mazen160 / struts-pwn_CVE-2017-9805
An exploit for Apache Struts CVE-2017-9805
☆250Updated 7 years ago
Alternatives and similar repositories for struts-pwn_CVE-2017-9805:
Users that are interested in struts-pwn_CVE-2017-9805 are comparing it to the libraries listed below
- An exploit for Apache Struts CVE-2018-11776☆301Updated 6 years ago
- Fast subdomains enumeration tool for penetration testers☆117Updated 6 years ago
- ☆206Updated 4 years ago
- St2-057 Poc Example☆312Updated 6 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆383Updated 4 years ago
- ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)☆289Updated 2 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆141Updated 7 years ago
- A collection of curated Java Deserialization Exploits☆593Updated 3 years ago
- ☆231Updated 9 years ago
- Some scripts and exploits☆146Updated 6 years ago
- Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.☆203Updated last year
- Burp extension to perform Java Deserialization Attacks☆211Updated last year
- Central Repo for Burp extensions☆151Updated 3 years ago
- Search Exploitable Software on Linux☆227Updated 2 years ago
- Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆317Updated 6 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆254Updated 10 months ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆249Updated 3 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆576Updated 3 years ago
- YSOSERIAL Integration with burp suite☆165Updated 2 years ago
- Burp Extender plugin that generates a sitemap of a website using Wayback Machine☆227Updated 6 years ago
- RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk: h…☆306Updated 7 years ago
- Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution☆390Updated 7 years ago
- Working Python test and PoC for CVE-2018-11776, includes Docker lab☆125Updated 6 years ago
- A code demonstrating CVE-2018-0886☆265Updated 4 years ago
- ☆128Updated 8 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆504Updated 4 years ago
- Acunetix 0day RCE☆192Updated 8 years ago
- Burp Suite Extensions☆127Updated 11 years ago
- A JBoss script for obtaining remote shell access☆172Updated 4 years ago
- CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.☆176Updated 7 years ago