fransr / hot-jar-swapping-urlclassloaderView external linksLinks
Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
☆32Dec 10, 2022Updated 3 years ago
Alternatives and similar repositories for hot-jar-swapping-urlclassloader
Users that are interested in hot-jar-swapping-urlclassloader are comparing it to the libraries listed below
Sorting:
- ☆20Sep 6, 2023Updated 2 years ago
- A black-box scanner for HTTP request smuggling vulnerabilities caused by chunk parsing discrepancies.☆30Oct 29, 2025Updated 3 months ago
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆46Dec 22, 2023Updated 2 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆36Mar 4, 2025Updated 11 months ago
- ☆17May 22, 2021Updated 4 years ago
- ☆14Jul 1, 2021Updated 4 years ago
- ☆154Aug 18, 2023Updated 2 years ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆38Sep 25, 2023Updated 2 years ago
- Practical Jupyter notebooks from Andrew Ng and Giskard team's "Red Teaming LLM Applications" course on DeepLearning.AI.☆22Apr 8, 2024Updated last year
- Pentest-Command☆20Nov 10, 2021Updated 4 years ago
- ☆26Jul 9, 2024Updated last year
- Piper Burp Suite Extender plugin☆129Jan 14, 2026Updated last month
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 4 years ago
- CodeQL model generation for Go.☆17Jun 11, 2021Updated 4 years ago
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated 11 months ago
- Artifact for ICSE 2023☆50Sep 24, 2022Updated 3 years ago
- My fuzz repo!☆22Jul 28, 2023Updated 2 years ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆60Apr 23, 2023Updated 2 years ago
- A Simple command line tool that helps checking web applications to identify insecure deserialization vulnerabilities.☆24Jul 10, 2019Updated 6 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆642Jul 7, 2025Updated 7 months ago
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆239Jan 10, 2024Updated 2 years ago
- Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…☆51Jun 14, 2020Updated 5 years ago
- PyBurp is a Burp Suite extension that provides predefined Python functions for HTTP/WebSocket traffic modification, context menu registra…☆38Dec 28, 2025Updated last month
- A set of Gitlab pipelines and Github workflows to automate and ease on BugBounty and Penetration Testing engagements☆28Dec 18, 2022Updated 3 years ago
- ElasticSearch exploit and Pentesting guide for penetration tester☆30Nov 9, 2022Updated 3 years ago
- ☆64Mar 1, 2023Updated 2 years ago
- Unofficial documentation for the great tool Param Miner☆184Aug 21, 2022Updated 3 years ago
- An intentionally-vulnerable application for demonstrating the hazards of SpEL expression composition☆28Apr 17, 2018Updated 7 years ago
- PoC repository for CVE-2023-29007☆36Apr 26, 2023Updated 2 years ago
- ☆66Nov 29, 2022Updated 3 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆775Aug 19, 2024Updated last year
- Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.☆67Apr 25, 2025Updated 9 months ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆519Jun 22, 2022Updated 3 years ago
- List all public repositories for (valid) GitHub usernames☆76Sep 25, 2023Updated 2 years ago
- APK downloader from few sources☆136Aug 18, 2025Updated 5 months ago
- Gotator is a tool to generate DNS wordlists through permutations.☆503Jul 17, 2022Updated 3 years ago
- A collection of Server-Side Prototype Pollution gadgets and exploits☆222Feb 6, 2025Updated last year
- ☆418Oct 16, 2021Updated 4 years ago
- ☆36Mar 3, 2023Updated 2 years ago