A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
☆54Mar 27, 2017Updated 9 years ago
Alternatives and similar repositories for break-fast-serial
Users that are interested in break-fast-serial are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website☆142Apr 29, 2020Updated 6 years ago
- S2-055的环境，基于rest-show-case改造☆37Dec 7, 2017Updated 8 years ago
- some java code i met or i used☆30May 7, 2019Updated 7 years ago
- Lansweeper Password Recovery Tool☆11Jul 2, 2016Updated 10 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆215Aug 17, 2017Updated 9 years ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- RCE Exploit PoC for XMLDecoder☆62Aug 1, 2013Updated 13 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆47Mar 22, 2017Updated 9 years ago
- PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM☆52Mar 14, 2018Updated 8 years ago
- ☆18Sep 22, 2018Updated 8 years ago
- A collection of curated Java Deserialization Exploits☆592May 16, 2021Updated 5 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆390Apr 16, 2022Updated 4 years ago
- Exploiting the HippoConnect protocol for HippoRemote☆10Jan 13, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- spring mvc cve-2014-3625☆32Mar 11, 2016Updated 10 years ago
- Java-Web-Security - Sichere Webanwendungen mit Java entwickeln☆222Oct 15, 2026Updated 2 weeks ago
- CVE-2017-7269 回显PoC ,用于远程漏洞检测..☆89Oct 27, 2018Updated 8 years ago
- Malicious PDF document parsing tool☆16Nov 1, 2017Updated 8 years ago
- Post module for Metasploit to execute ELF in memory☆85Nov 23, 2018Updated 7 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- ☆72Nov 20, 2017Updated 8 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆102Jun 1, 2018Updated 8 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆172Oct 11, 2017Updated 9 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Burp extension☆58Jun 18, 2018Updated 8 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆518Jul 29, 2020Updated 6 years ago
- 2 web tasks from ZeroNights HackQuest 2016☆49Mar 24, 2017Updated 9 years ago
- Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers.☆80Aug 28, 2017Updated 9 years ago
- Merge results from NMAP and Masscan into one CSV file☆18Jun 19, 2018Updated 8 years ago
- CVE-2018-3245-PoC☆172Jul 13, 2021Updated 5 years ago
- An Out-of-Band XXE server for retrieving file contents over FTP.☆185May 27, 2020Updated 6 years ago
- --= Xt9 - Anti - Rootkit =-- beta v0.11 by xti9er☆15Dec 16, 2020Updated 5 years ago
- CVE-2018-6546-Exploit☆41Apr 15, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- a passive scanner based on Mitmproxy and Arachni☆105Aug 17, 2017Updated 9 years ago
- Java RMI enumeration and attack tool.☆750Sep 28, 2017Updated 9 years ago
- Exploit insecure crossdomain.xml files.☆26Apr 25, 2017Updated 9 years ago
- ☆267Mar 19, 2019Updated 7 years ago
- ☆146Jun 20, 2018Updated 8 years ago
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- Java serialization brute force attack tool.☆125Aug 18, 2017Updated 9 years ago