利用字符集编码绕过waf的burpsuite插件
☆123Mar 22, 2021Updated 5 years ago
Alternatives and similar repositories for Charset_encoding-Burp
Users that are interested in Charset_encoding-Burp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 帆软/致远密码解密工具☆362Jul 29, 2021Updated 5 years ago
- Spring Actuator端点的BurpSuite被动扫描插件。☆203Nov 2, 2022Updated 4 years ago
- 收集内存马打入方式☆506May 20, 2022Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆775Jan 26, 2022Updated 4 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆367Jun 19, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- BurpBounty 魔改版本☆416Mar 21, 2022Updated 4 years ago
- 批量处理url链接，获取多级路径并打印☆45Jul 12, 2023Updated 3 years ago
- 基于burpsuite的资产分析工具☆472Apr 29, 2023Updated 3 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆472Jan 17, 2023Updated 3 years ago
- 高危漏洞精准检测与深度利用框架☆1,463Jan 8, 2023Updated 3 years ago
- 基于dbcp的fastjson rce 回显☆197Jun 28, 2021Updated 5 years ago
- Windows rdp相关的登录记录导出工具，可用于后渗透中Windows服务器的信息收集阶段。输出内容包括：本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。☆285Jun 23, 2024Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆606Aug 5, 2026Updated 3 months ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆148Jul 7, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…☆789Feb 13, 2025Updated last year
- weaponized tool for CVE-2020-17144☆158Dec 9, 2020Updated 5 years ago
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,256Oct 1, 2022Updated 4 years ago
- whatweb 增 强版 8000+插件（提供windows可执行文件）☆28Jul 10, 2025Updated last year
- 让"WAF绕过"变得简单☆435Jan 26, 2025Updated last year
- 无影脚 - 命令行下的日志文件处理工具☆49Nov 15, 2022Updated 3 years ago
- Eeyes(棱眼)-快速筛选真实IP并整理为C段☆621Apr 4, 2021Updated 5 years ago
- fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。☆126May 14, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- golang打包二进制进行免杀☆233Apr 7, 2021Updated 5 years ago
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆239Nov 25, 2022Updated 3 years ago
- SpringScan 漏洞检测 Burp插件☆604Nov 14, 2023Updated 2 years ago
- Redis 漏洞利用工具☆940Jan 26, 2025Updated last year
- shiro 反序列 命令执行辅助检测工具☆1,600May 21, 2024Updated 2 years ago
- 提取DC日志，快速获取域用户对应IP地址☆19Sep 2, 2021Updated 5 years ago
- 适用于Cobalt Strike的插件☆557May 30, 2021Updated 5 years ago
- Burp suite 插件 实现参数溢出、垃圾数据、字典笛卡尔积☆29Feb 9, 2022Updated 4 years ago
- 提取DC日志，快速获取域用户对应IP地址☆311Mar 21, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,483Apr 25, 2024Updated 2 years ago
- Java RCE 回显测试代码☆1,007Oct 15, 2020Updated 6 years ago
- 用Java agent实现内存马等功能☆198Jul 27, 2023Updated 3 years ago
- 将shellcode用rsa加密并动态编译exe，自带几种反沙箱技术。☆515Jul 9, 2020Updated 6 years ago
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 5 years ago
- BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算…☆1,655Aug 4, 2023Updated 3 years ago
- Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)☆291Jan 15, 2022Updated 4 years ago