usdAG / slipit
Utility for creating ZipSlip archives
☆67Updated last year
Related projects ⓘ
Alternatives and complementary repositories for slipit
- Gopher Tomcat Deployer☆47Updated 6 years ago
- Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.☆52Updated 5 months ago
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆59Updated 2 weeks ago
- tool that generates bypasses for open redirects☆48Updated 2 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆25Updated 9 months ago
- ☆24Updated 5 months ago
- Improve automated and semi-automated active scanning in Burp Pro☆60Updated 2 years ago
- This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite …☆35Updated this week
- Recurrent Neural Network SubDomain Discovery Tool☆89Updated 2 years ago
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)☆86Updated 7 months ago
- RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets fro…☆106Updated 4 years ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆54Updated last year
- ☆30Updated last year
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆67Updated 2 years ago
- tetctf2020_amf_writeups☆23Updated 3 years ago
- The following package is the standalone wordlist-only component to flask-unsign.☆37Updated 5 months ago
- A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers☆42Updated 2 years ago
- A fingerprint generation helper for nuclei network templates☆71Updated 2 years ago
- ☆24Updated 2 years ago
- Exploit for CVE-2024-20767 - Adobe ColdFusion☆33Updated 7 months ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆59Updated last year
- ☆23Updated last year
- ☆13Updated 2 months ago
- A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated remote code execution.☆5Updated last year
- RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2☆60Updated 3 years ago
- ☆158Updated 3 years ago
- ElasticSearch exploit and Pentesting guide for penetration tester☆22Updated 2 years ago
- Parse HPROF files from the Spring Boot Heapdump Actuator☆26Updated 5 months ago