iast

Sanskrit Trasliterator HK, IAST, DV

PHP Open Iast Agent

A prototype of an Interactive Application Security Testing System

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

DongTai-WebAPI is the server part of the management tool of DongTai-IAST

This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, …

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Contrast Security Instrumentation for Dockerized Webgoat, with lab instructions.

IAST 灰盒扫描工具

A bunch of security CI/CD pipelines cooked and ready

《深入理解IAST交互式应用安全测试》Interactive Application Security Testing.

Sanskrit transliteration and detection gem.

IAST/Telugu Typesetting for the Bhagavad Gita

IaC for IAST of OWASP Juice Shop app.

Transliterator between देवनागरी (devanāgarī) and Latin script based on IAST, Harvard-Kyoto, SLP-1 & ISO-15919 Standards

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

dongtai web is the front-end project of "huoxian DongTaiIast" and is responsible for page display

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.