J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
☆678Oct 29, 2025Updated 8 months ago
Alternatives and similar repositories for J2EEScan
Users that are interested in J2EEScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆802Nov 7, 2021Updated 4 years ago
- Burp suite 分块传输辅助插件☆2,031Feb 23, 2022Updated 4 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,808Apr 26, 2024Updated 2 years ago
- Burp被动扫描流量转发插件☆1,463Jun 17, 2024Updated 2 years ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,251Oct 1, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- a new crawler based on python with more function including Network fingerprint search☆502Aug 14, 2018Updated 7 years ago
- A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers☆2,372Dec 31, 2024Updated last year
- Java RMI enumeration and attack tool.☆748Sep 28, 2017Updated 8 years ago
- Will to be a niubility scan-framework☆520Jul 1, 2025Updated last year
- 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework☆1,940Mar 28, 2022Updated 4 years ago
- JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool☆2,520Jan 21, 2020Updated 6 years ago
- Weblogic一键漏洞检测工具，V1.5，更新时间：20200730☆2,266May 22, 2023Updated 3 years ago
- ActiveScan++ Burp Suite Plugin☆664Updated this week
- 一款基于BurpSuite的被动式shiro检测插件☆1,807Dec 14, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,020May 21, 2024Updated 2 years ago
- A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅☆1,954Jun 26, 2026Updated last month
- The cheat sheet about Java Deserialization vulnerabilities☆3,181May 26, 2023Updated 3 years ago
- 各种漏洞poc、Exp的收集或编写☆2,499Jun 24, 2025Updated last year
- Source Code Security Audit (源代码安全审计)☆3,187Sep 16, 2022Updated 3 years ago
- BurpSuite using the document and some extensions☆995Sep 10, 2022Updated 3 years ago
- A collection of curated Java Deserialization Exploits☆594May 16, 2021Updated 5 years ago
- Shiro550/Shiro721 一键化利用工具，支持多种回显方式☆1,958Jun 4, 2021Updated 5 years ago
- Python2编写的struts2漏洞全版本检测和利用工具☆1,413May 7, 2019Updated 7 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆621Mar 4, 2021Updated 5 years ago
- ☆919Dec 24, 2023Updated 2 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,401Jan 18, 2022Updated 4 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆829Dec 6, 2017Updated 8 years ago
- ☆318Jun 4, 2021Updated 5 years ago
- A Burp Extender for checking for struts 2 RCE vulnerabilities.☆285Jun 4, 2024Updated 2 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆8,993Dec 4, 2025Updated 7 months ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,405Dec 16, 2022Updated 3 years ago
- 被动式漏洞扫描系统☆866Nov 1, 2017Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。☆1,435Nov 14, 2018Updated 7 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆390Apr 16, 2022Updated 4 years ago
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,146Jun 23, 2026Updated last month
- TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.☆1,662May 25, 2024Updated 2 years ago
- weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…☆2,074Nov 24, 2023Updated 2 years ago
- 快速搭建各种漏洞环境(Various vulnerability environment)☆3,786Oct 27, 2020Updated 5 years ago
- Java Message Exploitation Tool☆508Jul 6, 2022Updated 4 years ago