J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
☆677Oct 29, 2025Updated 7 months ago
Alternatives and similar repositories for J2EEScan
Users that are interested in J2EEScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆802Nov 7, 2021Updated 4 years ago
- Burp suite 分块传输辅助插件☆2,034Feb 23, 2022Updated 4 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,807Apr 26, 2024Updated 2 years ago
- Burp被动扫描流量转发插件☆1,464Jun 17, 2024Updated last year
- 一款基于BurpSuite的被动式FastJson检测插件☆1,247Oct 1, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers☆2,369Dec 31, 2024Updated last year
- a new crawler based on python with more function including Network fingerprint search☆502Aug 14, 2018Updated 7 years ago
- Will to be a niubility scan-framework☆520Jul 1, 2025Updated 11 months ago
- Java RMI enumeration and attack tool.☆748Sep 28, 2017Updated 8 years ago
- 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework☆1,945Mar 28, 2022Updated 4 years ago
- JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool☆2,517Jan 21, 2020Updated 6 years ago
- Weblogic一键漏 洞检测工具，V1.5，更新时间：20200730☆2,263May 22, 2023Updated 3 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,177May 26, 2023Updated 3 years ago
- 一款基于BurpSuite的被动式shiro检测插件☆1,802Dec 14, 2022Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,018May 21, 2024Updated 2 years ago
- A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅☆1,937May 3, 2026Updated last month
- 各种漏洞poc、Exp的收集或编写☆2,498Jun 24, 2025Updated 11 months ago
- A collection of curated Java Deserialization Exploits☆594May 16, 2021Updated 5 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆616Mar 4, 2021Updated 5 years ago
- Source Code Security Audit (源代码安全审计)☆3,186Sep 16, 2022Updated 3 years ago
- BurpSuite using the document and some extensions☆993Sep 10, 2022Updated 3 years ago
- Python2编写的struts2漏洞全版本检测和利用工具☆1,411May 7, 2019Updated 7 years ago
- Shiro550/Shiro721 一键化利用工具，支持多种回显方式☆1,958Jun 4, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,402Jan 18, 2022Updated 4 years ago
- ☆916Dec 24, 2023Updated 2 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆827Dec 6, 2017Updated 8 years ago
- ☆318Jun 4, 2021Updated 5 years ago
- A Burp Extender for checking for struts 2 RCE vulnerabilities.☆287Jun 4, 2024Updated 2 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆8,919Dec 4, 2025Updated 6 months ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,404Dec 16, 2022Updated 3 years ago
- TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.☆1,661May 25, 2024Updated 2 years ago
- 被动式漏洞扫描系统☆866Nov 1, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。☆1,434Nov 14, 2018Updated 7 years ago
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,137Updated this week
- Java Message Exploitation Tool☆509Jul 6, 2022Updated 3 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆389Apr 16, 2022Updated 4 years ago
- weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…☆2,070Nov 24, 2023Updated 2 years ago
- 快速搭建各种漏洞环境(Various vulnerability environment)☆3,779Oct 27, 2020Updated 5 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持☆963Jun 16, 2024Updated last year