add shiroPoc-0.5-SNAPSHOT-jar-with-dependencies.jar---一款Shiro回显Burp插件(支持Burp被动扫描功能)&burpsuite_pro_v2020.8.jar

This commit is contained in:
Mrxn committed 2020-08-07 00:37:07 +08:00
1 parent 00aeabaa36
commit c2b305848e
3 files changed
+5

No files matched your search

+5
View File
@@ -85,6 +85,7 @@
| +--- sqlmap.jar
| +--- sqlmap4burp++.0.2.jar
| +--- WooyunSearch-1.0-SNAPSHOT-jar-with-dependencies.jar
| +--- shiroPoc-0.5-SNAPSHOT-jar-with-dependencies.jar
+--- README.md
+--- 创建桌面快捷方式.bat
+--- 创建桌面快捷方式.zip
@@ -98,6 +99,10 @@
> plugins目录下新增[awesome-burp-extensions的翻译版本](./plugins/awesome-burp-extensions)
- **shiroPoc-0.5-SNAPSHOT-jar-with-dependencies.jar** ---一款Shiro回显Burp插件(支持Burp被动扫描功能),[点击下载](https://raw.githubusercontent.com/Mr-xn/BurpSuite-collections/master/plugins/shiroPoc-0.5-SNAPSHOT-jar-with-dependencies.jar),[详细介绍说明及源处](https://github.com/potats0/shiroPoc)
![](./img/shiroPoc.png)
- **BurpSuite-Extender-fastjson** ---一款自动检测fastjson rce的py插件,可检测1.2.24和1.2.47。若存在漏洞自动标注该流量,并在output中输出内容。[源处](https://github.com/uknowsec/BurpSuite-Extender-fastjson)
- **Burp_AES_Plugin** --- 一款用于爆破AES加密CBC模式的爆破插件,使用之前需要修改`src/main/java/burp/BurpExtender.java` 当中的`key`和`iv` 值,然后使用`mvn install` 编译即可。[出处](https://github.com/jas502n/Burp_AES_Plugin)
- **IntelligentAnalysis-SSTVINFO** ---一款用于发现Response包含的敏感信息,基于python开发的burp插件。[SSTVINFO源处](https://github.com/nian-hua/BurpExtender) 修改过带有邮箱识别加IP地址修正的版本在插件目录[下载](./plugins/IntelligentAnalysis.py)。
BIN
View File
Binary file not shown.

After

Width:  |  Height:  |  Size: 25 KiB