Beast code in Giters

Michael Stepankin's repositories

yaml-payload

A tiny project for generating SnakeYAML deserialization payloads

Language:Java523 5 5

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT135 70

rogue-jndi

A malicious LDAP server for JNDI injection attacks

Language:JavaMIT71 40

active-scan-plus-plus

ActiveScan++ Burp Suite Plugin

Language:PythonApache-2.0010

jwt-editor

A Burp Suite extension and standalone application for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

Language:JavaApache-2.0010

OpenID-Connect-Java-Spring-Server

An OpenID Connect reference implementation in Java on the Spring platform.

Language:JavaNOASSERTION010

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Language:JavaMIT010