Alternatives and similar repositories for SecLists

Users that are interested in SecLists are comparing it to the libraries listed below

• mpgn / Spring-Boot-Actuator-Exploit
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆322Updated 5 years ago
• Y4er / CVE-2020-2551
  Weblogic IIOP CVE-2020-2551
  ☆336Updated 5 years ago
• wh1t3p1g / ysoserial
  forked from frohoff/ysoserial and added my own payloads.
  ☆153Updated 5 years ago
• 5up3rc / weblogic_cmd
  weblogic t3 deserialization rce
  ☆268Updated 8 years ago
• jas502n / CVE-2019-3396
  Confluence 未授权 RCE (CVE-2019-3396) 漏洞
  ☆143Updated 5 years ago
• rabbitmask / WeblogicScanLot
  WeblogicScanLot系列，Weblogic漏洞批量检测工具，V2.2
  ☆185Updated 5 years ago
• PortSwigger / authz
  ☆108Updated 8 years ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆518Updated 5 years ago
• veracode-research / actuator-testbed
  A vulnerable application exposing Spring Boot Actuators
  ☆122Updated 6 years ago
• gh0stkey / JSONandHTTPP
  Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
  ☆103Updated 4 years ago
• threedr3am / tomcat-cluster-session-sync-exp
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆213Updated 5 years ago
• Ridter / get_ip_by_ico
  从shodan获取使用了相同favicon.ico的网站
  ☆191Updated 6 years ago
• cowtowncoder / jackson-compat-minor
  Test repository for verifying compatibility between adjacent minor versions
  ☆36Updated 7 months ago
• Echocipher / Subdomain-Takeover
  一个子域名接管检测工具
  ☆142Updated 4 years ago
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆75Updated 4 years ago
• tutorial0 / payloads
  for burp
  ☆50Updated 9 years ago
• zer0yu / Berserker
  A list of useful payloads for Web Application Security and Pentest/CTF
  ☆310Updated last year
• bkfish / CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner
  Cnvd-2020-10487 / cve-2020-1938, scanner tool
  ☆292Updated 3 years ago
• CHYbeta / WAF-Bypass
  WAF Bypass Cheatsheet
  ☆213Updated 8 years ago
• hanc00l / some_pocsuite
  用于漏洞排查的pocsuite3验证POC代码
  ☆348Updated 3 years ago
• Artemis1029 / Java_xmlhack
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆167Updated 6 years ago
• p1g3 / Fastjson-Scanner
  a burp extension to find where use fastjson
  ☆164Updated 5 years ago
• QdghJ / burp_data_collector
  A Burp plugin that collects Burp request parameters, directories, paths and file names into the database for sorting
  ☆91Updated 4 years ago
• wuppp / shiro_rce_exp
  Shiro RCE (Padding Oracle Attack)
  ☆147Updated 5 years ago
• jas502n / cve-2019-2618
  Weblogic Upload Vuln(Need username password)-CVE-2019-2618
  ☆173Updated 6 years ago
• Imanfeng / Apache-Solr-RCE
  Apache Solr Exploits 🌟
  ☆348Updated 5 years ago
• Qclover / jsspider
  A js infomation dig tool.
  ☆69Updated 5 years ago
• black-mirror / Weblogic
  Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行
  ☆69Updated 6 years ago
• sie504 / Struts-S2-xxx
  整理收集Struts2漏洞环境
  ☆266Updated 7 years ago
• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆248Updated 4 years ago