Alternatives and similar repositories for struts-pwn:

Users that are interested in struts-pwn are comparing it to the libraries listed below

• mazen160 / struts-pwn_CVE-2017-9805
  An exploit for Apache Struts CVE-2017-9805
  ☆249Updated 7 years ago
• nccgroup / shocker
  A tool to find and exploit servers vulnerable to Shellshock
  ☆332Updated last year
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• AonCyberLabs / xxe-recursive-download
  ☆232Updated 9 years ago
• gabemarshall / Brosec
  Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
  ☆355Updated 2 years ago
• hatRiot / clusterd
  application server attack toolkit
  ☆686Updated 4 years ago
• DanMcInerney / pentest-machine
  Automates some pentest jobs via nmap xml file
  ☆323Updated 6 years ago
• mazen160 / struts-pwn_CVE-2018-11776
  An exploit for Apache Struts CVE-2018-11776
  ☆301Updated 6 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆210Updated last year
• lightos / Panoptic
  Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and conf…
  ☆313Updated 3 years ago
• s1kr10s / Apache-Struts-v4
  ☆206Updated 3 years ago
• cyberheartmi9 / CVE-2017-12617
  Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
  ☆389Updated 7 years ago
• ngalongc / AutoLocalPrivilegeEscalation
  An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
  ☆489Updated 3 years ago
• davidpepper / fierce-domain-scanner
  Fierce.pl Domain Scanner
  ☆298Updated 5 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆594Updated 3 years ago
• mandatoryprogrammer / xssless
  An automated XSS payload generator written in python.
  ☆315Updated 8 years ago
• SpiderLabs / portia
  Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…
  ☆502Updated 4 years ago
• RUB-NDS / WS-Attacker
  WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr …
  ☆478Updated 4 months ago
• jas502n / St2-057
  St2-057 Poc Example
  ☆313Updated 6 years ago
• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆254Updated 8 months ago
• bitquark / dnspop
  Analysis of DNS records to find popular trends
  ☆446Updated 8 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆330Updated 7 years ago
• allfro / BurpKit
  Next-gen BurpSuite penetration testing tool
  ☆459Updated 9 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆290Updated last year
• reider-roque / linpostexp
  Linux post exploitation enumeration and exploit checking tools
  ☆179Updated 4 years ago
• evilpacket / DVCS-Pillage
  Pillage web accessible GIT, HG and BZR repositories
  ☆315Updated 8 years ago
• johndekroon / serializekiller
  Mass scanner for the Java serialize bug
  ☆151Updated 6 years ago
• 0xsauby / yasuo
  A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
  ☆574Updated 7 years ago
• Plazmaz / Sublist3r
  Fast subdomains enumeration tool for penetration testers
  ☆117Updated 6 years ago