Plattform to develop and experiment with existing java web attacks.
☆32Jan 8, 2018Updated 8 years ago
Alternatives and similar repositories for java-web-vulnerabilities
Users that are interested in java-web-vulnerabilities are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Oct 25, 2018Updated 8 years ago
- Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding In…☆21Jan 28, 2021Updated 5 years ago
- RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler☆19Dec 24, 2013Updated 12 years ago
- Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core"☆15May 15, 2024Updated 2 years ago
- C++ POC code for the wlbsctrl.dll hijack on IKEEXT☆57Apr 18, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software.☆13Oct 27, 2024Updated 2 years ago
- ☆126Oct 28, 2021Updated 5 years ago
- Remote Java classpath enumeration via deserialization☆22May 23, 2023Updated 3 years ago
- ☆43Dec 1, 2023Updated 2 years ago
- CloudHound is a cloudflare bypass tool which is using several methods such as DNS history Checkup, Cross-Site port Attack and etc to dete…☆19Apr 19, 2023Updated 3 years ago
- This repository houses the materials, slides and exercises from the r2con 2020 walkthrough sessions.☆38Sep 2, 2020Updated 6 years ago
- 在学习Java反序列化漏洞的过程中，用来理解Java RMI程序的执行流程，演示如何攻击Java RMI程序的几个示例。☆11May 6, 2020Updated 6 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- ☆20Apr 21, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆12Oct 29, 2015Updated 11 years ago
- Python bindings for RCrackI (http://freerainbowtables.com/)☆13Nov 10, 2012Updated 13 years ago
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆14Sep 20, 2021Updated 5 years ago
- .NET Deserialization Passive Scanner☆45Mar 23, 2018Updated 8 years ago
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆29Oct 18, 2021Updated 5 years ago
- A Simple command line tool that helps checking web applications to identify insecure deserialization vulnerabilities.☆25Jul 10, 2019Updated 7 years ago
- This repository holds a target infrastructure you can use for running the nimbostratus tools.☆24Mar 9, 2015Updated 11 years ago
- gRPC / gRPC-Web Pentest Practicing Lab☆10Aug 29, 2023Updated 3 years ago
- Default Linux files/images location☆29Jan 12, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Yet Another 403 Bypass Tool☆12Feb 19, 2023Updated 3 years ago
- A command-line tool for Cross-Site WebSocket Hijacking☆44Oct 18, 2023Updated 3 years ago
- A simple example for illustrating security best practices with Docker☆12Oct 19, 2020Updated 6 years ago
- NoSQL Injection Demo Application☆13Oct 18, 2013Updated 13 years ago
- © 哨兵博客 V3 Power by Bin4xin | Jekyll | Github Action.☆11Updated this week
- Virtual host wordlist☆54Jan 12, 2021Updated 5 years ago
- Advanced Recon Tool☆26Aug 24, 2020Updated 6 years ago
- Port scanner in bash☆16Nov 8, 2013Updated 12 years ago
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Aug 10, 2013Updated 13 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Yet Another Vulnerability Database☆17Jul 23, 2021Updated 5 years ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 3 years ago
- Vulnerable webapp testbed☆26May 11, 2016Updated 10 years ago
- CVE-2018-3191 反弹shell☆63Oct 23, 2018Updated 8 years ago
- Digging into private data through Sonarcloud public projects☆11Sep 13, 2024Updated 2 years ago
- ☆148Feb 17, 2022Updated 4 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago