NetSPI / JavaSerialKiller
Burp extension to perform Java Deserialization Attacks
☆208Updated 9 months ago
Related projects ⓘ
Alternatives and complementary repositories for JavaSerialKiller
- Java deserialization exploitation lab.☆237Updated 5 years ago
- ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)☆289Updated last year
- YSOSERIAL Integration with burp suite☆162Updated last year
- Utils☆264Updated 8 years ago
- Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.☆201Updated 9 months ago
- Central Repo for Burp extensions☆149Updated 3 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆573Updated 3 years ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆135Updated 3 years ago
- Security checks pack for Burp Suite☆138Updated 6 years ago
- A collection of curated Java Deserialization Exploits☆590Updated 3 years ago
- An exploit for Apache Struts CVE-2017-9805☆249Updated 7 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆253Updated 5 months ago
- Local File Inclusion Exploitation Tool (mirror)☆122Updated 7 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆103Updated 6 years ago
- ☆227Updated 9 years ago
- ☆128Updated 8 years ago
- XXE Out of Band Server.☆169Updated last year
- Damn Vulnerable Thick Client App☆146Updated 4 years ago
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆151Updated 9 months ago
- Java serialization brute force attack tool.☆124Updated 7 years ago
- Improved decoder for Burp Suite☆135Updated 3 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Updated 8 years ago
- Takes a URL and checks the system for the tilde enum vuln and then find the files.☆170Updated 5 years ago
- siberas JMX exploitation toolkit☆128Updated last year
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆280Updated 4 months ago
- (Deprecated) HQLmap, Automatic tool to exploit HQL injections☆225Updated 4 years ago
- An interactive OOB XXE data exfiltration tool☆90Updated 7 years ago
- A lab for playing with NoSQL Injection☆128Updated 4 years ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆241Updated 2 years ago