PortSwigger / serialization-examples
☆39Updated last year
Alternatives and similar repositories for serialization-examples:
Users that are interested in serialization-examples are comparing it to the libraries listed below
- ☆34Updated last year
- Wordlist to bruteforce for LFI☆122Updated 5 years ago
- Repo for OSWE related video content for @SecAura Youtube Channel☆32Updated 3 years ago
- Prototype Pollution Scanner☆109Updated 3 years ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆56Updated last year
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆67Updated 2 years ago
- A list of threat sinks used in the manual security source code review for application security☆70Updated last year
- Extract JavaScript files from burp suite project with ease.☆87Updated 3 years ago
- The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489☆31Updated 10 months ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆60Updated 2 years ago
- Notes on Preparing for Offsec☆22Updated last year
- Script for Bug Bounty☆28Updated 3 years ago
- A simple NodeJS WebSocket WebApp vulnerable to blind SQL injection☆70Updated 3 years ago
- An MS Sharepoint and Frontpage Auditing Tool☆45Updated 3 months ago
- NotSoCereal: A Deserialization exploit playground☆51Updated 3 years ago
- HTTP verb tampering & methods enumeration☆56Updated 2 years ago
- Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications☆25Updated 2 years ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆74Updated last year
- Vulnerable SAML infrastructure training applicaiton☆50Updated 2 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆49Updated 2 years ago
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆36Updated 2 years ago
- Preparation for OSWE☆42Updated 4 years ago
- ☆58Updated last year
- ☆65Updated 2 years ago
- Small tool to automate SSRF wordpress and XMLRPC finder☆80Updated 2 years ago
- ☆33Updated 2 years ago
- ElasticSearch exploit and Pentesting guide for penetration tester☆24Updated 2 years ago
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆56Updated last year
- A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration☆78Updated 4 years ago
- Web cache poisoning vulnerability scanner.☆64Updated 2 years ago