TABBY

English Version

TABBY is a Java Code Analysis Tool based on Soot .

It can parse JAR/WAR/CLASS files to CPG (Code Property Graph) based on Neo4j .

TABBY Java The 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2023)DSN2023

TABBY Soot JAR/WAR/CLASS Neo4j CPG

Note: discussions

Note: Welcome to new a discussion at discussions about TABBY!

#1

Tabby

• JAVA
• Neo4j
• Neo4j Browser Neo4j

Tabby Quick Start

#2 Tabby

Tabby

tabby 1.2.0

• Java HessianXStream
• Web WAR/JAR/FATJAR/JSP/CLASS

tabby Neo4j /

#3

• CVE-2021-21346 Java
• CVE-2021-21351
• CVE-2021-39147
• CVE-2021-39148
• CVE-2021-39152 m0d9
• CVE-2021-43297
• CVE-2022-39198 yemoli
• Java ysomap
• Neo4j tabby-path-finder
• • KCon 2022 Tabby: Java Code Review Like A Pro

#4

#5 &

Java PHPGI tabby tabby tabby tabby Java

tabby tabby

tabby

tabby XD

PR issue

• soot
• gadgetinspector
• ysoserial marshalsec