- Java:17
- 使用git lfs下载jadx依赖
本系统还支持在线代码审计,及AI辅助审计
根目录下放置.env文件,配置AI辅助审计:
AI_BASE_URL=https://api.siliconflow.cn/v1
AI_MODEL=deepseek-ai/DeepSeek-V3.2-Exp
AI_API_KEY=sk-yourkey
本系统基于如下的Gadget Chain检测工具进行开发:
- PFortifier: Mitigating PHP Object Injection Through Automatic Patch Generation,发表于2025 IEEE Symposium on Security and Privacy (SP)
- Precise and effective gadget chain mining through deserialization guided call graph construction,发表于Proceedings of the 34th USENIX Conference on Security Symposium


