21656 matches found
auto-repeater
AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...
Poc_CVE-2025-68645
CVE-2025-68645 - Zimbra Path Traversal Vulnerability š Overview CVE-2025-68645 is a path traversal vulnerability in Zimbra Collaboration Suite that allows unauthenticated attackers to read arbitrary files from the server's filesystem. Vulnerable Endpoint...
BurpSuite-For-Pentester
š·ļø BurpSuite for Pentester A practical Burp Suite cheat sheet and learning guide designed for bug bounty hunters and penetration testers to efficiently discover web application vulnerabilities from low severity P4 to critical P1 using Burp Suite. This repository provides a structured reference for...
burp-awesome-tls
Awesome TLS ę¤ę©å±ä¼å«ę Burp ē HTTP å TLS åč®®ę ļ¼ä½æęØč½å¤ä¼Ŗč£ ä»»ęęµč§åØē TLS ęēŗ¹ļ¼JA3ļ¼ćå®å¢å¼ŗäŗ Burp Suite ēč½åļ¼åę¶éä½äŗč¢« CloudFlarećPerimeterXćAkamaićDataDome ēåē§ WAF ęēŗ¹čÆå«ēåÆč½ę§ć ę¤ę©å±ę éåå©äøéē hackćåå°ę Burp Suite Community ēåęÆä»£ē å³åÆčæč”ć čµå©å ę¬é”¹ē®ē结ę¤ē¦»äøå¼ęęåÆē±ēč“”ē®č åčµå©åć å¦ęęØę³čµå©ę¬é”¹ē®ļ¼å¹¶åøęęØē夓åęå ¬åøå¾½ę åŗē°åØę¤éØåļ¼ čÆ·ē¹å»ę¤å¤ć š å±ē¤ŗ CloudFlare ęŗåØäŗŗåę°ļ¼...
burp-awesome-tls
Awesome TLS This extension hijacks Burp's HTTP and TLS stack, allowing you to spoof any browser TLS fingerprint JA3. It boosts the power of Burp Suite while reducing the likelihood of fingerprinting by various WAFs like CloudFlare, PerimeterX, Akamai, DataDome, etc. This extension works without...
jsluicepp
š Table of Contents š Introduction š ļø Setup š Usage š Features Monitor URLs Send to Repeater Secrets Secret Notifications Copy URL Positive/Negative Match In-scope only In-line Tags Hide Duplicates Show Parameterized Import/Export Save Settings š¤ Contributors š Introduction jsluice++ is a Burp...
super-secret-finder
super-secret-finder Burp Plugin for Secret Matching...
CVE-2019-2725-POC
CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...
BadIntent
BadIntent Introducción BadIntent es el eslabón perdido entre Burp Suite y el sistema de IPC/mensajerĆa central de Android. BadIntent consta de dos partes: un módulo basado en Xposed que se ejecuta en Android y un complemento de Burp. Gracias a esta interacción, es posible utilizar el flujo de...
lazyCSRF
LazyCSRF LazyCSRF es un generador de PoC CSRF mĆ”s Ćŗtil que se ejecuta en Burp Suite. Sin mantenimiento futuro š Cuando empecĆ© a desarrollar lazyCSRF, creĆ erróneamente que el generador de PoC CSRF integrado en Burp Professional no podĆa generar PoC usando XHR y no soportaba solicitudes PUT, etc...
osinteye
Esta herramienta no recibirÔ mÔs actualizaciones. Instagram estÔ obsoleto, asà que decidà archivarla. Suite de enumeración y reconocimiento de nombres de usuario Sitios compatibles PyPI Github TestPypi About.me Instagram DockerHub Instalación Clonar el proyecto: root@kitploit: $ git clone...
LinkedIntel
LinkedIntel root@kitploit: āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā ā ā ā āāā āāā āāāā ā āā āāāāāāāāā āāāāāāā āāā āāāā ā āāāāāāāāāāāāāāā āāā ā ā āāāā āāāā āā āā ā āāāāā āā ā āāāā āāāāāāā āā āā ā ā āāā āāāā ā āāāā ā ā āāāā āāāāāāā āā āāāāāāāāā āāāā ā...
CVE-2026-79362
CVE-2026-79362 is a Remote Code Execution (RCE) vulnerability in Woltlab Suite Core (WCF) , affecting versions 6.1.0 through < 6.1.23 and 6.2.0 through
EUVD-2026-76188
Certain Woltlab products are affected by RCE via Cache Poisoning. WCF = 6.1.0 until = 6.2.0 until 6.2.6. An authenticated low-privileged user can inject PHP into executable cache files generated by WoltLab Suite Core. Attacker-controlled data can terminate the nowdoc prematurely and inject...
scan-log4shell
scan-log4shell A scanning suite to find servers affected by the log4shell flaw CVE-2021-44228 with example to test it...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter is a professional Proof-of-Concept PoC scanner designed to identify the CVE-2025-68645 vulnerability in Zimbra Collaboration Suite. This tool detects Local File Inclusion LFI flaws through the /h/printcalendar endpoint. š”ļø Vulnerability Overview The...
Berserko
Berserko - Kerberos authentication for Burp Suite Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Released under AGPL, see LICENSE for more information ā Important...
AutoRepeater
AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...
mongobleedburp
MongoBleed Burp Extension Burp Suite extension to detect CVE-2025-14847 MongoBleed via manual leak tests from a dedicated UI tab. Repository: https://github.com/j0lt-github/mongobleedburp Current version: 1.1.0 Features Manual test UI tab with host/port and min/max offsets Temporary-file leak...
BurpSuiteHTTPSmuggler
Burp Suite HTTP Smuggler A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques. This extension has been developed by Soroush Dalili @irsdl from NCC Group. The initial release v0.1 only supports the Encoding capability that can be quite...