How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Log4j2 RCE Passive Scanner plugin for BurpSuite
The main features of whwlsfb/log4j2scan are: Penetration Testing Tools, Vulnerability Scanners.
Projects with overlapping indexed features include: f6jo/routevulscan — Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件. joaomatosf/jexboss — jexboss is a Java deserialization exploit framework and network vulnerability scanner designed to identify and exploit… reverse-shell/routersploit — RouterSploit is an embedded device exploitation framework and vulnerability scanner designed to identify and exploit… 0vercl0k/cve-2021-31166. ah8r/csrf — CSRF Scanner Extension for Burp Suite Pro. 0xdexter0us/log4j-scanner — Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.
Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件
RouterSploit is an embedded device exploitation framework and vulnerability scanner designed to identify and exploit security flaws in networked embedded hardware and firmware. It provides a centralized toolkit for scanning for known weaknesses and common misconfigurations to gain unauthorized system access. The framework includes an architecture-specific payload generator to create custom binary payloads tailored to the target hardware. It also features an automated brute force tool that uses dictionary-based credential guessing to bypass authentication on hardware devices. The tool covers
jexboss is a Java deserialization exploit framework and network vulnerability scanner designed to identify and exploit deserialization flaws to achieve remote code execution on target servers. It functions as a suite of tools for delivering payloads and executing system commands on vulnerable remote applications. The project includes a reverse shell orchestrator to establish and maintain persistent remote command connections from exploited targets back to a listener. It also provides post-exploitation automation for managing remote access and updating software on compromised systems. The fra