Skip to content

@HXSecurity HXSecurity

Change the repository type filter

All

    Repositories list

    32 repositories

    • Dongtai-Base-Image

      Public
      DongTai-Base-Image is used to build DongTai's basic services, including MySql, Redis
      PLpgSQL
      •
      Apache License 2.0
      •13•9•0•1•Updated Dec 4, 2025Dec 4, 2025

    • DongTai

      Public
      Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.
      Python
      •
      Apache License 2.0
      •153•1.3k•43•11•Updated May 22, 2025May 22, 2025

    • kubectl-helm-action

      Public
      A Github action for using kubectl and helm to deploy applications to Kubernetes cluster
      Shell
      •
      MIT License
      •21•0•0•0•Updated Mar 10, 2025Mar 10, 2025

    • DongTai-agent-go

      Public
      Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Go application by dynamic hooks.
      Go
      •
      Apache License 2.0
      •23•42•7•3•Updated Jan 9, 2025Jan 9, 2025

    • DongTai-website

      Public
      DongTai-website
      HTML
      •6•1•0•0•Updated Sep 14, 2024Sep 14, 2024

    • DongTai-docs

      Public
      TypeScript
      •
      Apache License 2.0
      •15•3•1•1•Updated Aug 29, 2024Aug 29, 2024

    • DongTai-agent-java

      Public
      Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.
      javaagentiastdevsecopsappsec-tutorialsapplicationsecuritymonitoringdongtai-iastsecurity-scan
      Java
      •
      Apache License 2.0
      •206•695•11•1•Updated Dec 25, 2023Dec 25, 2023

    • DongTai-web

      Public
      dongtai web is the front-end project of "huoxian DongTaiIast" and is responsible for page display
      csshtmltypescriptvueiastdongtai
      CSS
      •
      Apache License 2.0
      •25•18•4•2•Updated Nov 3, 2023Nov 3, 2023

    • range-all

      Public
      Shell
      •
      Apache License 2.0
      •2•0•0•0•Updated Oct 26, 2023Oct 26, 2023

    • DongTai-Plugin-IDEA

      Public
      Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.
      securitycode-qualityidea-pluginintellij-platformiastdevsecopsappsec-tutorialsapplicationsecuritymonitoringdongtai-iast
      Java
      •
      Apache License 2.0
      •18•32•4•0•Updated Oct 17, 2023Oct 17, 2023

    • tantivy-py

      Public
      Python bindings for Tantivy
      Rust
      •
      MIT License
      •80•0•0•0•Updated Oct 7, 2023Oct 7, 2023

    • Dongtai_USB

      Public
      Go
      •
      Apache License 2.0
      •2•2•0•0•Updated Aug 30, 2023Aug 30, 2023

    • action-generic-handler

      Public
      Shell
      •
      MIT License
      •7•0•0•0•Updated Jul 4, 2023Jul 4, 2023

    • CloudSecWiki

      Public
      CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp.
      cloudwikicloud-nativecloud-security
      JavaScript
      •
      Apache License 2.0
      •12•51•0•8•Updated Mar 15, 2023Mar 15, 2023

    • TerraformGoat

      Public
      TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
      securityterraformgcpaws-securitycloudsecuritycloud-securityazure-securitygcp-securitykubernetes-security
      HCL
      •
      Apache License 2.0
      •94•620•6•1•Updated Nov 30, 2022Nov 30, 2022

    • DongTai-agent-java-1

      Public
      Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.
      Java
      •
      Apache License 2.0
      •206•0•0•0•Updated Jul 15, 2022Jul 15, 2022

    • DongTai-agent-python

      Public
      Python Agent is a Python application probe of DongTai IAST, which collects method invocation data during runtime of Python application by dynamic hooks.
      C
      •
      Apache License 2.0
      •19•23•2•1•Updated Jun 6, 2022Jun 6, 2022

    • dongtai-grpc-range

      Public
      HTML
      •3•0•0•0•Updated May 26, 2022May 26, 2022

    • kafka-demo

      Public
      Java
      •0•0•0•0•Updated May 17, 2022May 17, 2022

    • DongTai-openapi

      Public archive
      DongTai-openapi is used to process probe registration, issue hook strategies, receive method call data/component data/error log/heartbeat data, issue vulnerability detection tasks, issue packet replay data, etc.
      devsecopsdongtai-iastdongtai
      Python
      •
      Apache License 2.0
      •19•4•0•0•Updated Apr 20, 2022Apr 20, 2022

    • DongTai-engine

      Public archive
      This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, …
      dockerdjangocode-qualityiastappsec-tutorialssecuityapplicationsecuritymonitoringdongtai-iastdongtai
      Python
      •
      Apache License 2.0
      •22•20•6•0•Updated Apr 12, 2022Apr 12, 2022

    • dongtai-grpc-pb

      Public
      0•0•0•0•Updated Apr 8, 2022Apr 8, 2022

    • DongTai-webapi

      Public archive
      DongTai-WebAPI is the server part of the management tool of DongTai-IAST
      securitydjangodjango-rest-frameworkappseciastdongtai-iastdongtai
      Python
      •
      Apache License 2.0
      •16•8•5•1•Updated Mar 27, 2022Mar 27, 2022

    • dongtai-core

      Public
      Provides the Django Model class that the DongTai project depends on, the Django API abstract class of the DongTai project, the vulnerability detection engine, constants, documents, etc.
      securitydjangodevsecopsapplicationsecuritymonitoringdongtai-iastdongtai
      Python
      •
      Apache License 2.0
      •13•5•2•0•Updated Mar 25, 2022Mar 25, 2022

    • landscape

      Public
      🌄The Cloud Native Interactive Landscape filters and sorts hundreds of projects and products, and shows details including GitHub stars, funding or market cap, first and last commits, contributor counts, headquarters location, and recent tweets.
      Apache License 2.0
      •2.1k•0•0•0•Updated Feb 17, 2022Feb 17, 2022

    • DongTai-SDK-Python

      Public
      DongTai API SDK
      Python
      •
      Apache License 2.0
      •5•41•2•0•Updated Jan 18, 2022Jan 18, 2022

    • OpenRuntimePatch

      Public
      OpenPatch is committed to adding soft patches to the software to solve security risks
      Java
      •1•0•0•0•Updated Dec 18, 2021Dec 18, 2021

    • DongTai-agent-java-demo

      Public
      Java
      •
      Apache License 2.0
      •1•1•0•0•Updated Nov 30, 2021Nov 30, 2021

    • DongTai-Plugin-Eclipse

      Public
      DongTai-Plugin-Eclipse
      Apache License 2.0
      •0•0•0•0•Updated Nov 4, 2021Nov 4, 2021

    • DongTai-Benchmark

      Public
      DongTai agent performance test
      Java
      •
      Apache License 2.0
      •3•2•0•0•Updated Sep 24, 2021Sep 24, 2021