omerlh / insecure-deserialisation-net-poc

Related projects: ⓘ

• brandonprry / vulnerable_xxe
  A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.
  ☆26Updated 11 years ago
• smiegles / certs
  Parse X509 certificates to get the (sub)domains in it.
  ☆28Updated 6 years ago
• omarkurt / cve-2014-0130
  cve-2014-0130 rails directory traversal vuln
  ☆18Updated 7 years ago
• GoSecure / burp-ntlm-challenge-decoder
  Burp extension to decode NTLM SSP headers and extract domain/host information
  ☆31Updated 3 years ago
• floyd-fuh / burp-HttpFuzzer
  Burp plugin to do random fuzzing of HTTP requests
  ☆33Updated 7 years ago
• tls-attacker / TLS-Attacker-BurpExtension
  ☆35Updated 4 years ago
• MohitDabas / sastgriper
  A simple grep user interface for searching code which can be used for SAST.
  ☆8Updated 5 years ago
• nccgroup / wstalker
  WStalker: an easy proxy
  ☆25Updated 4 years ago
• alexlauerman / ms10-070CheckPatch
  Check for .net padding oracle patch
  ☆19Updated 5 years ago
• NetSPI / crossdomainscanner
  Python tool for expired domain discovery in crossdomain.xml files
  ☆22Updated 7 years ago
• AdrianCitu / burp-tabnabbing-extension
  Burp Suite Professional extension in Java for Tabnabbing attack
  ☆13Updated 6 years ago
• securityMB / burp-exceptions
  Simple trick to increase readability of exceptions raised by Burp extensions written in Python
  ☆42Updated 7 years ago
• allfro / dotNetBeautifier
  A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…
  ☆12Updated 9 years ago
• debasishm89 / dotNetFuzz
  A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.
  ☆42Updated 5 years ago
• cornerpirate / rdpupload
  Python script which will type a file into an RDP session. For when drag and drop and disk mounting is not possible
  ☆31Updated 4 months ago
• jmxploit / jmxploit
  A tool to analyse JMX API security level.
  ☆43Updated 10 years ago
• vysecurity / Invoke-ProcessScan
  Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.
  ☆42Updated 7 years ago
• syriusbughunt / CVE-2018-14667
  All about CVE-2018-14667; From what it is to how to successfully exploit it.
  ☆47Updated 5 years ago
• jayeshchauhan / SKANDA
  OWASP Skanda - SSRF Exploitation Framework
  ☆36Updated 11 years ago
• nccgroup / Extractor
  Extension adds a new tab in Burp Suite called Extractor
  ☆42Updated 5 years ago
• mrfuzzy8 / Scripts
  ☆13Updated 8 years ago
• PortSwigger / detect-dynamic-js
  The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and ai…
  ☆13Updated 5 years ago
• Den1al / pymassdns
  A Pythonic wrapper to MassDNS
  ☆23Updated 6 years ago
• federicodotta / BurpJDSer-ng-edited
  Burp Suite plugin that allow to deserialize Java objects and convert them in an XML format. Unpack also gzip responses. Based on BurpJDSe…
  ☆20Updated 7 months ago
• OpenSecurityResearch / flash-xdomain-xploit
  ActionScript Proof of Concept to perform cross-domain reads
  ☆16Updated 11 years ago
• pwntester / dotnet-deserialization-scanner
  .NET Deserialization Passive Scanner
  ☆45Updated 6 years ago
• Hypnoze57 / FShell
  My python3 implementation of a Forward Shell
  ☆35Updated 5 years ago
• Meatballs1 / ms16-032
  ☆21Updated 8 years ago
• mthbernardes / BadArchitect
  Abusing SketchUp to make persistence on Windows
  ☆19Updated 5 years ago
• riyazwalikar / injection-attacks-nosql-talk
  Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019
  ☆22Updated 5 years ago