bao7uo / dp_crypto
Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
☆168Updated 4 years ago
Alternatives and similar repositories for dp_crypto:
Users that are interested in dp_crypto are comparing it to the libraries listed below
- Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)☆174Updated 4 years ago
- RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.☆353Updated 3 years ago
- This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …☆256Updated 2 years ago
- ☆281Updated 3 years ago
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆274Updated 4 years ago
- Common Web Managers Fuzz Wordlists☆172Updated last month
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆103Updated 4 years ago
- Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.☆267Updated 2 months ago
- Various Payload wordlists☆235Updated 4 years ago
- ☆128Updated 7 years ago
- Payloads for CRLF Injection☆223Updated 6 months ago
- Turbo Intruder Scripts☆221Updated 4 years ago
- Clientside vulnerability / reflected xss fuzzer☆150Updated last year
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆131Updated 4 years ago
- SSRF testing tool☆244Updated 2 years ago
- jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.☆152Updated 4 years ago
- A simple remote scanner for Atlassian Jira☆120Updated 2 years ago
- CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit☆155Updated 4 years ago
- An Out-of-Band XXE server for retrieving file contents over FTP.☆180Updated 4 years ago
- ☆206Updated 3 years ago
- Searching for virtual hosts among non-resolvable domains☆88Updated 4 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆295Updated 5 years ago
- ☆144Updated 2 years ago
- That repository contains my updates to the well know java deserialization exploitation tool ysoserial.☆177Updated 2 years ago
- A combined wordlists for files and directory discovery☆125Updated 3 years ago
- A collection of scripts to extend Burp Suite☆140Updated 6 years ago
- Combined port scanning w/ Masscan's speed & Nmap's scanning features.☆149Updated 2 years ago
- SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibil…☆154Updated 4 years ago
- Burp Bounty profiles compilation, feel free to contribute!☆147Updated 3 years ago