{"id":13389876,"url":"https://github.com/Cryin/JavaID","last_synced_at":"2025-03-13T14:32:15.007Z","repository":{"id":108853078,"uuid":"111639821","full_name":"Cryin/JavaID","owner":"Cryin","description":"java source code static code analysis and danger function identify prog","archived":false,"fork":false,"pushed_at":"2019-02-18T08:16:02.000Z","size":32,"stargazers_count":532,"open_issues_count":0,"forks_count":119,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-03-11T23:35:26.313Z","etag":null,"topics":["java-code-audit","web-security"],"latest_commit_sha":null,"homepage":"https://github.com/Cryin/JavaID","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Cryin.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-11-22T05:22:43.000Z","updated_at":"2025-02-17T11:06:43.000Z","dependencies_parsed_at":"2023-04-15T22:47:05.483Z","dependency_job_id":null,"html_url":"https://github.com/Cryin/JavaID","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryin%2FJavaID","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryin%2FJavaID/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryin%2FJavaID/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryin%2FJavaID/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Cryin","download_url":"https://codeload.github.com/Cryin/JavaID/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243422687,"owners_count":20288502,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["java-code-audit","web-security"],"created_at":"2024-07-30T13:01:37.155Z","updated_at":"2025-03-13T14:32:14.648Z","avatar_url":"https://github.com/Cryin.png","language":"Python","readme":"# JavaID\njava source code danger function identify prog\n\n# How does it work?\n JavaID identify some dangerous functions in java source code by way of regular matching.\n \n For further details, check out the source code on the main site, github.com/Cryin/JavaID.\n \n# What does it identify?\n\n ```\n XXE:\n    \"SAXReader\",\n    \"DocumentBuilder\",\n    \"XMLStreamReader\",\n    \"SAXBuilder\",\n    \"SAXParser\",\n    \"XMLReader\",\n    \"SAXSource\",\n    \"TransformerFactory\",\n    \"SAXTransformerFactory\",\n    \"SchemaFactory\",\n    \"Unmarshaller\",\n    \"XPathExpression\"\n\nJavaObjectDeserialization:\n    \"readObject\",\n    \"readUnshared\",\n    \"Yaml.load\",\n    \"fromXML\",\n    \"ObjectMapper.readValue\",\n    \"JSON.parseObject\"\nSSRF:\n    \"HttpClient\",\n    \"Socket\",\n    \"URL\",\n    \"ImageIO\",\n    \"HttpURLConnection\",\n    \"OkHttpClient\" \n    \"SimpleDriverDataSource.getConnection\"\n    \"DriverManager.getConnection\"\nFILE:\n    \"MultipartFile\",\n    \"createNewFile\",\n    \"FileInputStream\"\nSPelInjection:\n    \"SpelExpressionParser\",\n    \"getValue\"\nAutobinding:\n    \"@SessionAttributes\",\n    \"@ModelAttribute\"\nURL-Redirect:\n    \"sendRedirect\",\n    \"forward\",\n    \"setHeader\"\nEXEC:\n    \"getRuntime.exec\",\n    \"ProcessBuilder.start\",\n    \"GroovyShell.evaluate\"\n ```\n \n and so on...\n \n Also you can add function id with regexp.xml!\n \n# How do I use it?\n\n Usage: python javaid.py -d dir\n \n# Questions?\n\n contact me :)\n","funding_links":[],"categories":["Python (1887)","Python"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FCryin%2FJavaID","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FCryin%2FJavaID","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FCryin%2FJavaID/lists"}