Skip to content

A widget for distinguishing between common Jar dependency and internal Jar一个用于区分内部Jar和通用第三方Jar的小工具

Notifications You must be signed in to change notification settings

whocansee/Jar-Classifier

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 

Repository files navigation

Intro

In the code audit, often encounter lib contains project internal Jar package situation, how to quickly and accurately distinguish between internal Jar and third-party common Jar?

In addition to commercial SCA software, you may be able to try my humble little tool!

在代码审计中,经常会遇到lib中包含项目内部Jar包的情况,如何快速准确的区分开内部Jar与第三方通用Jar?

除了商业SCA软件,你或许可以试试我这个简陋的小工具

Usage

You need:

  • a folder with the Jar packages to be classified,
  • a folder for the results of the classification
  • and the package keyword for the internal Jar as you can see it with your naked eye.

Then run:

java -jar Jar-Classifier.jar

你需要:

  • 一个存放了待分类Jar包的文件夹
  • 一个用于存放分类结果的文件夹
  • 以及你肉眼观察出的内部Jar的package关键字

然后运行:

java -jar Jar-Classifier.jar

Image

image-20240418180142967

更新计划

  • 实现另一种分类思路,维护一份通用Jar关键字名单,筛选出第三方Jar
  • 支持多个关键字识别
  • 提供纯命令行参数运行模式

About

A widget for distinguishing between common Jar dependency and internal Jar一个用于区分内部Jar和通用第三方Jar的小工具

Resources

Stars

Watchers

Forks

Packages

 
 
 

Languages