26, 2023Oct 26, 2023

• kubectl-helm-action

  Public
  A Github action for using kubectl and helm to deploy applications to Kubernetes cluster

  Shell

  •

  MIT License

  •23•0•0•0•Updated Oct 26, 2023Oct 26, 2023

• DongTai-Plugin-IDEA

  Public
  Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

  securitycode-qualityidea-plugin+ 6intellij-platformiastdevsecopsappsec-tutorialsapplicationsecuritymonitoringdongtai-iast

  Java

  •

  Apache License 2.0

  •18•27•4•0•Updated Oct 17, 2023Oct 17, 2023

• tantivy-py

  Public
  Python bindings for Tantivy

  Rust

  •

  MIT License

  •64•0•0•0•Updated Oct 7, 2023Oct 7, 2023

• Dongtai_USB

  Public
  Go

  •

  Apache License 2.0

  •2•2•0•0•Updated Aug 30, 2023Aug 30, 2023

• action-generic-handler

  Public
  Shell

  •

  MIT License

  •7•0•0•0•Updated Jul 4, 2023Jul 4, 2023

• CloudSecWiki

  Public
  CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp.

  cloudwikicloud-native+ 1cloud-security

  JavaScript

  •

  Apache License 2.0

  •12•46•0•8•Updated Mar 15, 2023Mar 15, 2023

• DongTai-agent-go

  Public
  Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Go application by dynamic hooks.

  Go

  •

  Apache License 2.0

  •20•41•7•3•Updated Feb 10, 2023Feb 10, 2023

• TerraformGoat

  Public
  TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

  securityterraformgcp+ 6aws-securitycloudsecuritycloud-securityazure-securitygcp-securitykubernetes-security

  HCL

  •

  Apache License 2.0

  •85•545•4•0•Updated Nov 30, 2022Nov 30, 2022

• DongTai-agent-java-1

  Public
  Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

  Java

  •

  Apache License 2.0

  •195•0•0•0•Updated Jul 15, 2022Jul 15, 2022

• DongTai-agent-python

  Public
  Python Agent is a Python application probe of DongTai IAST, which collects method invocation data during runtime of Python application by dynamic hooks.

  C

  •

  Apache License 2.0

  •18•23•2•1•Updated Jun 6, 2022Jun 6, 2022

• dongtai-grpc-range

  Public
  HTML

  •3•0•0•0•Updated May 26, 2022May 26, 2022

• kafka-demo

  Public
  Java

  •0•0•0•0•Updated May 17, 2022May 17, 2022

• DongTai-openapi

  Public archive
  DongTai-openapi is used to process probe registration, issue hook strategies, receive method call data/component data/error log/heartbeat data, issue vulnerability detection tasks, issue packet replay data, etc.

  devsecopsdongtai-iastdongtai

  Python

  •

  Apache License 2.0

  •20•5•0•0•Updated Apr 20, 2022Apr 20, 2022

• DongTai-engine

  Public archive
  This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, …

  dockerdjangocode-quality+ 6iastappsec-tutorialssecuityapplicationsecuritymonitoringdongtai-iastdongtai

  Python

  •

  Apache License 2.0

  •23•20•6•0•Updated Apr 12, 2022Apr 12, 2022

• dongtai-grpc-pb

  Public
  0•0•0•0•Updated Apr 8, 2022Apr 8, 2022

• DongTai-webapi

  Public archive
  DongTai-WebAPI is the server part of the management tool of DongTai-IAST

  securitydjangodjango-rest-framework+ 4appseciastdongtai-iastdongtai

  Python

  •

  Apache License 2.0

  •17•8•5•1•Updated Mar 27, 2022Mar 27, 2022

• dongtai-core

  Public
  Provides the Django Model class that the DongTai project depends on, the Django API abstract class of the DongTai project, the vulnerability detection engine, constants, documents, etc.

  securitydjangodevsecops+ 3applicationsecuritymonitoringdongtai-iastdongtai

  Python

  •

  Apache License 2.0

  •13•5•2•0•Updated Mar 25, 2022Mar 25, 2022

• landscape

  Public
  🌄The Cloud Native Interactive Landscape filters and sorts hundreds of projects and products, and shows details including GitHub stars, funding or market cap, first and last commits, contributor counts, headquarters location, and recent tweets.

  Apache License 2.0

  •2k•0•0•0•Updated Feb 17, 2022Feb 17, 2022

• DongTai-SDK-Python

  Public
  DongTai API SDK

  Python

  •

  Apache License 2.0

  •5•51•2•0•Updated Jan 18, 2022Jan 18, 2022

• OpenRuntimePatch

  Public
  OpenPatch is committed to adding soft patches to the software to solve security risks

  Java

  •1•0•0•0•Updated Dec 18, 2021Dec 18, 2021

• DongTai-agent-java-demo

  Public
  Java

  •

  Apache License 2.0

  •1•1•0•0•Updated Nov 30, 2021Nov 30, 2021

• DongTai-Plugin-Eclipse

  Public
  DongTai-Plugin-Eclipse

  Apache License 2.0

  •0•0•0•0•Updated Nov 4, 2021Nov 4, 2021

• DongTai-Benchmark

  Public
  DongTai agent performance test

  Java

  •

  Apache License 2.0

  •3•2•0•0•Updated Sep 24, 2021Sep 24, 2021