Alternatives and similar repositories for GadgetProbe

Users that are interested in GadgetProbe are comparing it to the libraries listed below

• BishopFox / rmiscout
  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
  ☆437Updated 2 years ago
• veracode-research / solr-injection
  Apache Solr Injection Research
  ☆578Updated 5 years ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆634Updated last year
• 0xacb / viewgen
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆628Updated 6 months ago
• httpvoid / CVE-Reverse
  ☆282Updated 3 years ago
• noperator / CVE-2019-18935
  RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.
  ☆358Updated 3 years ago
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆349Updated 2 years ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆332Updated last year
• pyn3rd / Spring-Boot-Vulnerability
  ☆407Updated 3 years ago
• NickstaDB / BaRMIe
  Java RMI enumeration and attack tool.
  ☆738Updated 7 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆630Updated last year
• veracode-research / spring-view-manipulation
  When MVC magic turns black
  ☆293Updated 4 years ago
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.
  ☆267Updated 6 months ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆789Updated 3 years ago
• mogwailabs / mjet
  MOGWAI LABS JMX exploitation toolkit
  ☆203Updated 2 years ago
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆604Updated 6 years ago
• duc-nt / RCE-0-day-for-GhostScript-9.50
  RCE 0-day for GhostScript 9.50 - Payload generator
  ☆547Updated 3 years ago
• qtc-de / beanshooter
  JMX enumeration and attacking tool.
  ☆454Updated last month
• NotSoSecure / Blacklist3r
  project-blacklist3r
  ☆569Updated 4 months ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆578Updated 3 years ago
• pimps / ysoserial-modified
  That repository contains my updates to the well know java deserialization exploitation tool ysoserial.
  ☆182Updated 3 years ago
• qtc-de / remote-method-guesser
  Java RMI Vulnerability Scanner
  ☆883Updated last year
• chipik / SAP_RECON
  PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)
  ☆221Updated 4 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆253Updated 2 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆490Updated last year
• nccgroup / LoggerPlusPlus
  Advanced Burp Suite Logging Extension
  ☆672Updated last year
• joaomatosf / JavaDeserH2HC
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆508Updated 3 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆882Updated 3 years ago
• Bo0oM / WAF-bypass-Cheat-Sheet
  Another way to bypass WAF Cheat Sheet (draft)
  ☆428Updated 6 years ago
• SecurityRiskAdvisors / cmd.jsp
  A super small jsp webshell with file upload capabilities.
  ☆301Updated 3 years ago