PortSwigger / java-deserialization-scannerLinks
All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
☆28Updated 3 years ago
Alternatives and similar repositories for java-deserialization-scanner
Users that are interested in java-deserialization-scanner are comparing it to the libraries listed below
Sorting:
- YSOSERIAL Integration with burp suite☆41Updated 3 years ago
- ☆43Updated 5 years ago
- Burp Suite extension to passively scan for applications revealing server error messages☆65Updated last year
- The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch☆23Updated 7 years ago
- HTML5 WebSocket message fuzzer☆148Updated 6 years ago
- Burp extension to passively scan for applications revealing software version numbers☆32Updated last year
- A Burp extension to show the Collaborator client in a tab☆36Updated 2 years ago
- ☆103Updated 5 years ago
- A malicious LDAP server for JNDI injection attacks☆75Updated last year
- Full TTY reverse shell over SSH☆59Updated 5 years ago
- Burp extension☆58Updated 7 years ago
- A server vulnerable to XXE that can be used to test payloads using the xxer tool.☆26Updated 7 years ago
- ☆108Updated 3 years ago
- Hacking Artifactory with server side template injection☆51Updated 5 years ago
- Java serialization brute force attack tool.☆123Updated 8 years ago
- Burp Suite extension for JAX-RS☆65Updated 8 years ago
- Proof of concept for CVE-2020-5902☆72Updated 5 years ago
- Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro☆53Updated 12 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆100Updated 6 years ago
- Practice hacking JWT tokens☆116Updated 3 years ago
- siberas JMX exploitation toolkit☆130Updated 2 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆124Updated 7 years ago
- Custom Parameter Handler extension for Burp Suite.☆44Updated 4 years ago
- Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.☆25Updated 3 years ago
- Compiled dataset of Java deserialization CVEs☆60Updated 5 years ago
- dns rebind tool with custom scripts☆83Updated 2 years ago
- A simple Burp extension for scanning stuffs in CTF☆31Updated 7 years ago
- Clone me and get your own authentic Parsia-Clone today.☆46Updated 3 weeks ago
- CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13☆65Updated 6 years ago
- XPT - XSS Polyglot Tester☆37Updated 6 years ago