RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler
☆19Dec 24, 2013Updated 12 years ago
Alternatives and similar repositories for XStreamServer
Users that are interested in XStreamServer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This application is developed to test the race condition vulnerability in the web application. We have discussed about this vulnerability…☆14Oct 1, 2016Updated 10 years ago
- Run DependencyCheck Against Your Orgs GitHub Repos.☆14Jan 5, 2018Updated 8 years ago
- Demo server for testing Java deserialization payloads☆15Sep 18, 2016Updated 10 years ago
- Viewstate Hidden Control Enumerator☆17Sep 12, 2013Updated 13 years ago
- All the content from my Troopers 19 talk☆10Mar 20, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- spring mvc cve-2014-3625☆32Mar 11, 2016Updated 10 years ago
- S2-055的环境，基于rest-show-case改造☆37Dec 7, 2017Updated 8 years ago
- An offensive bash script which tries to find GENERIC privesc vulnerabilities and issues.☆13Oct 17, 2017Updated 8 years ago
- Scripts and auxiliary files for fuzzing PHP's unserialize function☆45Aug 13, 2017Updated 9 years ago
- Ansible module for OWASP ZAP using Python API to scan web targets for security issues☆15Dec 3, 2017Updated 8 years ago
- Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.☆34Mar 2, 2020Updated 6 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆34Sep 19, 2016Updated 10 years ago
- 用于还原svn仓库，支持1.6，1.7☆26Jun 3, 2016Updated 10 years ago
- CVE PoCs☆21Jul 16, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆14Nov 1, 2017Updated 8 years ago
- S2-057 poc test☆13Aug 31, 2018Updated 8 years ago
- ☆17Jun 30, 2025Updated last year
- This script is developed for understanding the Captcha Bypass Vulnerabilties.☆26May 3, 2017Updated 9 years ago
- Python script to exploit java unserialize on t3 (Weblogic)☆60Aug 9, 2017Updated 9 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Application Security Vulnerability Periodic Table☆14Aug 25, 2014Updated 12 years ago
- ☆27Oct 16, 2017Updated 8 years ago
- Plattform to develop and experiment with existing java web attacks.☆32Jan 8, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- X41 BeanStack - Stack Trace Fingerprinting BETA☆54Dec 3, 2025Updated 10 months ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆102Jun 1, 2018Updated 8 years ago
- Improved decoder for Burp Suite☆138Aug 30, 2021Updated 5 years ago
- cve-2014-0130 rails directory traversal vuln☆18May 15, 2017Updated 9 years ago
- ZigBee hacking tools and scripts☆14Mar 25, 2018Updated 8 years ago
- A deliberately vulnerable modern day app with lots of DOM related bugs☆34May 19, 2019Updated 7 years ago
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- ☆13Feb 25, 2014Updated 12 years ago
- This is a docker environment ready set up for multiple WooCommerce Plugin vulnerabilities.☆30Dec 1, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆17Oct 25, 2018Updated 7 years ago
- DNS over HTTPS Servers☆13Nov 19, 2018Updated 7 years ago
- 多线程探测弱密码程序☆32Apr 28, 2020Updated 6 years ago
- A static byte code analyzer for Java deserialization gadget research☆252Apr 17, 2017Updated 9 years ago
- CSV injection Vulnerable Script.☆29Jun 19, 2017Updated 9 years ago
- CVE-2018-3252-PoC☆73Dec 7, 2018Updated 7 years ago
- Example ASM code following SLAE course and exam assignments.☆37May 23, 2017Updated 9 years ago