J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
☆678Oct 29, 2025Updated 4 months ago
Alternatives and similar repositories for J2EEScan
Users that are interested in J2EEScan are comparing it to the libraries listed below
Sorting:
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆799Nov 7, 2021Updated 4 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,774Apr 26, 2024Updated last year
- Burp suite 分块传输辅助插件☆2,023Feb 23, 2022Updated 4 years ago
- Java RMI enumeration and attack tool.☆743Sep 28, 2017Updated 8 years ago
- Burp被动扫描流量转发插件☆1,460Jun 17, 2024Updated last year
- A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers☆2,369Dec 31, 2024Updated last year
- 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework☆1,952Mar 28, 2022Updated 3 years ago
- JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool☆2,514Jan 21, 2020Updated 6 years ago
- a new crawler based on python with more function including Network fingerprint search☆504Aug 14, 2018Updated 7 years ago
- A collection of curated Java Deserialization Exploits☆591May 16, 2021Updated 4 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,167May 26, 2023Updated 2 years ago
- Weblogic一键漏洞检测工具,V1.5,更新时间:20200730☆2,266May 22, 2023Updated 2 years ago
- Will to be a niubility scan-framework☆519Jul 1, 2025Updated 8 months ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,237Oct 1, 2022Updated 3 years ago
- 各种漏洞poc、Exp的收集或编写☆2,485Jun 24, 2025Updated 8 months ago
- ActiveScan++ Burp Suite Plugin☆656Dec 16, 2025Updated 2 months ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆612Mar 4, 2021Updated 5 years ago
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,011May 21, 2024Updated last year
- 一款基于BurpSuite的被动式shiro检测插件☆1,796Dec 14, 2022Updated 3 years ago
- A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅☆1,896Jan 15, 2026Updated last month
- Shiro550/Shiro721 一键化利用工具,支持多种回显方式☆1,951Jun 4, 2021Updated 4 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆823Dec 6, 2017Updated 8 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持☆967Jun 16, 2024Updated last year
- Source Code Security Audit (源代码安全审计)☆3,188Sep 16, 2022Updated 3 years ago
- ☆910Dec 24, 2023Updated 2 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,404Jan 18, 2022Updated 4 years ago
- TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.☆1,656May 25, 2024Updated last year
- Python2编写的struts2漏洞全版本检测和利用工具☆1,419May 7, 2019Updated 6 years ago
- Java Message Exploitation Tool☆511Jul 6, 2022Updated 3 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆8,776Dec 4, 2025Updated 3 months ago
- BurpSuite using the document and some extensions☆986Sep 10, 2022Updated 3 years ago
- Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)☆1,389Dec 16, 2022Updated 3 years ago
- ☆318Jun 4, 2021Updated 4 years ago
- weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…☆2,072Nov 24, 2023Updated 2 years ago
- DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。☆1,436Nov 14, 2018Updated 7 years ago
- A Burp Extender for checking for struts 2 RCE vulnerabilities.☆286Jun 4, 2024Updated last year
- ☆502Mar 10, 2016Updated 9 years ago
- 快速搭建各种漏洞环境(Various vulnerability environment)☆3,786Oct 27, 2020Updated 5 years ago
- Redis 4.x/5.x RCE☆975Nov 30, 2021Updated 4 years ago