NotSoCereal: A Deserialization exploit playground
☆55Jan 13, 2022Updated 4 years ago
Alternatives and similar repositories for NotSoCereal-Lab
Users that are interested in NotSoCereal-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Notes for the CRTO exam☆10May 22, 2022Updated 4 years ago
- A collection of Turbo Intruder scripts.☆72Feb 1, 2025Updated last year
- CVE-2024-0044☆12Aug 24, 2024Updated 2 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆54Sep 11, 2024Updated 2 years ago
- Framework for blind boolean-based sql injections exploatation. Use it if sqlmap does shit.☆29Mar 26, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Automated activity logging utility for Mythic C2 v3.0+ with Ghostwriter v3.0+☆25Oct 20, 2026Updated last week
- Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.☆22May 9, 2023Updated 3 years ago
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- An OpenGraph extension for secrets☆23Aug 11, 2026Updated 2 months ago
- Journey so Far☆34Feb 15, 2022Updated 4 years ago
- Python exploit for ResetNightmare☆14Aug 6, 2026Updated 2 months ago
- ☆20Sep 6, 2023Updated 3 years ago
- **(WIP)** Overthrone - The First All-Rust Active Directory exploitation framework. A single static binary that takes you from network acc…☆31Oct 23, 2026Updated last week
- Pentest stuff☆51Nov 30, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Basic implementation of certstream to print new subdomains and domains☆37Jul 6, 2021Updated 5 years ago
- Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.☆114Nov 14, 2021Updated 4 years ago
- Lots of POC Codes & Preparation materials, scripts, discovery processes in there.☆16Feb 8, 2024Updated 2 years ago
- A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.☆129Jul 3, 2024Updated 2 years ago
- Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation☆34Mar 21, 2021Updated 5 years ago
- A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers☆42Dec 13, 2021Updated 4 years ago
- A simple Google Protobuf Decoder for Burp☆43Nov 22, 2022Updated 3 years ago
- Arduino Network Tester, extends the functionality of the well-known Network Cable tester by adding DHCP, DNS and Internet connectivity t…☆15Jan 7, 2023Updated 3 years ago
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆62Jun 12, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆21Jan 20, 2025Updated last year
- Burp Suite extension for testing Passkey systems.☆76Apr 1, 2025Updated last year
- POC for CVE-2020-9484☆13Feb 10, 2021Updated 5 years ago
- CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to uploa…☆13Jan 7, 2025Updated last year
- TESTR - A Vulnerable Python Web-App to practice XSS and Command Injection☆47Oct 8, 2022Updated 4 years ago
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆14Apr 18, 2022Updated 4 years ago
- Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit☆15Mar 16, 2022Updated 4 years ago
- WebSocket REPL for pentesters☆238Jul 24, 2024Updated 2 years ago
- A universal Frida Script that prevents application self-termination for iOS Applicaitons.☆17Apr 29, 2026Updated 6 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆25Sep 3, 2021Updated 5 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- ☆106Jan 3, 2023Updated 3 years ago
- Yet another Werkzeug Console Pin Exploit Explanation☆23Jul 30, 2021Updated 5 years ago
- visually see issues with supported cipher suites☆19May 28, 2026Updated 5 months ago
- A very high performance Domain Name parser package in Go.☆49Aug 27, 2021Updated 5 years ago
- CNVD-2021-30167 用友NC BeanShell远程代码执行☆30Jun 4, 2021Updated 5 years ago