Alternatives and similar repositories for burp-log4shell:

Users that are interested in burp-log4shell are comparing it to the libraries listed below

• woodpecker-appstore / log4j-payload-generator
  Log4j jndi injects the Payload generator
  ☆487Updated 3 years ago
• synacktiv / HopLa
  HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
  ☆722Updated 3 years ago
• projectdiscovery / nuclei-burp-plugin
  Nuclei plugin for BurpSuite
  ☆1,221Updated 5 months ago
• ethicalhackingplayground / ssrf-king
  SSRF plugin for burp Automates SSRF Detection in all of the Request
  ☆569Updated 4 years ago
• duc-nt / RCE-0-day-for-GhostScript-9.50
  RCE 0-day for GhostScript 9.50 - Payload generator
  ☆542Updated 3 years ago
• qtc-de / remote-method-guesser
  Java RMI Vulnerability Scanner
  ☆851Updated 8 months ago
• Puliczek / CVE-2021-44228-PoC-log4j-bypass-words
  🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
  ☆934Updated 3 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆583Updated last year
• PortSwigger / autorize
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…
  ☆235Updated 3 months ago
• mdsecresearch / BurpSuiteSharpener
  ☆516Updated last year
• Accenture / jenkins-attack-framework
  ☆557Updated 3 years ago
• volkandindar / agartha
  A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…
  ☆360Updated 4 months ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆851Updated 3 years ago
• luisfontes19 / xxexploiter
  Tool to help exploit XXE vulnerabilities
  ☆553Updated 2 years ago
• safebuffer / sam-the-admin
  Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
  ☆1,003Updated 2 years ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆596Updated 3 years ago
• tangxiaofeng7 / BurpLog4j2Scan
  Burpsuite extension for log4j2rce
  ☆28Updated 3 years ago
• PortSwigger / active-scan-plus-plus
  ActiveScan++ Burp Suite Plugin
  ☆214Updated last month
• 0xInfection / LogMePwn
  A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
  ☆398Updated 2 months ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆619Updated last year
• cube0x0 / noPac
  CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
  ☆1,360Updated 3 years ago
• fullhunt / spring4shell-scan
  A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities
  ☆658Updated 2 years ago
• p0dalirius / ApacheTomcatScanner
  A python script to scan for Apache Tomcat server vulnerabilities.
  ☆816Updated 2 weeks ago
• jas502n / Grafana-CVE-2021-43798
  Grafana Unauthorized arbitrary file reading vulnerability
  ☆356Updated 2 years ago
• CoreyD97 / BurpCustomizer
  Because just a dark theme wasn't enough!
  ☆558Updated 2 months ago
• InitRoot / BurpJSLinkFinder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆763Updated 11 months ago
• BobTheShoplifter / Spring4Shell-POC
  Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965
  ☆362Updated 2 years ago
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆415Updated 4 months ago
• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆501Updated 2 years ago
• httpvoid / CVE-Reverse
  ☆281Updated 3 years ago