NetSPI / JavaSerialKiller
Burp extension to perform Java Deserialization Attacks
☆208Updated 9 months ago
Related projects ⓘ
Alternatives and complementary repositories for JavaSerialKiller
- Java deserialization exploitation lab.☆236Updated 5 years ago
- YSOSERIAL Integration with burp suite☆162Updated last year
- ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)☆288Updated last year
- Utils☆264Updated 8 years ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆135Updated 3 years ago
- A collection of curated Java Deserialization Exploits☆590Updated 3 years ago
- An exploit for Apache Struts CVE-2017-9805☆249Updated 7 years ago
- GUI Burp Plugin to ease discovering of security holes in web applications☆147Updated 7 years ago
- Central Repo for Burp extensions☆149Updated 2 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆253Updated 4 months ago
- (Deprecated) HQLmap, Automatic tool to exploit HQL injections☆225Updated 4 years ago
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆151Updated 8 months ago
- Security checks pack for Burp Suite☆137Updated 6 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆573Updated 3 years ago
- Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.☆201Updated 8 months ago
- ☆227Updated 8 years ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆240Updated 2 years ago
- Local File Inclusion Exploitation Tool (mirror)☆122Updated 7 years ago
- SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.☆444Updated 6 years ago
- Improved decoder for Burp Suite☆135Updated 3 years ago
- XXE Out of Band Server.☆169Updated last year
- Java serialization brute force attack tool.☆124Updated 7 years ago
- Takes a URL and checks the system for the tilde enum vuln and then find the files.☆170Updated 5 years ago
- Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and conf…☆308Updated 3 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Updated 8 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆103Updated 6 years ago
- Damn Vulnerable Thick Client App☆144Updated 4 years ago
- SHELLING - a comprehensive OS command injection payload generator☆105Updated 5 years ago
- A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by caus…☆425Updated 11 months ago