pwntester / ysoserialLinks
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆36Updated 9 years ago
Alternatives and similar repositories for ysoserial
Users that are interested in ysoserial are comparing it to the libraries listed below
Sorting:
- Converting your Burp Suite projects into JSON APIs which can be viewed with Swagger editor or imported into Postman.☆75Updated last year
- Vast.ai Password Kracking☆92Updated 3 months ago
- Weaponized EvilnoVNC: Scalable and semi-automated MFA-Phishing☆53Updated 10 months ago
- Leveraging GitHub Actions to rotate IP addresses during password spraying attacks to bypass IP-Based blocking☆150Updated last year
- An MCP Server for Pwndoc (Pentesting Reporting Tool)☆37Updated 2 weeks ago
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆70Updated 2 years ago
- Automate Scoping, OSINT and Recon assessments.☆109Updated 2 weeks ago
- A Burp extension to help pentesters copy requests / responses for reports.☆51Updated 6 months ago
- ☆18Updated last year
- Small Script that permits to enumerate folders in Windows Defender Exclusion List with no Administrative privileges☆27Updated last year
- Everything and anything related to password spraying☆151Updated last year
- A Slack bot phishing framework for Red Teaming exercises☆166Updated last year
- Automate converting webshells into reverse shells.☆72Updated 2 weeks ago
- NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.☆67Updated 2 years ago
- A Burp Suite extension that helps track and manage multiple sessions simultaneously by color-coding HTTP requests based on custom pattern…☆27Updated last year
- LDAP Enumeration Tool for Pentesters☆48Updated 9 months ago
- Comprehensive AWS cloud reconnaissance and privilege escalation toolkit written in Python. Features IAM, EC2, S3, Lambda, ECS, Secrets Ma…☆48Updated 6 months ago
- Burp Suite Extension for inserting a magic byte into responder's request☆24Updated 2 years ago
- AI/LLM local model integration for analysis of reconftw results☆91Updated 9 months ago
- ☆106Updated 11 months ago
- Notes and cheatsheets for the OffSec Wireless Professional (OSWP) certification☆44Updated 2 years ago
- ☆55Updated 3 weeks ago
- A structured red-team prompt for generating ethical hacking tools using AI - designed for use in labs, CTFs, and authorized security asse…☆26Updated 7 months ago
- API fuzzer that exposes security flaws by sending malformed inputs☆16Updated last year
- Nuclei scripts created by @rxerium for zero days / actively exploited vulnerabilities.☆72Updated this week
- smugglo - an easy to use script for wrapping files into self-dropping HTML payloads to bypass content filters☆130Updated 10 months ago
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆126Updated last month
- Repository with quick triggers to help during Pentest in an Active Directory environment.☆46Updated 6 months ago
- Script related in Active Directory Attacks Domain☆24Updated 2 years ago
- A collection of tools that I use in CTF's or for assessments☆107Updated last year