Pinned Repositories
BurpSuiteJSBeautifier
Burp Suite JS Beautifier
BurpSuiteSharpenerEx
This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.
BurpTabEssentials
This changes the style of Burp Suite's Repeater tabs to help the testers
httpninja
HTTP.ninja
IIS-ShortName-Scanner
latest version of scanners for IIS short filename (8.3) disclosure vulnerability
OutlookLeakTest
The Outlook HTML Leak Test Project
top10webseclist
Top Ten Web Hacking Techniques List
updated-SWFIntruder
Updated version of SWFIntruder
ysoserial.net
Deserialization payload generator for a variety of .NET formatters
irsdl's Repositories
irsdl/IIS-ShortName-Scanner
latest version of scanners for IIS short filename (8.3) disclosure vulnerability
irsdl/top10webseclist
Top Ten Web Hacking Techniques List
irsdl/httpninja
HTTP.ninja
irsdl/BurpSuiteSharpenerEx
This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.
irsdl/BChecks
BChecks collection for Burp Suite Professional
irsdl/BlazorTrafficProcessor
irsdl/dnschef_updated
DNSChef - DNS proxy for Penetration Testers and Malware Analysts
irsdl/CloudRecon
irsdl/JDBC-Attack
JDBC Connection URL Attack
irsdl/privatecollaborator
A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
irsdl/shortscan
An IIS short filename enumeration tool
irsdl/ysoserial
ysoserial for su18
irsdl/ysoserial.net
Deserialization payload generator for a variety of .NET formatters
irsdl/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
irsdl/Burp-Suite-Extender-Montoya-Course
This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite to create extensions that will greatly simplify our pentester lives.
irsdl/BurpSuiteExtensionJavaTemplate
A Burp Suite Extension Template Which Uses Java
irsdl/check_mdi
Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.
irsdl/clairvoyance
Obtain GraphQL API schema even if the introspection is disabled
irsdl/Conferences
Conference slides
irsdl/DEFCON-31-Syscalls-Workshop
Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
irsdl/delete-older-releases
Github Action to delete older releases
irsdl/h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
irsdl/JNDI-Exploit-Kit
JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）
irsdl/lightning-burp
irsdl/nosqlilab
A lab for playing with NoSQL Injection
irsdl/PIPE
Prompt Injection Primer for Engineers
irsdl/release-action
An action which manages a github release
irsdl/trufflehog
Find and verify credentials
irsdl/vulnerable-node-app
A NoSQL Injectable Node App
irsdl/xpoc
为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.