Alternatives and similar repositories for SecLists:

Users that are interested in SecLists are comparing it to the libraries listed below

• mpgn / Spring-Boot-Actuator-Exploit
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆318Updated 4 years ago
• wh1t3p1g / ysoserial
  forked from frohoff/ysoserial and added my own payloads.
  ☆150Updated 4 years ago
• veracode-research / actuator-testbed
  A vulnerable application exposing Spring Boot Actuators
  ☆121Updated 5 years ago
• gh0stkey / JSONandHTTPP
  Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.
  ☆99Updated 3 years ago
• Y4er / CVE-2020-2551
  Weblogic IIOP CVE-2020-2551
  ☆333Updated 4 years ago
• 5up3rc / weblogic_cmd
  weblogic t3 deserialization rce
  ☆266Updated 7 years ago
• Echocipher / Subdomain-Takeover
  一个子域名接管检测工具
  ☆137Updated 3 years ago
• QdghJ / burp_data_collector
  A Burp plugin that collects Burp request parameters, directories, paths and file names into the database for sorting
  ☆90Updated 3 years ago
• nibiwodong / CNVD-2020-10487-Tomcat-ajp-POC
  CNVD-2020-10487(CVE-2020-1938), tomcat ajp 文件读取漏洞poc
  ☆119Updated 4 years ago
• PortSwigger / authz
  ☆106Updated 8 years ago
• theLSA / burp-unauth-checker
  burpsuite extension for check unauthorized vulnerability
  ☆230Updated 4 years ago
• CHYbeta / WAF-Bypass
  WAF Bypass Cheatsheet
  ☆212Updated 7 years ago
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆74Updated 3 years ago
• rabbitmask / WeblogicScanLot
  WeblogicScanLot系列，Weblogic漏洞批量检测工具，V2.2
  ☆183Updated 4 years ago
• Imanfeng / Apache-Solr-RCE
  Apache Solr Exploits 🌟
  ☆338Updated 4 years ago
• LoRexxar / redis-rogue-server
  Redis 4.x & 5.x RCE
  ☆140Updated 5 years ago
• jas502n / CVE-2019-3396
  Confluence 未授权 RCE (CVE-2019-3396) 漏洞
  ☆144Updated 5 years ago
• threedr3am / tomcat-cluster-session-sync-exp
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆213Updated 4 years ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆513Updated 4 years ago
• hvqzao / burp-wildcard
  Burp extension intended to compact Burp extension tabs by hijacking them to own tab.
  ☆128Updated 4 years ago
• Y4er / CVE-2020-2555
  Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE
  ☆177Updated 2 years ago
• wuppp / shiro_rce_exp
  Shiro RCE (Padding Oracle Attack)
  ☆143Updated 5 years ago
• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆246Updated 3 years ago
• timwhitez / Frog-Submon
  🐸Subdomain Monitor, 子域名监控
  ☆77Updated 3 years ago
• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆211Updated 4 years ago
• mhaskar / XMLDecoder-payload-generator
  A simple python script to generate XML payloads works for XMLDecoder based on ProcessBuilder and Runtime exec
  ☆148Updated 4 years ago
• inspiringz / Shiro-721
  Shiro-721 RCE Via RememberMe Padding Oracle Attack
  ☆255Updated 4 years ago
• Y4er / fastjson-bypass-autotype-1.2.68
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆223Updated 2 years ago
• potats0 / shiroPoc
  ☆320Updated 3 years ago
• TopScrew / CVE-2019-2725
  CVE-2019-2725命令回显+webshell上传+最新绕过
  ☆189Updated 5 years ago