Alternatives and similar repositories for WS-Attacker:

Users that are interested in WS-Attacker are comparing it to the libraries listed below

• hatRiot / clusterd
  application server attack toolkit
  ☆686Updated 5 years ago
• foxglovesec / JavaUnserializeExploits
  ☆493Updated 9 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆593Updated 3 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• fcavallarin / htcap
  htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
  ☆618Updated 3 years ago
• ngalongc / AutoLocalPrivilegeEscalation
  An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
  ☆493Updated 3 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆331Updated 7 years ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆576Updated 3 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆532Updated 4 years ago
• allfro / BurpKit
  Next-gen BurpSuite penetration testing tool
  ☆461Updated 9 years ago
• mandatoryprogrammer / xssless
  An automated XSS payload generator written in python.
  ☆314Updated 8 years ago
• davidpepper / fierce-domain-scanner
  Fierce.pl Domain Scanner
  ☆299Updated 5 years ago
• nccgroup / CrossSiteContentHijacking
  Content hijacking proof-of-concept using Flash, PDF and Silverlight
  ☆381Updated 5 years ago
• 0xsauby / yasuo
  A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
  ☆575Updated 7 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆211Updated last year
• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆625Updated last year
• mazen160 / struts-pwn_CVE-2017-9805
  An exploit for Apache Struts CVE-2017-9805
  ☆250Updated 7 years ago
• cyberheartmi9 / CVE-2017-12617
  Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
  ☆390Updated 7 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆289Updated 2 years ago
• s4n7h0 / Halcyon-IDE
  First IDE for Nmap Script (NSE) Development.
  ☆356Updated 4 years ago
• DanMcInerney / pentest-machine
  Automates some pentest jobs via nmap xml file
  ☆323Updated 6 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆783Updated 3 years ago
• jas502n / St2-057
  St2-057 Poc Example
  ☆312Updated 6 years ago
• AonCyberLabs / xxe-recursive-download
  ☆231Updated 9 years ago
• sqlmapproject / testenv
  A collection of web pages vulnerable to SQL injection flaws
  ☆349Updated 3 years ago
• NetSPI / xssValidator
  This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
  ☆414Updated 3 years ago
• ewilded / psychoPATH
  psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-s…
  ☆275Updated 4 years ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆444Updated 5 years ago
• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆254Updated 10 months ago