Alternatives and similar repositories for WS-Attacker:

Users that are interested in WS-Attacker are comparing it to the libraries listed below

• foxglovesec / JavaUnserializeExploits
  ☆492Updated 8 years ago
• hatRiot / clusterd
  application server attack toolkit
  ☆686Updated 4 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 4 years ago
• bcoles / ssrf_proxy
  SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
  ☆456Updated 7 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆593Updated 3 years ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆575Updated 3 years ago
• fcavallarin / htcap
  htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
  ☆615Updated 3 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆330Updated 7 years ago
• lightos / Panoptic
  Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and conf…
  ☆311Updated 3 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆525Updated 4 years ago
• nccgroup / CrossSiteContentHijacking
  Content hijacking proof-of-concept using Flash, PDF and Silverlight
  ☆381Updated 5 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆209Updated last year
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆290Updated last year
• PaulSec / HQLmap
  (Deprecated) HQLmap, Automatic tool to exploit HQL injections
  ☆227Updated 5 years ago
• allfro / BurpKit
  Next-gen BurpSuite penetration testing tool
  ☆459Updated 9 years ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• AonCyberLabs / xxe-recursive-download
  ☆232Updated 9 years ago
• ewilded / psychoPATH
  psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-s…
  ☆273Updated 4 years ago
• cyberheartmi9 / CVE-2017-12617
  Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
  ☆391Updated 7 years ago
• mazen160 / struts-pwn_CVE-2017-9805
  An exploit for Apache Struts CVE-2017-9805
  ☆249Updated 7 years ago
• breenmachine / httpscreenshot
  ☆637Updated 4 months ago
• DanMcInerney / pentest-machine
  Automates some pentest jobs via nmap xml file
  ☆324Updated 6 years ago
• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆620Updated 11 months ago
• ngalongc / AutoLocalPrivilegeEscalation
  An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
  ☆488Updated 3 years ago
• gabemarshall / Brosec
  Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
  ☆355Updated 2 years ago
• mgeeky / tomcatWarDeployer
  Apache Tomcat auto WAR deployment & pwning penetration testing tool.
  ☆422Updated 10 months ago
• erwanlr / Fingerprinter
  CMS/LMS/Library etc Versions Fingerprinter
  ☆256Updated 3 years ago
• davidpepper / fierce-domain-scanner
  Fierce.pl Domain Scanner
  ☆298Updated 5 years ago
• SpiderLabs / portia
  Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…
  ☆502Updated 4 years ago
• mandatoryprogrammer / xssless
  An automated XSS payload generator written in python.
  ☆319Updated 8 years ago