Alternatives and similar repositories for ois-dos

Users that are interested in ois-dos are comparing it to the libraries listed below

• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆124Updated 7 years ago
• GDSSecurity / Jetleak-Testing-Script
  Script to test if a server is vulnerable to the JetLeak vulnerability
  ☆144Updated 9 years ago
• ssexxe / XXEBugFind
  A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications
  ☆72Updated 11 years ago
• o2platform / DefCon_RESTing
  Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
  ☆53Updated 12 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆250Updated 8 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆214Updated last year
• NetSPI / Burp-Extensions
  Central Repo for Burp extensions
  ☆151Updated 4 years ago
• mbechler / serjs
  A Java serializer in JavaScript
  ☆81Updated 7 years ago
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆108Updated 9 years ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆235Updated 6 years ago
• federicodotta / HandyCollaborator
  Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!
  ☆104Updated 7 years ago
• irsdl / httpninja
  HTTP.ninja
  ☆151Updated 2 years ago
• siberas / sjet
  siberas JMX exploitation toolkit
  ☆130Updated 2 years ago
• yandex / burp-molly-pack
  Security checks pack for Burp Suite
  ☆139Updated 7 years ago
• attackercan / cpp-sql-fuzzer
  ☆56Updated 9 years ago
• GrrrDog / ZeroNights-WebVillage-2017
  ☆71Updated 8 years ago
• ONsec-Lab / scripts
  Utils
  ☆273Updated 9 years ago
• ttffdd / XBadManners
  Tool for CVE-2018-16323
  ☆82Updated 6 years ago
• pinnace / burp-jwt-fuzzhelper-extension
  JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.
  ☆100Updated 6 years ago
• firefart / CVE-2018-7600
  CVE-2018-7600 - Drupal 7.x RCE
  ☆72Updated 7 years ago
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 3 years ago
• njfox / Java-Deserialization-Exploit
  ☆128Updated 9 years ago
• 0ang3el / EasyCSRF
  ☆162Updated 7 years ago
• 0ang3el / Unsafe-JAX-RS-Burp
  Burp Suite extension for JAX-RS
  ☆65Updated 8 years ago
• dancezarp / TBDEx
  ☆86Updated 8 years ago
• TheRook / CSRF-Request-Builder
  ☆77Updated 9 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆297Updated 2 years ago
• ropnop / xxetimes
  An interactive OOB XXE data exfiltration tool
  ☆90Updated 8 years ago
• yolosec / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆34Updated 9 years ago
• GoSecure / break-fast-serial
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆55Updated 8 years ago