Alternatives and similar repositories for GadgetProbe:

Users that are interested in GadgetProbe are comparing it to the libraries listed below

• BishopFox / rmiscout
  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
  ☆429Updated 2 years ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆619Updated last year
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆347Updated 2 years ago
• noperator / CVE-2019-18935
  RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.
  ☆353Updated 2 years ago
• httpvoid / CVE-Reverse
  ☆281Updated 3 years ago
• 0xacb / viewgen
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆599Updated 2 weeks ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆327Updated last year
• veracode-research / solr-injection
  Apache Solr Injection Research
  ☆572Updated 5 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆580Updated last year
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆846Updated 3 years ago
• pyn3rd / Spring-Boot-Vulnerability
  ☆402Updated 3 years ago
• NickstaDB / BaRMIe
  Java RMI enumeration and attack tool.
  ☆728Updated 7 years ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆575Updated 3 years ago
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.
  ☆266Updated 3 weeks ago
• pimps / ysoserial-modified
  That repository contains my updates to the well know java deserialization exploitation tool ysoserial.
  ☆177Updated 2 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆780Updated 3 years ago
• mogwailabs / mjet
  MOGWAI LABS JMX exploitation toolkit
  ☆200Updated last year
• qtc-de / beanshooter
  JMX enumeration and attacking tool.
  ☆417Updated 3 weeks ago
• NotSoSecure / Blacklist3r
  project-blacklist3r
  ☆521Updated 2 years ago
• qtc-de / remote-method-guesser
  Java RMI Vulnerability Scanner
  ☆851Updated 7 months ago
• SecurityRiskAdvisors / cmd.jsp
  A super small jsp webshell with file upload capabilities.
  ☆294Updated 3 years ago
• ozzi- / JWT4B
  JWT Support for Burp
  ☆249Updated 6 months ago
• veracode-research / spring-view-manipulation
  When MVC magic turns black
  ☆291Updated 4 years ago
• joaomatosf / JavaDeserH2HC
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆497Updated 2 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆594Updated 3 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆251Updated last year
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆486Updated last year
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆603Updated 5 years ago
• Ridter / cve-2020-0688
  cve-2020-0688
  ☆323Updated last year
• Bo0oM / WAF-bypass-Cheat-Sheet
  Another way to bypass WAF Cheat Sheet (draft)
  ☆418Updated 6 years ago