NickstaDB / DeserLab
Java deserialization exploitation lab.
☆236Updated 6 years ago
Alternatives and similar repositories for DeserLab:
Users that are interested in DeserLab are comparing it to the libraries listed below
- YSOSERIAL Integration with burp suite☆164Updated 2 years ago
- ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)☆290Updated last year
- Java serialization brute force attack tool.☆122Updated 7 years ago
- XXE Out of Band Server.☆170Updated last year
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆576Updated 3 years ago
- A static byte code analyzer for Java deserialization gadget research☆241Updated 7 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆351Updated 2 years ago
- Central Repo for Burp extensions☆151Updated 3 years ago
- poison and relay NTLM credentials☆174Updated 6 years ago
- A collection of curated Java Deserialization Exploits☆593Updated 3 years ago
- Burp extension to perform Java Deserialization Attacks☆210Updated last year
- A mini webserver with FTP support for XXE payloads☆329Updated last year
- Utils☆267Updated 9 years ago
- CVE-2018-7600 - Drupal 7.x RCE☆71Updated 6 years ago
- Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!☆294Updated 5 years ago
- An Out-of-Band XXE server for retrieving file contents over FTP.☆180Updated 4 years ago
- MOGWAI LABS JMX exploitation toolkit☆200Updated 2 years ago
- (Deprecated) HQLmap, Automatic tool to exploit HQL injections☆228Updated 5 years ago
- Security checks pack for Burp Suite☆139Updated 7 years ago
- CVE-2018-2893-PoC☆103Updated 6 years ago
- siberas JMX exploitation toolkit☆129Updated 2 years ago
- JNDI Attacking Tool☆238Updated 2 years ago
- Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).☆500Updated 3 years ago
- Mogwai Java Management Extensions (JMX) Exploitation Toolkit☆173Updated 8 years ago
- Takes a URL and checks the system for the tilde enum vuln and then find the files.☆171Updated 6 years ago
- Apache Tomcat Remote Code Execution on Windows☆185Updated 5 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆122Updated 7 years ago
- JWT Support for Burp☆251Updated this week
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆138Updated 4 years ago
- WebLogic Exploit☆142Updated 6 years ago