x41sec/BeanStack external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

x41sec/BeanStack

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/x41sec/BeanStack)

Close

x41sec / BeanStackView on GitHubMore

• External links
• Readme badge

X41 BeanStack - Stack Trace Fingerprinting BETA

☆52Dec 3, 2025Updated 2 months ago

Alternatives and similar repositories for BeanStack

Users that are interested in BeanStack are comparing it to the libraries listed below

• bit4woo / CVE-2020-13925

  View on GitHub
  ☆16Jul 20, 2020Updated 5 years ago
• irsl / struts-any-results

  View on GitHub
  Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.
  ☆12Sep 30, 2018Updated 7 years ago
• mbechler / serjs

  View on GitHub
  A Java serializer in JavaScript
  ☆80May 21, 2018Updated 7 years ago
• pwntester / XStreamServer

  View on GitHub
  RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler
  ☆20Dec 24, 2013Updated 12 years ago
• hessandrew / CVE-2020-9442

  View on GitHub
  OpenVPN Connect for Windows (MSI) - 3.1.0.361 - Privilege Escalation
  ☆26Feb 28, 2020Updated 6 years ago
• erpscanteam / CVE-2018-2380

  View on GitHub
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆52Mar 14, 2018Updated 7 years ago
• redtimmy / OAMBuster

  View on GitHub
  Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)
  ☆25Aug 6, 2019Updated 6 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 6 years ago
• knqyf263 / CVE-2019-6467

  View on GitHub
  CVE-2019-6467 (BIND nxdomain-redirect)
  ☆26Apr 25, 2019Updated 6 years ago
• mbechler / serianalyzer

  View on GitHub
  A static byte code analyzer for Java deserialization gadget research
  ☆252Apr 17, 2017Updated 8 years ago
• Lopseg / Jsdir

  View on GitHub
  Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
  ☆122Sep 12, 2020Updated 5 years ago
• whiteHat001 / MIcrosoft-Word-Use-After-Free

  View on GitHub
  ☆16Jul 7, 2020Updated 5 years ago
• pwntester / JVMDeserialization

  View on GitHub
  PoC for Scala and Groovy
  ☆14Apr 4, 2016Updated 9 years ago
• bayotop / sink-logger

  View on GitHub
  Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.
  ☆49Jul 20, 2022Updated 3 years ago
• hengyunabc / dubbo-apache-commons-collections-bug

  View on GitHub
  演示dubbo rpc Apache commons collections 的Java序列化漏洞
  ☆42Nov 13, 2015Updated 10 years ago
• destine21 / ZIPFileRaider

  View on GitHub
  ZIP File Raider - Burp Extension for ZIP File Payload Testing
  ☆72Aug 31, 2020Updated 5 years ago
• 0ang3el / HQLi-playground

  View on GitHub
  ☆46May 15, 2016Updated 9 years ago
• samhaxr / XXRF-Shots

  View on GitHub
  XXRF Shots - Useful for testing SSRF vulnerability
  ☆74Feb 18, 2023Updated 3 years ago
• liamg / pax

  View on GitHub
  CLI tool for PKCS7 padding oracle attacks
  ☆142Feb 25, 2021Updated 5 years ago
• Proteas / ZipArchive-Dir-Traversal-PoC

  View on GitHub
  ZipArchive 2.1.4 dir traversal 0-Day
  ☆17Aug 30, 2018Updated 7 years ago
• coffeehb / DNS-Monitor

  View on GitHub
  ☆16Feb 26, 2018Updated 8 years ago
• issue2report / issue2report

  View on GitHub
  Generate pentest reports based on github issues.
  ☆16Dec 8, 2022Updated 3 years ago
• mazen160 / public

  View on GitHub
  ☆35Dec 5, 2025Updated 2 months ago
• redtimmy / Richsploit

  View on GitHub
  Exploitation toolkit for RichFaces
  ☆106Nov 3, 2023Updated 2 years ago
• GoSecure / break-fast-serial

  View on GitHub
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆55Mar 27, 2017Updated 8 years ago
• NetSPI / JavaSerialKiller

  View on GitHub
  Burp extension to perform Java Deserialization Attacks
  ☆216Feb 2, 2024Updated 2 years ago
• vulhub / java

  View on GitHub
  Java every minor versions.
  ☆74Apr 19, 2023Updated 2 years ago
• BishopFox / rmiscout

  View on GitHub
  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
  ☆445Sep 7, 2022Updated 3 years ago
• tls-attacker / TLS-Attacker-BurpExtension

  View on GitHub
  ☆38Jul 3, 2020Updated 5 years ago
• PortSwigger / taborator

  View on GitHub
  A Burp extension to show the Collaborator client in a tab
  ☆36Dec 23, 2022Updated 3 years ago
• quentinhardy / jndiat

  View on GitHub
  JNDI Attacking Tool
  ☆246Jul 11, 2022Updated 3 years ago
• milo2012 / CVE-2018-0296

  View on GitHub
  Test CVE-2018-0296 and extract usernames
  ☆106Dec 9, 2018Updated 7 years ago
• loerting / cafecompare

  View on GitHub
  Java code comparison tool (jar / class)
  ☆341Jun 4, 2020Updated 5 years ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆579Jan 28, 2020Updated 6 years ago
• x-f1v3 / CVE-2019-3396

  View on GitHub
  Confluence Widget Connector path traversal (CVE-2019-3396)
  ☆22Oct 4, 2019Updated 6 years ago
• Vlad-tri / CVE-2019-1132

  View on GitHub
  EoP POC for CVE-2019-1132
  ☆61Sep 8, 2019Updated 6 years ago
• Slzdude / GodzillaSource

  View on GitHub
  Godzilla v1.0 source code
  ☆38Aug 26, 2020Updated 5 years ago
• Bort-Millipede / WLT3Serial

  View on GitHub
  Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.
  ☆35Mar 2, 2020Updated 5 years ago
• modzero / modjoda

  View on GitHub
  Java Object Deserialization on Android
  ☆86Apr 11, 2019Updated 6 years ago