Replies: 3 comments 4 replies
可以识别,内置了一些规则,例如fastjson,您也可以自定义规则 |
0 replies
|
目前有一部分功能是需要联网的,比如登录支付,代码导航下载依赖等 |
3 replies
可以,您看下规则管理,内置规则里包含组件的漏洞,通过分析Maven和gradle来识别依赖组件漏洞,您也可以自己添加规则 |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
我跑了几个项目的发现有越权漏洞,那这个能识别jar依赖的安全漏洞么
All reactions