poi-slinger

Object injector

Automatically identifies serialization issues in PHP applications by forcing them to perform DNS lookups with serialized objects

Automatically identify serialization issues in PHP Frameworks by means of an Burp Suite active scan

GitHub

42 stars
2 watching
11 forks
Language: Java
last commit: 5 months ago
burpburp-extensionsburp-pluginburpsuiteburpsuite-extenderburpsuite-proburpsuitepro

Related projects:

Repository Description Stars
synacktiv/hopla Extends Burp Suite with autocompletion and payload support 713
bishopfox/gadgetprobe Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities 587
portswigger/collaborator-everywhere An extension for Burp Suite Pro that injects non-invasive headers to reveal backend systems by causing pingbacks. 428
simioni87/auth_analyzer A Burp extension tool designed to help identify authorization issues in web applications by automating request repetition and parameter value extraction. 186
minamo7sen/burp-js-miner Automates discovery of secrets and vulnerabilities in static web files 54
initroot/burpsqltruncsanner Automatically scans endpoints for potential SQL Truncation vulnerabilities by fuzzing request parameters 62
marcospassos/java-php-serializer A Java library that serializes objects in the PHP serialization format 15
bit4woo/domain_hunter Automatically discovers and analyzes an organization's online presence 667
jgillam/burp-paramalyzer An extension for parameter analysis in web application penetration testing 154
aress31/openapi-parser Automates security assessment of REST APIs using Burp Suite 195
jsonapi-serializer/jsonapi-serializer A fast JSON serialization library for Ruby objects 1,410
levoai/levoai-burp-extension A Burp Suite extension that generates OpenApi specs from traffic and detects sensitive data 24
lorenzog/burpaddcustomheader A Burp Suite extension to add custom HTTP headers 19
bugpoc-ryan/bugpoc-burp-extension An extension for Burp Suite to export raw HTTP requests to a PoC generator for easy reporting and reproduction of security bugs. 7
gauravnarwani97/trishul Automated vulnerability detection tool for web applications 235