Alternatives and similar repositories for turner:

Users that are interested in turner are comparing it to the libraries listed below

• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆256Updated 3 years ago
• BishopFox / rmiscout
  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
  ☆425Updated 2 years ago
• mogwailabs / mjet
  MOGWAI LABS JMX exploitation toolkit
  ☆198Updated last year
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆327Updated last year
• lc / 230-OOB
  An Out-of-Band XXE server for retrieving file contents over FTP.
  ☆176Updated 4 years ago
• 0ang3el / websocket-smuggle
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆349Updated 5 months ago
• STMCyber / RmiTaste
  RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets fro…
  ☆106Updated 4 years ago
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.
  ☆261Updated this week
• redtimmy / Richsploit
  Exploitation toolkit for RichFaces
  ☆102Updated last year
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆346Updated 2 years ago
• pwntester / DupeKeyInjector
  DupeKeyInjector
  ☆135Updated 2 years ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆256Updated 2 years ago
• pimps / ysoserial-modified
  That repository contains my updates to the well know java deserialization exploitation tool ysoserial.
  ☆177Updated 2 years ago
• rsrdesarrollo / generator-burp-extension
  Everything you need about Burp Extension Generation
  ☆152Updated 2 years ago
• duc-nt / CVE-2020-6287-exploit
  PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Or…
  ☆95Updated 4 years ago
• neex / 1u.ms
  ☆168Updated 3 years ago
• pimps / gopher-tomcat-deployer
  Gopher Tomcat Deployer
  ☆47Updated 6 years ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆593Updated 3 years ago
• milo2012 / CVE-2018-13382
  CVE-2018-13382
  ☆147Updated 5 years ago
• tismayil / ohmybackup
  Scan Victim Backup Directories & Backup Files
  ☆178Updated last year
• bcoles / jira_scan
  A simple remote scanner for Atlassian Jira
  ☆120Updated 2 years ago
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆281Updated 2 weeks ago
• regilero / HTTPWookiee
  HTTPWookiee is an HTTP server and proxy stress tool (respect of RFC, HTTP Smuggling issues, etc). If you run an HTTP server project conta…
  ☆49Updated 7 years ago
• chipik / SAP_RECON
  PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)
  ☆215Updated 4 years ago
• bao7uo / dp_crypto
  Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)
  ☆166Updated 4 years ago
• httpvoid / CVE-Reverse
  ☆281Updated 3 years ago
• 0x48piraj / jiraffe
  One stop place for exploiting Jira instances in your proximity
  ☆185Updated 8 months ago
• PortSwigger / distribute-damage
  Evenly distributes scanner load across targets
  ☆82Updated 2 years ago
• 0xacb / viewgen
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆595Updated last year
• silentsignal / burp-piper
  Piper Burp Suite Extender plugin
  ☆116Updated 11 months ago