Burp extension to decode NTLM SSP headers and extract domain/host information
☆31Mar 11, 2021Updated 5 years ago
Alternatives and similar repositories for burp-ntlm-challenge-decoder
Users that are interested in burp-ntlm-challenge-decoder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- Dynamic Identification and Recognition Technology☆11Nov 1, 2016Updated 9 years ago
- Burp and ZAP plugin that display image metadata (JPEG Exif or PNG text chunk).☆16Apr 15, 2023Updated 3 years ago
- Simple socket-based gateway to the Burp Collaborator☆34Nov 23, 2016Updated 9 years ago
- Gophish Python cli to perform huge phishing campaigns☆40Oct 19, 2018Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Wraps sudo; transparently steals user's credentials. For those annoying times when you get a shell/file write on a sudoers account and ne…☆37Nov 15, 2024Updated last year
- A DNS tunnel utilizing the Burp Collaborator☆103Oct 8, 2019Updated 6 years ago
- Scan and categorize websites for rapid triage☆12Jun 23, 2022Updated 4 years ago
- A playground to practice SSRF Attacks against web apps☆17Oct 15, 2018Updated 7 years ago
- Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website☆142Apr 29, 2020Updated 6 years ago
- Simple webinterface combining different recon tools.☆12Mar 2, 2018Updated 8 years ago
- Burp extension for processing requests and responses with Python.☆10Jun 19, 2018Updated 8 years ago
- Burp Suite Professional extension in Java for Tabnabbing attack☆13May 8, 2018Updated 8 years ago
- Repository for dirty scripts and PoCs☆20Feb 18, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.☆96Aug 14, 2018Updated 8 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- Burp Wiener API (Legacy)☆63Dec 1, 2023Updated 2 years ago
- Burp Suite AMF Extension☆49Sep 24, 2018Updated 7 years ago
- For BurpSuite Plugins☆10Jun 25, 2015Updated 11 years ago
- This is a Burp extension for adding additional payloads to active scanner that require out-of-band validation. Works great with XSSHunter☆20Feb 16, 2017Updated 9 years ago
- Active Directory information dumper via LDAP☆13Mar 5, 2020Updated 6 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Mar 27, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Simple mods to wpa_supplicant to allow more efficient online bruting☆21Aug 23, 2019Updated 7 years ago
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Aug 10, 2013Updated 13 years ago
- Ruby interface to cirt.net default passwords database☆18May 4, 2011Updated 15 years ago
- This changes the style of Burp Suite's Repeater tabs to help the testers☆29Jul 3, 2019Updated 7 years ago
- This is a malware repo. Use them at your own risk. This is strictly for educational purposes only.☆13May 22, 2019Updated 7 years ago
- A small webserver vulnerable to insecure deserialization☆21Nov 30, 2017Updated 8 years ago
- Script to help enumerate and dig through Github and Github Enterprise installations.☆15Nov 30, 2018Updated 7 years ago
- SAML2 Burp Extension☆449Feb 24, 2026Updated 6 months ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM☆52Mar 14, 2018Updated 8 years ago
- ☆21Aug 5, 2020Updated 6 years ago
- An Evil OIDC Server☆53Oct 19, 2022Updated 3 years ago
- Automated Google dorking with custom search engines☆26May 2, 2020Updated 6 years ago
- An Extended, Modulair, Host Discovery Framework☆42Jan 22, 2019Updated 7 years ago
- Generate HID attack strings for Kali Nethunter☆13Mar 20, 2015Updated 11 years ago
- Exchange your privileges for Domain Admin privs by abusing Exchange☆15Mar 5, 2020Updated 6 years ago