hvqzao / java-deserialize-webapp
Vulnerable webapp testbed
☆20Updated 8 years ago
Related projects ⓘ
Alternatives and complementary repositories for java-deserialize-webapp
- ☆14Updated 4 years ago
- Burp Suite Importer - Connect to multiple web servers while populating the sitemap.☆48Updated 4 years ago
- JavaScript functions intended to be used as an XSS payload against a WordPress admin account.☆53Updated 4 years ago
- learning case to prepare OSWE☆37Updated 5 years ago
- ☆31Updated 5 years ago
- This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…☆36Updated last year
- BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JS…☆39Updated 3 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Updated 5 years ago
- This changes the style of Burp Suite's Repeater tabs to help the testers☆28Updated 5 years ago
- The Outlook HTML Leak Test Project☆41Updated 6 years ago
- ☆22Updated 2 years ago
- ☆28Updated 4 years ago
- Sparty - MS Sharepoint and Frontpage Auditing Tool☆31Updated 10 years ago
- Deploy a Private Burpsuite Collaborator using boto3 Python Library☆57Updated 4 years ago
- This Burp extension helps you to find usages of postMessage and recvMessage☆15Updated 4 years ago
- A Burp Extender plugin that will allow you to tamper with requests containing compressed, serialized java objects.☆24Updated 5 years ago
- 👽 Exploits written for research purposes.☆11Updated 3 years ago
- Fuzzing for LFI using Burpsuite☆59Updated 8 years ago
- Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma…☆17Updated 4 years ago
- Proof of concept for CVE-2020-5902☆72Updated 4 years ago
- Just a simple SMTP server, implementation of @corpix smtpd library☆14Updated 4 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Updated 4 years ago
- Kubernetes Scanner☆41Updated 2 years ago
- A list of "secrets" from JWT sample code and readme files.☆51Updated 4 years ago
- Exploit for PlaySMS 1.4 authenticated RCE☆14Updated 6 years ago
- AWS S3 Bucket/Object Finder☆25Updated 7 years ago
- Purpose of this repository is to help all the beginner and experienced professionals to understand,learn and share new tricks for the com…☆31Updated 6 years ago
- Report and finding templates used by the Serpico reporting tool☆16Updated 6 years ago