nuclei-burp-plugin

Nuclei 템플릿 생성기 Burp 플러그인 Burp Suite 플러그인으로 nuclei 템플릿 생성을 돕기 위한 것입니다...

Burp_AES_Plugin

Burpsuite 用 AES クラックプラグイン 0x00 mvn install で jar を取得する git clone https://github.com/jas502n/BurpAESPlugin/ cd /github/BurpAESPlugin/AESDecode vi src/main/java/burp/BurpExtender.java mvn install root@kitploit: INFO --- maven-install-plugin:2.4:install default-install @ AESCrack --- INFO Installing...

Log4j-check

Log4j-check RC1バイパス対応 log4J Burpスキャンプラグイン、CVE-2021-44228、RC1バイパス対応、JSONデータ型対応、dnslog.cnおよびBurp内蔵DNS対応、JNDIExploitと連携してペイロード生成可能 @pmiaowuのfastjsonプラグインをベースに改変。オリジナル作者はdnslog.cnを使用して外部通信チェックを行っていましたが、大規模な攻防演習（HW）の過程で、初期の打点時に多くのサイトをテストするため、dnslog.cnがIPをブロックする操作を行い、 プラグインが正常に検出できなくなる問題がありました...

nowafpls

nowafpls 目次 nowafpls WAFの既知の制限 nowafplsのインストール nowafplsの使用方法 著者 ライセンス nowafpls ほとんどのWebアプリケーションファイアウォール（WAF）には、リクエストボディが送信されたときに処理できるデータ量に制限があります。つまり、リクエストボディを含むHTTPリクエスト（POST、PUT、PATCHなど）では、先頭にジャンクデータを付加するだけでWAFをバイパスできることがよくあります。 リクエストにこのジャンクデータが詰め込まれると、WAFはリクエストの先頭からX...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

BurpSuite-collections

burp插件...

Faraday v3.6 - Collaborative Penetration Test and Vulnerability Management Platform

Here are the main new features and improvements in Faraday v3.6: WelcomeService Now A new way to send vulnerabilities is available! We integrated Faraday with Service Now, giving you more options to work with. Burp plugin was totally revamped We have been working hard to make several changes to...

Java deserialization vulnerability: in a restricted environment from vulnerability discovery to get a reverse Shell-vulnerability warning-the black bar safety net

Java deserialization vulnerability can be said that the Java security a piece of heart disease, in recent years more in the security sector“in the limelight”in. Actually say to the Java deserialization issues, as early as the beginning of 2015 in AppSecCali conference, two security researchers,...

AES-Killer v3.0 - Burp Plugin To Decrypt AES Encrypted Traffic Of Mobile Apps On The Fly

BurpsuitePlugin to decrypt AES Encrypted traffic on the fly. Requirements Burpsuite Java Tested on Burpsuite 1.7.36 Windows 10 xubuntu 18.04 Kali Linux 2018 What it does The IProxyListener decrypt requests and encrypt responses, and an IHttpListener than encrypt requests and decrypt responses. Bu...

Retire.Js - Scanner Detecting The Use Of JavaScript Libraries With Known Vulnerabilities

What you require you must also retire There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10...

Local file inclusion vulnerability detection tools – Burp the domestic plug-in LFI scanner checks-vulnerability warning-the black bar safety net

LFI scanner checks to myself to burp the lightweight scanner to do a detect a LFI vulnerability plug-ins, because burp is not an effective detection of the LFI feature, only to write yourself a plugin. Look at the following screenshot: ! To compare the following J2EESCAN inside the included LFI...