PortSwigger / serialization-examples
☆39Updated last year
Alternatives and similar repositories for serialization-examples:
Users that are interested in serialization-examples are comparing it to the libraries listed below
- ☆35Updated 2 years ago
- NotSoCereal: A Deserialization exploit playground☆52Updated 3 years ago
- A simple NodeJS WebSocket WebApp vulnerable to blind SQL injection☆70Updated 4 years ago
- ☆34Updated 3 years ago
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆71Updated 3 years ago
- ElasticSearch exploit and Pentesting guide for penetration tester☆27Updated 2 years ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆66Updated 2 years ago
- The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489☆30Updated last year
- Wordlist to bruteforce for LFI☆123Updated 5 years ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆75Updated last year
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆63Updated last year
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆119Updated last year
- ☆62Updated 2 years ago
- Prototype Pollution Scanner☆115Updated 4 years ago
- ☆55Updated 2 years ago
- An MS Sharepoint and Frontpage Auditing Tool☆48Updated 5 months ago
- RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer☆55Updated 5 years ago
- BurpSuite extension to convert requests into bcheck scripts☆31Updated last year
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆59Updated last year
- ☆56Updated 11 months ago
- A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration☆79Updated 4 years ago
- Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications☆29Updated 2 years ago
- ☆65Updated 2 years ago
- Extract JavaScript files from burp suite project with ease.☆89Updated 3 years ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- Tool to enable blind sql injection attacks against websockets using sqlmap☆60Updated last week
- ✨ Build a beautiful and simple website in literally minutes. Demo at https://beautifuljekyll.com☆21Updated 2 years ago
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆44Updated 11 months ago
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆36Updated 2 years ago
- ☆68Updated last year