Alternatives and similar repositories for spring-view-manipulation:

Users that are interested in spring-view-manipulation are comparing it to the libraries listed below

• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆347Updated 2 years ago
• pyn3rd / Spring-Boot-Vulnerability
  ☆402Updated 3 years ago
• httpvoid / CVE-Reverse
  ☆281Updated 3 years ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆595Updated 3 years ago
• mogwailabs / mjet
  MOGWAI LABS JMX exploitation toolkit
  ☆200Updated last year
• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆246Updated 3 years ago
• laluka / jolokia-exploitation-toolkit
  jolokia-exploitation-toolkit
  ☆284Updated 2 months ago
• lc / 230-OOB
  An Out-of-Band XXE server for retrieving file contents over FTP.
  ☆176Updated 4 years ago
• ozzi- / JWT4B
  JWT Support for Burp
  ☆249Updated 6 months ago
• mpgn / Spring-Boot-Actuator-Exploit
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆318Updated 4 years ago
• LoRexxar / redis-rogue-server
  Redis 4.x & 5.x RCE
  ☆140Updated 5 years ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆514Updated 4 years ago
• ethicalhackingplayground / ssrf-king
  SSRF plugin for burp Automates SSRF Detection in all of the Request
  ☆566Updated 4 years ago
• PortSwigger / js-link-finder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆164Updated 5 years ago
• veracode-research / solr-injection
  Apache Solr Injection Research
  ☆572Updated 5 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆580Updated last year
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆619Updated last year
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆140Updated 6 years ago
• 0ang3el / websocket-smuggle
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆351Updated 6 months ago
• cvebase / cvebase.com
  cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vul…
  ☆140Updated 3 years ago
• ryandamour / ssrfuzz
  SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities
  ☆182Updated 3 years ago
• doyensec / StandardizedImageProcessingTest
  A test suite built with Mocha/Chai to test for behavioral differences between image libraries for the web
  ☆70Updated 4 years ago
• jas502n / Grafana-CVE-2021-43798
  Grafana Unauthorized arbitrary file reading vulnerability
  ☆355Updated 2 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆846Updated 3 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆251Updated last year
• welk1n / JNDI-Injection-Bypass
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆476Updated 4 years ago
• synacktiv / QLinspector
  Finding Java gadget chains with CodeQL
  ☆166Updated last month
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆74Updated 3 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆241Updated 7 years ago
• appsecco / json-flash-csrf-poc
  This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.
  ☆75Updated 7 years ago