Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
☆32Dec 10, 2022Updated 3 years ago
Alternatives and similar repositories for hot-jar-swapping-urlclassloader
Users that are interested in hot-jar-swapping-urlclassloader are comparing it to the libraries listed below
Sorting:
- ☆20Sep 6, 2023Updated 2 years ago
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆46Dec 22, 2023Updated 2 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆36Mar 4, 2025Updated last year
- ☆17May 22, 2021Updated 4 years ago
- ☆14Jul 1, 2021Updated 4 years ago
- ☆154Aug 18, 2023Updated 2 years ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆38Sep 25, 2023Updated 2 years ago
- Practical Jupyter notebooks from Andrew Ng and Giskard team's "Red Teaming LLM Applications" course on DeepLearning.AI.☆23Apr 8, 2024Updated last year
- Pentest-Command☆20Nov 10, 2021Updated 4 years ago
- ☆26Jul 9, 2024Updated last year
- Piper Burp Suite Extender plugin☆129Jan 14, 2026Updated last month
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 4 years ago
- CodeQL model generation for Go.☆17Jun 11, 2021Updated 4 years ago
- Unsecure time-based secret exploitation and Sandwich attack implementation Resources☆149Dec 9, 2024Updated last year
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated last year
- Artifact for ICSE 2023☆50Sep 24, 2022Updated 3 years ago
- A tool for Subdomain takeovers detection☆26Oct 21, 2022Updated 3 years ago
- My fuzz repo!☆22Jul 28, 2023Updated 2 years ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆61Apr 23, 2023Updated 2 years ago
- A Simple command line tool that helps checking web applications to identify insecure deserialization vulnerabilities.☆24Jul 10, 2019Updated 6 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆641Jul 7, 2025Updated 8 months ago
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆239Jan 10, 2024Updated 2 years ago
- Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…☆51Jun 14, 2020Updated 5 years ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,293Aug 7, 2025Updated 7 months ago
- A set of Gitlab pipelines and Github workflows to automate and ease on BugBounty and Penetration Testing engagements☆28Dec 18, 2022Updated 3 years ago
- PyBurp is a Burp Suite extension that provides predefined Python functions for HTTP/WebSocket traffic modification, context menu registra…☆38Dec 28, 2025Updated 2 months ago
- ElasticSearch exploit and Pentesting guide for penetration tester☆30Nov 9, 2022Updated 3 years ago
- ☆63Mar 1, 2023Updated 3 years ago
- Unofficial documentation for the great tool Param Miner☆184Aug 21, 2022Updated 3 years ago
- An intentionally-vulnerable application for demonstrating the hazards of SpEL expression composition☆28Apr 17, 2018Updated 7 years ago
- PoC repository for CVE-2023-29007☆36Apr 26, 2023Updated 2 years ago
- ☆66Nov 29, 2022Updated 3 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆778Aug 19, 2024Updated last year
- Collection of quirky behaviours of code and the CTF challenges that I made around them.☆27Jan 27, 2021Updated 5 years ago
- Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.☆67Apr 25, 2025Updated 10 months ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆519Jun 22, 2022Updated 3 years ago
- List all public repositories for (valid) GitHub usernames☆76Sep 25, 2023Updated 2 years ago
- APK downloader from few sources☆135Aug 18, 2025Updated 6 months ago
- A collection of Server-Side Prototype Pollution gadgets and exploits☆227Feb 6, 2025Updated last year