253 matches found
turbo-intruder
Turbo Intruder Turbo Intruder は、大量の HTTP リクエストを送信し、結果を分析するための Burp Suite 拡張機能です。これは、並外れた速度、持続時間、または複雑さを必要とする攻撃を処理することで、Burp Intruder を補完することを目的としています。以下の機能が特に際立っています。 高速 - Turbo Intruder は、速度を重視して一から手書きされた HTTP スタックを使用します。その結果、多くのターゲットでは、流行の非同期 Go スクリプトでさえも大幅に凌駕することができます。 スケーラブル - Turbo Intruder...
haptyc
Haptyc テスト生成フレームワーク Haptycとは？ Haptycは、Turbo Intruderにペイロード位置のサポートとSniper/Clusterbomb/Batteringram/Pitchforkの各攻撃タイプを追加するために作られたPythonライブラリです。Haptycはこれらの目標をかなりうまく達成する一方、テストシーケンスを一般的によりシンプルに表現する方法を導入しています。このライブラリはTurbo Intruderをターゲットに設計されていますが、Turbo...
bradamsa
Bradamsa Bradamsa is a Burp Suite extension for Radamsa, a well-known fuzzer made by the Oulu University Secure Programming Group. Inspired by burp-radamsa, this plugin allows to generate Intruder payloads using Radamsa. Download the latest release from HERE. Mix Burp Suite + Radamsa and you get...
bradamsa
Bradamsa Bradamsa 是一个用于 Radamsa 的 Burp Suite 扩展；Radamsa 是由 奥卢大学安全编程小组 开发的一款知名模糊测试器。受 burp-radamsa 的启发，该插件允许使用 Radamsa 生成 Intruder 载荷。 从 此处 下载最新版本。 将 Burp Suite 与 Radamsa 混合，你就会得到崩溃！ 功能 基于 Java 的插件，使用 Burp Suite 原生扩展 API 使用 Radamsa 的 Intruder 载荷生成器（仅限 sniper 攻击类型） 支持 Radamsa v0.3 选项 可直接在 Burp Suit...
generator-burp-extension
Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. root@kitploit: npm install -g yo npm install -g generator-burp-extension Then generate your new project: root@kitploit: yo burp-extension Burp Extension...
Burp-Recordadora
🧙♂️ Recordadora Recordadora 是一款受《哈利·波特》启发的 BurpSuite 扩展。 就像纳威的记忆球一样，它帮助你 不忘记 也不会丢失测试上下文。 ✨ 功能 保存和恢复 Proxy 历史记录 导出和导入 Repeater 的请求 持久化 Intruder 的载荷 支持 .log 文件以共享会话 集成到上下文菜单（右键 → 发送到 Recordadora） 兼容 BurpSuite Community 和 Professional 📥 安装 选项 1：使用已编译的 .jar 1. 从 Releases 下载最新版本。 2. 打开 BurpSuite →...
authcov
AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...
JDSer-ngng
JDSer-ngng 一个 Burp Extender 插件，它会对 Java 对象进行反序列化，并使用 Xtream 库将其编码为 XML。 为什么？此版本修复了 JDSer-ng 中另一个实现的错误，该实现实际上不允许修改请求。此外，它还进一步扩展，允许将 intruder/scanner 模块正确用于反序列化的 Java 对象。我还增加了与 SQLMap 配合使用的能力。将 "send deserialized to intruder" 的输出复制并粘贴到一个文件中，然后运行 sqlmap.py -r --proxy "http://burp:port"...
burp-intruder-payloads
Burp Intruder Payloads You're welcome, hacker! About T...
Right Divisibility in Erasing Semi-Thue Systems: A Minimal View of Intruder Deduction
The intruder deduction problem is central to symbolic security-protocol analysis: it asks whether an attacker can derive a target message from observed messages using cryptographic operators available to the attacker. Although convergent rewrite systems provide canonical normal forms, deduction...
CVE-2026-47150 IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this write is limited. These messages must come from a device that has already joined the network. Only devices supporting the...
ROS-20260526-73-0022
Vulnerability in poetry related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote intruder to gain unauthorized access to protected information...
Security-Aware Planning and Control of Multi-Agent Systems with LTL Tasks
This paper presents a secure-by-construction planning and control framework for multi-agent systems subject to linear temporal logic LTL specifications. The framework protects sensitive information from a passive intruder with partial observations of the agents' motion. Security in multi-agent...
ROS-20260317-73-0030
A vulnerability in the net/xfrm component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an intruder to affect confidentiality, integrity and availability of protected information...
ROS-20260205-73-0013
A vulnerability in the drivers/net/vxlan/vxlancore.c module of the Linux operating systems kernel is related to race condition. Exploitation of the vulnerability may allow an intruder to affect the integrity of protected information...
ROS-20260113-7321
A vulnerability in the f2fssetattr function of the fs/f2fs/file.c module of the Linux kernel's F2FS file system support is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow a remote intruder to affect the integrity of protected...
CVE-2003-1595
NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...
SQL-Injection-IDPS
Payloads All The Things A list of useful payloads and bypass...
