11 matches found
nuclei-burp-plugin
إضافة مولد قوالب Nuclei لـ Burp إضافة Burp Suite تهدف إلى المساعدة في توليد قوالب nuclei...
Log4j-check
Log4j-check Prise en charge du contournement RC1 Plugin de scan Burp pour Log4j, CVE-2021-44228, contournement RC1 pris en charge, type de données JSON pris en charge, prise en charge de dnslog.cn et DNS intégré de Burp, compatible avec JNDIExploit pour générer des payloads. Modifications basées...
Burp_AES_Plugin
Plugin Burpsuite pour le craquage AES 0x00 mvn install pour obtenir le jar git clone https://github.com/jas502n/BurpAESPlugin/ cd /github/BurpAESPlugin/AESDecode vi src/main/java/burp/BurpExtender.java mvn install root@kitploit: INFO --- maven-install-plugin:2.4:install default-install @ AESCrack...
reflector
reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...
nowafpls
nowafpls Table des matières nowafpls Limitations documentées des WAF Installation de nowafpls Utilisation de nowafpls Auteurs Licence nowafpls La plupart des pare-feu applicatifs web WAF ont des limitations quant à la quantité de données qu'ils peuvent traiter lorsqu'un corps de requête est envoy...
Faraday v3.6 - Collaborative Penetration Test and Vulnerability Management Platform
Here are the main new features and improvements in Faraday v3.6: WelcomeService Now A new way to send vulnerabilities is available! We integrated Faraday with Service Now, giving you more options to work with. Burp plugin was totally revamped We have been working hard to make several changes to...
Java deserialization vulnerability: in a restricted environment from vulnerability discovery to get a reverse Shell-vulnerability warning-the black bar safety net
Java deserialization vulnerability can be said that the Java security a piece of heart disease, in recent years more in the security sector“in the limelight”in. Actually say to the Java deserialization issues, as early as the beginning of 2015 in AppSecCali conference, two security researchers,...
AES-Killer v3.0 - Burp Plugin To Decrypt AES Encrypted Traffic Of Mobile Apps On The Fly
BurpsuitePlugin to decrypt AES Encrypted traffic on the fly. Requirements Burpsuite Java Tested on Burpsuite 1.7.36 Windows 10 xubuntu 18.04 Kali Linux 2018 What it does The IProxyListener decrypt requests and encrypt responses, and an IHttpListener than encrypt requests and decrypt responses. Bu...
Retire.Js - Scanner Detecting The Use Of JavaScript Libraries With Known Vulnerabilities
What you require you must also retire There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10...
Local file inclusion vulnerability detection tools – Burp the domestic plug-in LFI scanner checks-vulnerability warning-the black bar safety net
LFI scanner checks to myself to burp the lightweight scanner to do a detect a LFI vulnerability plug-ins, because burp is not an effective detection of the LFI feature, only to write yourself a plugin. Look at the following screenshot: ! To compare the following J2EESCAN inside the included LFI...