A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆47Mar 22, 2017Updated 9 years ago
Alternatives and similar repositories for ysoserial
Users that are interested in ysoserial are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Server-side request forgery detector☆165Jun 26, 2017Updated 9 years ago
- A simple CORS misconfiguration scanner☆424Aug 14, 2020Updated 6 years ago
- Note: Going through a full re-write of the tooling so the current versions in the repo do not work!☆417Jul 31, 2026Updated 3 weeks ago
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆11May 19, 2020Updated 6 years ago
- BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…☆563Aug 25, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆482Jan 29, 2021Updated 5 years ago
- Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.☆636Mar 18, 2022Updated 4 years ago
- A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.☆548Jun 12, 2017Updated 9 years ago
- A tool that can help detect and takeover subdomains with dead DNS records☆775Jan 3, 2021Updated 5 years ago
- ☆14Feb 15, 2022Updated 4 years ago
- A tool for embedding XXE/XML exploits into different filetypes☆1,178Dec 16, 2024Updated last year
- joomla com_xcloner exploit [Mass Autoexploiting script coded with python]☆13Apr 29, 2019Updated 7 years ago
- ☆14Apr 9, 2019Updated 7 years ago
- CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.☆1,176Dec 1, 2021Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Automatically exported from code.google.com/p/cms-explorer☆24Mar 30, 2015Updated 11 years ago
- Auto CMS detector☆11Dec 29, 2017Updated 8 years ago
- A default credential scanner.☆1,516Jul 8, 2025Updated last year
- Find exploits in local and online databases instantly☆1,844Sep 27, 2021Updated 4 years ago
- [discontinued] Mass exploiter of CVE 2015-8562 for Joomla! CMS☆23Nov 17, 2017Updated 8 years ago
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,797Dec 1, 2024Updated last year
- wp content injection mass exploit Perl Script☆12Jul 11, 2017Updated 9 years ago
- ☆1,277Dec 17, 2024Updated last year
- Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.☆1,814Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Unix Based Command☆18May 8, 2026Updated 3 months ago
- Rip web accessible (distributed) version control systems: SVN/GIT/HG...☆1,784Jul 19, 2024Updated 2 years ago
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆1,961Apr 13, 2022Updated 4 years ago
- Opencart Bruteforce and Upload Image☆11Aug 13, 2019Updated 7 years ago
- Toolset for detecting reflected xss in websites☆16Oct 6, 2018Updated 7 years ago
- XRay is a tool for recon, mapping and OSINT gathering from public networks.☆2,331Jul 10, 2024Updated 2 years ago
- Simple shell script for automated domain recognition with some tools☆20Mar 9, 2019Updated 7 years ago
- Exploit laravel database config☆10Feb 10, 2019Updated 7 years ago
- BLACKBOx Penetration Testing Framework☆31Dec 20, 2018Updated 7 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Some wordpress user enumeration scripts.☆38Dec 21, 2016Updated 9 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Mar 27, 2017Updated 9 years ago
- PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.☆3,876Sep 29, 2025Updated 11 months ago
- Get database configuration from websites using laravel☆11Nov 19, 2017Updated 8 years ago
- Webdav Mass Exploiter With Python Programming Language☆15Jul 19, 2025Updated last year
- ☆23May 13, 2019Updated 7 years ago
- Drupal Exploiter Tool (Drupal Hunter)☆38Apr 29, 2018Updated 8 years ago