find-sec-bugs / find-sec-bugs-demos
Repository to showcase various configuration recipes with various technologies
☆35Updated 2 years ago
Alternatives and similar repositories for find-sec-bugs-demos:
Users that are interested in find-sec-bugs-demos are comparing it to the libraries listed below
- Vulnerable Java based Web Application☆31Updated 5 years ago
- Java Deserialization☆26Updated 8 years ago
- Deliberately vulnerable web application☆22Updated 7 years ago
- Externalize Java application access to protected resources as log messages.☆41Updated 10 months ago
- A static analysis API for finding deserialization attack gadgets☆38Updated 2 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆122Updated 7 years ago
- Burp Suite extension to generate Intruder payloads using Radamsa☆89Updated 7 years ago
- Identify vulnerable libraries in Maven dependencies☆46Updated 2 years ago
- OAuth plugin for Burp Suite Extender☆42Updated 6 years ago
- Burp Suite extension for JAX-RS☆65Updated 8 years ago
- A deliberately vulnerable modern day app with lots of DOM related bugs☆36Updated 5 years ago
- Python Package for burprestapi☆16Updated 5 years ago
- JMSDigger is JMS API basedEnterprise Messaging Application assessment tool☆30Updated 10 years ago
- Burp extension to help developers replicate findings from pen tests☆70Updated 8 months ago
- Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.☆48Updated 4 years ago
- ☆70Updated 7 years ago
- .NET Deserialization Passive Scanner☆45Updated 7 years ago
- Provides a suite of Burp extensions and a maven plugin to automate security tests using BurpSuite.☆25Updated 6 years ago
- ☆38Updated 4 years ago
- Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple…☆24Updated 2 years ago
- RFD Checker - security CLI tool to test Reflected File Download issues☆61Updated 6 years ago
- Study about HQL injection exploitation.☆51Updated 8 years ago
- Burp Suite extension to passively scan for applications revealing server error messages☆66Updated last year
- Penetration Testing Tools Developed by AppSec Consulting.☆48Updated 6 years ago
- A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity☆21Updated 9 months ago
- This test suite contains over 40 different test cases that have proven to work with different mobile browsers in my research or testing S…☆30Updated 5 years ago
- Parse X509 certificates to get the (sub)domains in it.☆28Updated 6 years ago
- Burp extension to passively scan for applications revealing software version numbers☆31Updated 10 months ago
- Extension adds a new tab in Burp Suite called Extractor☆42Updated 6 years ago
- RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler☆20Updated 11 years ago