federicodotta / ysoserialLinks
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆43Updated 5 years ago
Alternatives and similar repositories for ysoserial
Users that are interested in ysoserial are comparing it to the libraries listed below
Sorting:
- This code was used for the blogpost on secjuice.☆42Updated 6 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆114Updated 2 years ago
- Python3 tool to perform password spraying against Microsoft Online service using various methods☆86Updated 2 years ago
- ☆17Updated 5 years ago
- A tool to password spray Jenkins instances☆59Updated 6 years ago
- Exchangelib wrapper for pentesting☆67Updated 11 months ago
- Powershell module to get the NetNTLMv2 hash of the current user☆96Updated 3 years ago
- Password Spraying Script detecting current and previous passwords of Active Directory User☆66Updated 4 years ago
- A tool for creating proxy dll for hijacking☆42Updated last year
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆90Updated 5 years ago
- Iterative AD discovery toolkit for offensive operations☆85Updated 5 years ago
- Checks for signature requirements over LDAP☆98Updated 3 years ago
- Vulnerable webapp testbed☆24Updated 9 years ago
- A collection of Neo4j/BloodHound queries to collect interesting information.☆46Updated 3 years ago
- Username lists that I created.☆17Updated 4 years ago
- A mirror of several precompiled standalone red-teaming tools.☆19Updated 2 years ago
- A list of "secrets" from JWT sample code and readme files.☆57Updated 5 years ago
- "Powershell script assisting with domain enumerating and in finding quick wins" - Basically written while doing the 'Advanced Red Team' l…☆82Updated 4 years ago
- Loads a custom dll in system32 via diaghub.☆82Updated 5 years ago
- Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets☆51Updated 3 years ago
- ☆54Updated 4 years ago
- Script and resources to execute shell commands using access to a PostgreSQL service☆70Updated 8 years ago
- ☆51Updated 3 years ago
- This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …☆23Updated 5 years ago
- This script is a multi-threaded Okta password sprayer.☆71Updated 2 years ago
- This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapsho…☆122Updated 6 years ago
- Terraform resources for building HTTP, DNS, phishing, and mail server red team infrastructure☆95Updated 6 years ago
- ☆111Updated last year
- A Red Team tool for exfiltrating sensitive data from Jira tickets.☆86Updated 2 years ago
- Deliver powershell paylods via DNS TXT via CloudFlare using PowerShell☆62Updated 6 years ago