PortSwigger / json-web-token-attacker

Related projects: ⓘ

• jas502n / CVE-2019-11581
  Atlassian JIRA Template injection vulnerability RCE
  ☆93Updated 5 years ago
• spaceraccoon / spring-boot-actuator-h2-rce
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆103Updated 4 years ago
• x41sec / BeanStack
  X41 BeanStack - Stack Trace Fingerprinting BETA
  ☆52Updated 3 years ago
• Lopseg / Jsdir
  Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
  ☆112Updated 4 years ago
• veracode-research / actuator-testbed
  A vulnerable application exposing Spring Boot Actuators
  ☆123Updated 5 years ago
• andresriancho / jwt-fuzzer
  JWT fuzzer
  ☆104Updated 6 years ago
• NickstaDB / SerialBrute
  Java serialization brute force attack tool.
  ☆123Updated 7 years ago
• NetSPI / BurpExtractor
  A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
  ☆90Updated 2 years ago
• lc / 230-OOB
  An Out-of-Band XXE server for retrieving file contents over FTP.
  ☆171Updated 4 years ago
• mpgn / CVE-2019-7238
  🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻
  ☆149Updated 5 years ago
• masahiro331 / CVE-2019-10758
  ☆111Updated 4 years ago
• RedTeamPentesting / CVE-2020-13935
  Exploit for WebSocket Vulnerability in Apache Tomcat
  ☆163Updated 3 years ago
• mogwailabs / rmi-deserialization
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆99Updated 5 years ago
• vah13 / SAP_exploit
  Here you can get full exploit for SAP NetWeaver AS JAVA
  ☆73Updated 6 years ago
• 5alt / ultrarelay
  poison and relay NTLM credentials
  ☆172Updated 5 years ago
• ka1n4t / CVE-2020-17530
  ☆65Updated 3 years ago
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆137Updated 5 years ago
• 0ang3el / Unsafe-JAX-RS-Burp
  Burp Suite extension for JAX-RS
  ☆65Updated 7 years ago
• buffered4ever / Exploits
  None of the exploit code or research is my own but all available in public domain
  ☆27Updated 5 years ago
• appsecco / json-flash-csrf-poc
  This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
  ☆75Updated 6 years ago
• IdealDreamLast / CVE-2020-9484
  用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞
  ☆52Updated 4 years ago
• PortSwigger / freddy-deserialization-bug-finder
  ☆41Updated 4 years ago
• doyensec / StandardizedImageProcessingTest
  A test suite built with Mocha/Chai to test for behavioral differences between image libraries for the web
  ☆68Updated 4 years ago
• dozernz / cve-2020-11651
  ☆103Updated 4 years ago
• mzer0one / CVE-2020-7961-POC
  ☆116Updated 4 years ago
• summitt / burp-ysoserial
  YSOSERIAL Integration with burp suite
  ☆160Updated last year
• aaronsvk / CVE-2020-3956
  PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)
  ☆89Updated 4 years ago
• wuntee / BurpAuthzPlugin
  ☆75Updated 11 years ago
• securifera / CVE-2019-1579
  ☆63Updated 5 years ago
• SaneBow / redirect-fuzzer
  Fuzzing script for redirect URL validator
  ☆48Updated 4 years ago