RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler
☆19Dec 24, 2013Updated 12 years ago
Alternatives and similar repositories for XStreamServer
Users that are interested in XStreamServer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This application is developed to test the race condition vulnerability in the web application. We have discussed about this vulnerability…☆14Oct 1, 2016Updated 10 years ago
- Demo server for testing Java deserialization payloads☆15Sep 18, 2016Updated 10 years ago
- All the content from my Troopers 19 talk☆10Mar 20, 2019Updated 7 years ago
- Viewstate Hidden Control Enumerator☆17Sep 12, 2013Updated 13 years ago
- spring mvc cve-2014-3625☆32Mar 11, 2016Updated 10 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.☆34Mar 2, 2020Updated 6 years ago
- Scripts and auxiliary files for fuzzing PHP's unserialize function☆46Aug 13, 2017Updated 9 years ago
- A PoC that shows that Web Vulnerabilities can indeed be interesting☆19Mar 27, 2018Updated 8 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆34Sep 19, 2016Updated 10 years ago
- This script is developed for understanding the Captcha Bypass Vulnerabilties.☆26May 3, 2017Updated 9 years ago
- CVE PoCs☆20Jul 16, 2020Updated 6 years ago
- Python script to exploit java unserialize on t3 (Weblogic)☆60Aug 9, 2017Updated 9 years ago
- X41 BeanStack - Stack Trace Fingerprinting BETA☆54Dec 3, 2025Updated 10 months ago
- fastjson-1.2.47☆66Aug 5, 2019Updated 7 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆17Jun 30, 2025Updated last year
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Application Security Vulnerability Periodic Table☆14Aug 25, 2014Updated 12 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆102Jun 1, 2018Updated 8 years ago
- Updated version of SWFIntruder☆27Aug 16, 2016Updated 10 years ago
- S2-057 poc test☆13Aug 31, 2018Updated 8 years ago
- A deliberately vulnerable modern day app with lots of DOM related bugs☆34May 19, 2019Updated 7 years ago
- CSV injection Vulnerable Script.☆29Jun 19, 2017Updated 9 years ago
- Example ASM code following SLAE course and exam assignments.☆37May 23, 2017Updated 9 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- CVE-2018-3252-PoC☆73Dec 7, 2018Updated 7 years ago
- ☆17Oct 25, 2018Updated 8 years ago
- INACTIVE - http://mzl.la/ghe-archive - Framboise is a fuzzer for in-depth testing of WebAPIs.☆20Aug 8, 2017Updated 9 years ago
- DNS over HTTPS Servers☆13Nov 19, 2018Updated 7 years ago
- Run DependencyCheck Against Your Orgs GitHub Repos.☆14Jan 5, 2018Updated 8 years ago
- Scraping creds using Github API and truffleHog☆11Dec 13, 2023Updated 2 years ago
- ☆10Aug 8, 2015Updated 11 years ago
- Example of using Gauge and OWASP ZAP for test automation☆11Jan 9, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A simple script to check for insecurely exposed git repositories.☆12Mar 17, 2019Updated 7 years ago
- intentionally vulnerable API☆30Jul 2, 2026Updated 3 months ago
- Extension adds a new tab in Burp Suite called Extractor☆41Apr 13, 2019Updated 7 years ago
- S2-055的环境，基于rest-show-case改造☆37Dec 7, 2017Updated 8 years ago
- A collection of handy and specific tools for the Red Teamer☆11Aug 13, 2024Updated 2 years ago
- Burp Suite extension for JAX-RS☆66Mar 17, 2017Updated 9 years ago
- Improved decoder for Burp Suite☆138Aug 30, 2021Updated 5 years ago