pwntester / SpringBreaker

Related projects: ⓘ

• zerothoughts / jndipoc
  Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
  ☆42Updated 8 years ago
• GoSecure / break-fast-serial
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆54Updated 7 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆106Updated 5 years ago
• ramshazar / orangetsai-springboot-actuator-poc
  ☆27Updated 3 years ago
• erpscanteam / CVE-2018-2380
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆52Updated 6 years ago
• GrrrDog / ZeroNights-HackQuest-2016
  2 web tasks from ZeroNights HackQuest 2016
  ☆51Updated 7 years ago
• ryanInf / CVE-2018-2893
  ☆29Updated this week
• javaExploit / jackson-rce-via-two-new-gadgets
  ☆23Updated this week
• ilmila / springcss-cve-2014-3625
  spring mvc cve-2014-3625
  ☆32Updated 8 years ago
• vah13 / BurpCRLFPlugin
  Another plugin for CRLF vulnerability detection
  ☆26Updated 7 years ago
• vah13 / Oracle-BI-bugs
  ☆34Updated 5 years ago
• pwntester / XMLDecoder
  RCE Exploit PoC for XMLDecoder
  ☆63Updated 11 years ago
• mbechler / serjs
  A Java serializer in JavaScript
  ☆82Updated 6 years ago
• nccgroup / AMFDSer-ngng
  A Burp Extender plugin, that will take deserialized AMF objects and encode them in XML using the Xtream library
  ☆27Updated 9 years ago
• 0ang3el / HQLi-playground
  ☆45Updated 8 years ago
• roo7break / serialator
  Python script to exploit CVE-2015-4852.
  ☆29Updated 8 years ago
• mzeyong / CVE-2017-13089
  CVE-2017-13089
  ☆55Updated 6 years ago
• k1n9 / CVE-2019-0604
  ☆51Updated this week
• anbai-inc / CVE-2018-2893
  ☆60Updated this week
• o2platform / DefCon_RESTing
  Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
  ☆51Updated 11 years ago
• CHYbeta / CVE-2017-11427-DEMO
  The Demo for CVE-2017-11427
  ☆12Updated 6 years ago
• wuntee / BurpAuthzPlugin
  ☆75Updated 11 years ago
• pwntester / XStreamPOC
  POC for XStream RCE
  ☆13Updated 10 years ago
• re4lity / zabbixPwn
  ☆21Updated this week
• brianwrf / S2-053-CVE-2017-12611
  A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
  ☆36Updated 7 years ago
• RUB-NDS / DTD-Attacks
  Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java
  ☆56Updated 8 years ago
• aurainfosec / xss_payloads
  XSS payloads for edge cases
  ☆34Updated 5 years ago
• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Updated 6 years ago
• newtonguass / ADPenLab
  ☆32Updated 4 years ago
• immunIT / CVE-2018-11759
  Proof of concept showing how to exploit the CVE-2018-11759
  ☆41Updated 5 years ago