IOActive / jdwp-shellifier

Related projects ⓘ

Alternatives and complementary repositories for jdwp-shellifier

• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆776Updated 3 years ago
• NickstaDB / BaRMIe
  Java RMI enumeration and attack tool.
  ☆715Updated 7 years ago
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆646Updated last year
• matthiaskaiser / jmet
  Java Message Exploitation Tool
  ☆493Updated 2 years ago
• joaomatosf / JavaDeserH2HC
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆493Updated 2 years ago
• JackOfMostTrades / gadgetinspector
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆996Updated 3 years ago
• summitt / Nope-Proxy
  TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
  ☆1,560Updated 5 months ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆590Updated 3 years ago
• NickstaDB / SerializationDumper
  A tool to dump Java serialization streams in a more human readable form.
  ☆989Updated 5 months ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆438Updated 4 years ago
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,540Updated 4 years ago
• gbonacini / CVE-2016-5195
  A CVE-2016-5195 exploit example.
  ☆314Updated 7 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆350Updated 2 years ago
• neex / ffmpeg-avi-m3u-xbin
  ☆414Updated 7 years ago
• scumjr / dirtycow-vdso
  PoC for Dirty COW (CVE-2016-5195)
  ☆491Updated 2 years ago
• nccgroup / ABPTTS
  TCP tunneling over HTTP/HTTPS for web application servers
  ☆728Updated 8 years ago
• sensepost / reDuh
  Create a TCP circuit through validly formed HTTP requests
  ☆344Updated 7 years ago
• hypn0s / AJPy
  ☆465Updated last year
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆846Updated 2 years ago
• foxglovesec / JavaUnserializeExploits
  ☆492Updated 8 years ago
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆603Updated 5 years ago
• Gifts / Rogue-MySql-Server
  Rogue MySql Server
  ☆467Updated 11 years ago
• joaomatosf / jexboss
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,422Updated 4 years ago
• lijiejie / IIS_shortname_Scanner
  an IIS shortname Scanner
  ☆535Updated last year
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆330Updated 6 years ago
• bdamele / icmpsh
  Simple reverse ICMP shell
  ☆1,561Updated 6 years ago
• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆614Updated 8 months ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆573Updated 3 years ago
• BuffaloWill / oxml_xxe
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,037Updated 4 months ago
• firefart / dirtycow
  Dirty Cow exploit - CVE-2016-5195
  ☆860Updated 3 years ago