Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
☆184Jul 30, 2019Updated 6 years ago
Alternatives and similar repositories for burp_wp
Users that are interested in burp_wp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆103Jun 1, 2018Updated 8 years ago
- Some scripts and exploits☆147Jul 9, 2018Updated 8 years ago
- ☆16Feb 26, 2018Updated 8 years ago
- PoC code for crashing windows active directory☆35Sep 19, 2018Updated 7 years ago
- ☆163Dec 7, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An exploit for Apache Struts CVE-2017-9805☆247Nov 7, 2017Updated 8 years ago
- Stealing CSRF tokens with CSS injection (without iFrames)☆322Feb 7, 2018Updated 8 years ago
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques☆747May 4, 2019Updated 7 years ago
- Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite☆323Aug 20, 2017Updated 8 years ago
- Remote Recon and Collection☆462Nov 23, 2017Updated 8 years ago
- Collection of things made during my SLAE 32-bit journey☆14Feb 24, 2022Updated 4 years ago
- Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid…☆86Sep 19, 2017Updated 8 years ago
- An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.☆306Sep 7, 2022Updated 3 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆74Feb 18, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.☆176Sep 14, 2017Updated 8 years ago
- A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers☆280Oct 29, 2018Updated 7 years ago
- A collection of curated Java Deserialization Exploits☆594May 16, 2021Updated 5 years ago
- Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)☆599Jan 8, 2021Updated 5 years ago
- Improved decoder for Burp Suite☆139Aug 30, 2021Updated 4 years ago
- A Ruby framework designed to aid in the penetration testing of WordPress systems.☆1,048Nov 24, 2019Updated 6 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆583Sep 7, 2021Updated 4 years ago
- NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements☆94Sep 19, 2017Updated 8 years ago
- ☆268Mar 19, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords☆51Oct 24, 2017Updated 8 years ago
- A collection of scripts used to interact with the Burp Rest API☆57Feb 11, 2019Updated 7 years ago
- Nashorn Post Exploitation☆32Feb 12, 2018Updated 8 years ago
- Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)☆49Jul 17, 2018Updated 8 years ago
- Joomla Vulnerability Component Scanner☆64Sep 28, 2018Updated 7 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆101Jul 29, 2019Updated 6 years ago
- POC of Mikrotik exploit from Vault 7 CIA Leaks☆15Dec 29, 2017Updated 8 years ago
- A code demonstrating CVE-2018-0886☆268Aug 14, 2020Updated 5 years ago
- Pentest TeamCity using Metasploit☆46Feb 8, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- SHELLING - a comprehensive OS command injection payload generator☆444Mar 16, 2020Updated 6 years ago
- Github Desktop RCE PoC☆28Dec 4, 2018Updated 7 years ago
- PHP tool to test XSS☆22Nov 5, 2019Updated 6 years ago
- Brute forcer and shell deployer for WildFly☆98Mar 10, 2018Updated 8 years ago
- A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)☆37Sep 8, 2017Updated 8 years ago
- How To Execute Shellcode via HTA☆141Feb 23, 2018Updated 8 years ago
- Image size issues plugin for Burp Suite☆95Jun 27, 2018Updated 8 years ago