Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
☆32Dec 10, 2022Updated 3 years ago
Alternatives and similar repositories for hot-jar-swapping-urlclassloader
Users that are interested in hot-jar-swapping-urlclassloader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆20Sep 6, 2023Updated 3 years ago
- A black-box scanner for HTTP request smuggling vulnerabilities caused by chunk parsing discrepancies.☆35Oct 29, 2025Updated last year
- A small web app to check if your (Australian) voicemail is vulnerable to information disclosure.☆13Jul 15, 2014Updated 12 years ago
- an Evil Java RMI Registry.☆52Feb 8, 2023Updated 3 years ago
- CodeQL model generation for Go.☆17Jun 11, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆14Jul 1, 2021Updated 5 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆39Mar 4, 2025Updated last year
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆48Dec 22, 2023Updated 2 years ago
- ☆153Aug 18, 2023Updated 3 years ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 3 years ago
- ☆64Mar 1, 2023Updated 3 years ago
- Pentest-Command☆20Nov 10, 2021Updated 4 years ago
- MAC Address brute forcing tool, used to bypass MAC based filtering☆16Feb 26, 2022Updated 4 years ago
- Illustrations of codeql's AST☆12Sep 10, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CodeQL workshop presented during OrangeCon 2024 in Amsterdam. Learn how to use CodeQL for security research.☆13Sep 2, 2024Updated 2 years ago
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- A tool to run a command when the target of a symlink changes☆16Apr 28, 2016Updated 10 years ago
- Unsecure time-based secret exploitation and Sandwich attack implementation Resources☆153Dec 9, 2024Updated last year
- pwning challenge with a minimal hypervisor on apple hypervisor framework☆13May 13, 2019Updated 7 years ago
- ☆66Nov 29, 2022Updated 3 years ago
- *Unofficial* lgtm.com CLI — Use at your own risk. Also don't add more than 3K projects to "My projects" list.☆13Feb 21, 2022Updated 4 years ago
- ☆13Oct 30, 2023Updated 3 years ago
- Seamless integration between Brainfuck and Python with AST compilation!☆14Nov 23, 2019Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Canary which fires when uninstalled☆34Mar 16, 2021Updated 5 years ago
- Piper Burp Suite Extender plugin☆129Jan 14, 2026Updated 9 months ago
- The Super Vulnerable Java Application (SVJA), as demonstrated in the Roniel and DaRon Podcast Show, is an Apache Struts application desig…☆13Jan 1, 2026Updated 9 months ago
- A Simple CVE-2022-39299 PoC exploit generator to bypass authentication in SAML SSO Integrations using vulnerable versions of passport-sam…☆19Feb 8, 2023Updated 3 years ago
- The best articles and videos related to computer science and programming I found.☆11Apr 27, 2020Updated 6 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- My fuzz repo!☆23Jul 28, 2023Updated 3 years ago
- ☆18Nov 28, 2021Updated 4 years ago
- Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…☆51Jun 14, 2020Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed☆13Sep 25, 2026Updated last month
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Sep 30, 2018Updated 8 years ago
- commonspeak2 subdomains wordlist generated daily **DEPRECATED** The author(s) of commonspeak2 maintain an official repo with more lists. …☆39May 21, 2021Updated 5 years ago
- Our backup exploitation technique: fuzzing for POVs!☆24Aug 20, 2016Updated 10 years ago
- Electron Research☆72Feb 9, 2022Updated 4 years ago
- A training course on Web Security, Exploit Development and Source Code Auditing from 2009.☆11Oct 7, 2026Updated 3 weeks ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆648Jul 7, 2025Updated last year