A portable, padding oracle exploit API
☆331Dec 1, 2022Updated 3 years ago
Alternatives and similar repositories for python-paddingoracle
Users that are interested in python-paddingoracle are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated script for performing Padding Oracle attacks☆812Jul 13, 2024Updated 2 years ago
- ☆23Nov 18, 2015Updated 10 years ago
- ☆91Jan 17, 2019Updated 7 years ago
- JRE8u20_RCE_Gadget☆255Jul 1, 2016Updated 10 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆390Apr 16, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Java RMI enumeration and attack tool.☆748Sep 28, 2017Updated 8 years ago
- A python-based padding oracle tool☆20Mar 31, 2026Updated 3 months ago
- Python Implementation of a .NET Padding Oracle Assessment Tool☆31Dec 17, 2015Updated 10 years ago
- Padding oracle attack against PKCS7☆330Oct 5, 2022Updated 3 years ago
- Mogwai Java Management Extensions (JMX) Exploitation Toolkit☆175Jul 21, 2016Updated 10 years ago
- discuz-plugin-scan☆21Sep 23, 2015Updated 10 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆55Mar 27, 2017Updated 9 years ago
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆802Nov 7, 2021Updated 4 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,181May 26, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Improving side channel analysis techniques for CTF problems.☆12Oct 25, 2020Updated 5 years ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,191Apr 21, 2024Updated 2 years ago
- Shiro RCE (Padding Oracle Attack)☆149Nov 15, 2019Updated 6 years ago
- ☆13Aug 18, 2016Updated 9 years ago
- Java-Web-Security - Sichere Webanwendungen mit Java entwickeln☆221Jul 13, 2026Updated last week
- SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.☆485Jan 1, 2018Updated 8 years ago
- PowerShell Scripts I find useful☆783May 18, 2016Updated 10 years ago
- Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls☆43Jan 22, 2016Updated 10 years ago
- An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction☆1,135Dec 2, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.☆217Feb 3, 2023Updated 3 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆583Sep 7, 2021Updated 4 years ago
- ☆35Aug 29, 2012Updated 13 years ago
- TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.☆1,662May 25, 2024Updated 2 years ago
- ☆503Mar 10, 2016Updated 10 years ago
- ☆136Nov 6, 2015Updated 10 years ago
- There is no pre-auth RCE in Jenkins since May 2017, but this is the one!☆610May 17, 2019Updated 7 years ago
- RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl☆210Mar 10, 2019Updated 7 years ago
- CVE-2019-2725 命令回显☆433May 8, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,779Dec 1, 2024Updated last year
- Build a database of libc offsets to simplify exploitation☆1,866Oct 23, 2024Updated last year
- Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4☆115May 17, 2019Updated 7 years ago
- ☆3,695Jan 9, 2025Updated last year
- Weblogic coherence.jar RCE☆176May 10, 2020Updated 6 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Jul 1, 2016Updated 10 years ago
- A tool for embedding XXE/XML exploits into different filetypes☆1,178Dec 16, 2024Updated last year