darkr4y / pentest-script
scripts used in my pentest work.
☆44Updated 9 years ago
Alternatives and similar repositories for pentest-script:
Users that are interested in pentest-script are comparing it to the libraries listed below
- General Scripts to help with various types of SQL Injection☆30Updated 11 years ago
- CVE-2017-10271 WEBLOGIC RCE (TESTED)☆38Updated 7 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Updated 7 years ago
- Simple socket-based gateway to the Burp Collaborator☆33Updated 8 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Updated 8 years ago
- Struts2 Vuls Scanner base perl script☆22Updated 9 years ago
- Automated information gathering tool for pentest☆54Updated 8 years ago
- Struts2 S2-045-Nmap NSE script☆50Updated 8 years ago
- Java Untrusted Deserialization Exploits Tools☆66Updated 9 years ago
- Advance URL Fuzzing + Whois Domain running on python☆17Updated 2 years ago
- Simple script to automate brutforcing blind sql injection vulnerabilities☆51Updated 7 years ago
- A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)☆36Updated 7 years ago
- Simple, useful scripts for red/blue team situations☆22Updated 9 years ago
- Ruby interface to cirt.net default passwords database☆20Updated 13 years ago
- Flash XSS Scanner☆53Updated 8 years ago
- Fork of Dnmap (http://dnmap.sourceforge.net/)☆22Updated 2 years ago
- DoS PoC's for SAP products☆50Updated 7 years ago
- Another plugin for CRLF vulnerability detection☆26Updated 8 years ago
- A simple scanner to find and brute force tomcat manager logins☆28Updated 5 years ago
- Burp Suite Attack Selector Plugin☆61Updated 7 years ago
- It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).☆55Updated 3 years ago
- CVE-2017-7269 to webshell or shellcode loader☆87Updated 7 years ago
- ☆13Updated 9 years ago
- Small modification version of p0wnedShell☆40Updated 8 years ago
- ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)☆67Updated 6 years ago
- Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls☆42Updated 9 years ago
- CORS checking☆34Updated 6 years ago
- PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM☆52Updated 7 years ago
- CVE-2018-6546-Exploit☆41Updated 6 years ago
- A weaponized version of CVE-2018-9206☆62Updated 6 years ago