qtc-de/remote-method-guesser

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Java Vulnerability Exploitation Platform

JNDIExploit or a ysoserial.

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.