poi-slinger

Object injector

Automatically identifies serialization issues in PHP applications by forcing them to perform DNS lookups with serialized objects

Automatically identify serialization issues in PHP Frameworks by means of an Burp Suite active scan

GitHub

42 stars
2 watching
11 forks
Language: Java
last commit: about 2 years ago
burpburp-extensionsburp-pluginburpsuiteburpsuite-extenderburpsuite-proburpsuitepro

Related projects:

RepositoryDescriptionStars
synacktiv/hoplaExtends Burp Suite with autocompletion and payload support713
bishopfox/gadgetprobeTools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities587
portswigger/collaborator-everywhereAn extension for Burp Suite Pro that injects non-invasive headers to reveal backend systems by causing pingbacks.428
simioni87/auth_analyzerA Burp extension tool designed to help identify authorization issues in web applications by automating request repetition and parameter value extraction.186
minamo7sen/burp-js-minerAutomates discovery of secrets and vulnerabilities in static web files54
initroot/burpsqltruncsannerAutomatically scans endpoints for potential SQL Truncation vulnerabilities by fuzzing request parameters62
marcospassos/java-php-serializerA Java library that serializes objects in the PHP serialization format15
bit4woo/domain_hunterAutomatically discovers and analyzes an organization's online presence667
jgillam/burp-paramalyzerAn extension for parameter analysis in web application penetration testing154
aress31/openapi-parserAutomates security assessment of REST APIs using Burp Suite195
jsonapi-serializer/jsonapi-serializerA fast JSON serialization library for Ruby objects1,410
levoai/levoai-burp-extensionA Burp Suite extension that generates OpenApi specs from traffic and detects sensitive data24
lorenzog/burpaddcustomheaderA Burp Suite extension to add custom HTTP headers19
bugpoc-ryan/bugpoc-burp-extensionAn extension for Burp Suite to export raw HTTP requests to a PoC generator for easy reporting and reproduction of security bugs.7
gauravnarwani97/trishulAutomated vulnerability detection tool for web applications235