log4j-Scan-Burpsuite

log4j-Scan-Burpsuite Log4j 취약점CVE-2021-44228 탐지용 Burpsuite 플러그인 스위치ON/OFF, 필터Filter, 전송Send 기능 포함 기능： 요청 헤더 자동 치환 POST 요청의 application/json 파라미터 자동 치환 POST 요청의 application/x-www-urlencoded 파라미터 자동 치환 GET 요청 파라미터 자동 치환 단일 패킷 전송 시 하나의 파라미터만 치환 2022.1.26 1、Cookie 필드 감지 추가, Cookie 파라미터를 순차적으로 치환 2、버튼...

burpsuite-copy-as-xmlhttprequest

Расширение Copy as XMLHttpRequest для BurpSuite Расширение добавляет контекстное меню в BurpSuite, позволяющее копировать несколько запросов в виде Javascript's XmlHttpRequest, что упрощает разработку PoC при эксплуатации XSS. Установка загрузите последний JAR из релизов или соберите вручную...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

BurpSuite-Plugin

BurpSuite-Plugin BurpSuite용 플러그인 펜테스터...

collaborator

collaborator BurpSuite 표준/비공개 Collaborator 라이브러리...

SpringVulScan

SpringVulScan Se gostou, dê uma estrela ao autor SpringVulScan--插件 do burpsuite Atualizações 1.1 1. Adicionada varredura de caminho raiz personalizada. 2. Clique direito pode enviar para SpringVulScan, dicionário personalizado, etc. 3. Otimizada lógica de detecção. 4. A seleção personalizada pode...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

CVE-2026-21876

CVE-2026-21876 CVE-2026-1357 실습 환경 1. 환경 구축 sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone 저장소 링크 sudo chmod -R 755 . sudo docker-compose up --build -d FireFox: http://localhost:8083 2. 취약점 악용: POC.txt를 사용한 Burpsuite Repeater...

Gurp

Требования BurpSuite Professional версии v2.0.0beta или новее от PortSwigger Включите API в разделе User Options Misc REST API. Зависимости root@kitploit: go get -u -v github.com/joanbono/Gurp Добавьте rsrc в $PATH, чтобы собирать бинарные файлы Windows с использованием иконки. Запустите make all...

ExtendedMacro

ExtendedMacro ExtendedMacro ist ein Plug-in für den BurpSuite-Proxy. Es bietet eine ähnliche, aber erweiterte Funktionalität der BurpSuite-Macro-Funktion. Die Hauptfunktion besteht darin, dass Sie in der Lage sind, eine oder mehrere Anfragen vor jeder Anfrage auszulösen, die von Intruder, Repeate...

IntruderPayloads

IntruderPayloads Eine Sammlung von Burpsuite Intruder Payloads, BurpBounty Payloads https://github.com/wagiro/BurpBounty, Fuzz-Listen und Pentesting-Methodiken. Um alle Repos von Drittanbietern herunterzuladen, führen Sie install.sh im selben Verzeichnis des IntruderPayloads-Ordners aus. Autor:...

BurpSuite-collections

Burp-Suite-collections Progetti correlati a BurpSuite, plugin principalmente non presenti nel BApp Store negozio Tutte le localizzazioni o l'uso di BurpSuite presuppongono che tu abbia configurato l'ambiente Java!!! Tutorial correlato Ultima versione dopo il 202212 attivazione fare riferimento a...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

HackBar

HackBar Plugin Burpsuite Utilizzo Requisiti Burpsuite Come Installare root@kitploit: Download Latest Jar from https://github.com/d3vilbug/HackBar/releases/ and add in burpsuite Testato su Burpsuite 2021.4 Windows 10 Ubuntu & PopOS...

byp4xx

root@kitploit: / / / // / / / / / / / // /| |// |// / // / // / // / / Some cURL options you may use as example: -L follow redirections 30X responses -x : to set a proxy -m to set a timeout -H for new headers. Escape double quotes. -d for data in the POST requests body -... Built-in options:...

Ghazi

Ghazi Ghazi é um Plugin do BurpSuite para testar vários Payloads como "XSS, SQLi, SSTI, SSRF, RCE e LFI" através de diferentes abas, onde cada aba substituirá todos os parâmetros GET ou POST com a aba selecionada na aba "Proxy" ou "Repeater" Aba XSS do Ghazi substituindo todos os parâmetros pelo...

react2shell-exploit

react2shell-exploit für BURPSUITE React2Shell: CVE-2025-55182...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...

BurpSuite-Grand-Master-Tools

BurpSuite-Grand-Master-Tools Dinu11secur1ty — Un toolkit modulare che trasforma le catture di Burp in azioni istantanee e ripetibili. Converti. Riutilizza. Apri. Automatizza. 🚀 Presentazione rapida BurpSuite-Grand-Master-Tools è un toolkit leggero, verificabile ed estensibile per pentester e...