bao7uo/waf-cookie-fetcher

Stars
16
Rank 1,311,288 (Top 26 %)
Language
Python
License
Apache License 2.0
Created almost 7 years ago
Updated almost 7 years ago

bao7uo/waf-cookie-fetcher

bao7uo

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

WAF Cookie Fetcher is a Burp Suite extension written in Python, which uses a headless browser to obtain the values of WAF-injected cookies which are calculated in the browser by client-side JavaScript code and adds them to Burp's cookie jar. Requires PhantomJS.

RAU_crypto

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

dp_crypto

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

target-redirector

Target Redirector is a Burp Suite Extension written in Kotlin, which redirects all Burp requests destined for a chosen target to a different target of your choice. The hostname/IP, port and protocol (HTTP/HTTPS) can all be configured to an alternative destination.

bmc_bladelogic

BMC Bladelogic RSCD exploits including remote code execution - CVE-2016-1542, CVE-2016-1543, CVE-2016-5063

HexyRunner

Takes raw hex shellcode (e.g. msfvenom hex format) from a cmd line arg, text file, or URL download and runs it.

dell-emc_recoverpoint

Exploits for Dell EMC RecoverPoint enterprise data protection platform

MixedUp

Mixed Mode Assembly PoC with sample payloads in DLLMain

burp-extender-api-kotlin

Burp Extender API - Unofficial Kotlin version

nf_conntrack-for-scanners

Alters the nf_conntrack settings profile to make it suitable for scanners such as nmap, nessus, etc

smooth-drop-shadow

Copies images, adding a smooth drop shadow, with enlargement to accommodate. Requires GIMP.

PortRanger

Converts an unordered (e.g. grepped) network ports to a condensed range/list that is suitable for nmap and other tools.

redacterm

Edit terminal output ready for screenshots - highlight key areas and redact sensitive info.

BurpelFish

BurpelFish - Adds Google Translate to Burp's Context Menu. "Babel Fish" language translation for app-sec testing in other languages.

mx-direct-mail-sender

Sends a direct email, with no relay required, by looking up the MX record and delivering the message to one of the resulting mail servers.

picelf

Embed shellcode directly into a minimally sized ELF file