WebHackersWeapons/categorize/langs/Java.md

Tools Made of Java

Type	Name	Description	Star	Tags	Badges
Army-Knife	ZAP	The OWASP ZAP core project		mitmproxy live-audit crawl
Army-Knife	BurpSuite	The BurpSuite Project		mitmproxy live-audit crawl
Recon	reflected-parameters			param
Recon	attack-surface-detector-zap	The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters		endpoint
Recon	attack-surface-detector-burp	The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters		endpoint
Fuzzer	param-miner	Param Miner		param cache-vuln
Scanner	http-request-smuggler			smuggle
Scanner	BurpSuiteHTTPSmuggler			smuggle
Scanner	collaborator-everywhere			oast
Scanner	DeepViolet	Tool for introspection of SSL\TLS sessions		ssl
Scanner	csp-auditor			csp
Exploit	BaRMIe	Java RMI enumeration and attack tool.		RMI
Utils	Berserko	Burp Suite extension to perform Kerberos authentication
Utils	pcap-burp	Pcap importer for Burp
Utils	AWSSigner	Burp Extension for AWS Signing
utils	owasp-zap-jwt-addon			jwt
Utils	ysoserial	A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.		deserialize
Utils	taborator			oast
Utils	knife	A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
Utils	http-script-generator
Utils	safecopy
Utils	BurpCustomizer	Because just a dark theme wasn't enough!
Utils	Stepper
utils	Neonmarker
Utils	zap-hud
Utils	SerializationDumper	A tool to dump Java serialization streams in a more human readable form.		deserialize
Utils	burp-send-to
Utils	Web3 Decoder	Burp Extension for Web3		web3
Utils	AuthMatrix	Automated HTTP Request Repeating With Burp Suite
Utils	HTTPSignatures	A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.
Utils	Decoder-Improved	Improved decoder for Burp Suite
Utils	BurpSuiteLoggerPlusPlus
Utils	GadgetProbe	Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.		deserialize