├── .gitignore ├── BappDescription.html ├── BappManifest.bmf ├── LICENSE ├── Readme.md ├── dist └── README.TXT ├── manifest.mf ├── nbproject ├── build-impl.xml ├── genfiles.properties ├── private │ ├── config.properties │ ├── private.properties │ └── private.xml ├── project.properties └── project.xml ├── settings.gradle ├── src ├── burp │ └── BurpExtender.java └── nb │ └── freddy │ ├── Freddy.java │ ├── FreddyCollaboratorThread.java │ ├── FreddyScanIssue.java │ ├── intruder │ ├── ErrorPayloadGenerator.java │ ├── ErrorPayloadGeneratorFactory.java │ ├── RCEPayloadGenerator.java │ └── RCEPayloadGeneratorFactory.java │ └── modules │ ├── CollaboratorPayload.java │ ├── CollaboratorRecord.java │ ├── ConfidenceRating.java │ ├── ExceptionPayload.java │ ├── FreddyModuleBase.java │ ├── IndicatorTarget.java │ ├── MarkerListComparator.java │ ├── Payload.java │ ├── ScanArrayIndicator.java │ ├── ScanIndicator.java │ ├── SeverityRating.java │ ├── TargetPlatform.java │ ├── TimeBasedPayload.java │ ├── dotnet │ ├── BinaryFormatterModule.java │ ├── DataContractJsonSerializerModule.java │ ├── DataContractSerializerModule.java │ ├── FSPicklerJsonModule.java │ ├── FSPicklerXmlModule.java │ ├── FastJsonModule.java │ ├── JavascriptSerializerModule.java │ ├── JsonDotNetModule.java │ ├── NetDataContractSerializerModule.java │ ├── ObjectStateFormatterModule.java │ ├── SoapFormatterModule.java │ ├── SweetJaysonModule.java │ └── XmlSerializerModule.java │ └── java │ ├── BlazeDSAMF0Module.java │ ├── BlazeDSAMF3Module.java │ ├── BlazeDSAMFXModule.java │ ├── BlazeDSPassiveDetectionModule.java │ ├── BurlapModule.java │ ├── CastorModule.java │ ├── FlexJsonModule.java │ ├── GensonModule.java │ ├── HessianModule.java │ ├── JYAMLModule.java │ ├── JacksonModule.java │ ├── JsonIoModule.java │ ├── KryoAltStrategyModule.java │ ├── KryoModule.java │ ├── KryoPassiveDetectionModule.java │ ├── ObjectInputStreamModule.java │ ├── Red5AMF0Module.java │ ├── Red5AMF3Module.java │ ├── SnakeYAMLModule.java │ ├── XStreamModule.java │ ├── XmlDecoderModule.java │ └── YAMLBeansModule.java └── test └── FreddyTest.java /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/.gitignore -------------------------------------------------------------------------------- /BappDescription.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/BappDescription.html -------------------------------------------------------------------------------- /BappManifest.bmf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/BappManifest.bmf -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/LICENSE -------------------------------------------------------------------------------- /Readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/Readme.md -------------------------------------------------------------------------------- /dist/README.TXT: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/dist/README.TXT -------------------------------------------------------------------------------- /manifest.mf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/manifest.mf -------------------------------------------------------------------------------- /nbproject/build-impl.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/nbproject/build-impl.xml -------------------------------------------------------------------------------- /nbproject/genfiles.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/nbproject/genfiles.properties -------------------------------------------------------------------------------- /nbproject/private/config.properties: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /nbproject/private/private.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/nbproject/private/private.properties -------------------------------------------------------------------------------- /nbproject/private/private.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/nbproject/private/private.xml -------------------------------------------------------------------------------- /nbproject/project.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/nbproject/project.properties -------------------------------------------------------------------------------- /nbproject/project.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/nbproject/project.xml -------------------------------------------------------------------------------- /settings.gradle: -------------------------------------------------------------------------------- 1 | rootProject.name = 'freddy' 2 | -------------------------------------------------------------------------------- /src/burp/BurpExtender.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/burp/BurpExtender.java -------------------------------------------------------------------------------- /src/nb/freddy/Freddy.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/Freddy.java -------------------------------------------------------------------------------- /src/nb/freddy/FreddyCollaboratorThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/FreddyCollaboratorThread.java -------------------------------------------------------------------------------- /src/nb/freddy/FreddyScanIssue.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/FreddyScanIssue.java -------------------------------------------------------------------------------- /src/nb/freddy/intruder/ErrorPayloadGenerator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/intruder/ErrorPayloadGenerator.java -------------------------------------------------------------------------------- /src/nb/freddy/intruder/ErrorPayloadGeneratorFactory.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/intruder/ErrorPayloadGeneratorFactory.java -------------------------------------------------------------------------------- /src/nb/freddy/intruder/RCEPayloadGenerator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/intruder/RCEPayloadGenerator.java -------------------------------------------------------------------------------- /src/nb/freddy/intruder/RCEPayloadGeneratorFactory.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/intruder/RCEPayloadGeneratorFactory.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/CollaboratorPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/CollaboratorPayload.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/CollaboratorRecord.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/CollaboratorRecord.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/ConfidenceRating.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/ConfidenceRating.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/ExceptionPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/ExceptionPayload.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/FreddyModuleBase.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/FreddyModuleBase.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/IndicatorTarget.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/IndicatorTarget.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/MarkerListComparator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/MarkerListComparator.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/Payload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/Payload.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/ScanArrayIndicator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/ScanArrayIndicator.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/ScanIndicator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/ScanIndicator.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/SeverityRating.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/SeverityRating.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/TargetPlatform.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/TargetPlatform.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/TimeBasedPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/TimeBasedPayload.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/BinaryFormatterModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/BinaryFormatterModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/DataContractJsonSerializerModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/DataContractJsonSerializerModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/DataContractSerializerModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/DataContractSerializerModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/FSPicklerJsonModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/FSPicklerJsonModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/FSPicklerXmlModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/FSPicklerXmlModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/FastJsonModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/FastJsonModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/JavascriptSerializerModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/JavascriptSerializerModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/JsonDotNetModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/JsonDotNetModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/NetDataContractSerializerModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/NetDataContractSerializerModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/ObjectStateFormatterModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/ObjectStateFormatterModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/SoapFormatterModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/SoapFormatterModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/SweetJaysonModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/SweetJaysonModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/dotnet/XmlSerializerModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/dotnet/XmlSerializerModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/BlazeDSAMF0Module.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/BlazeDSAMF0Module.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/BlazeDSAMF3Module.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/BlazeDSAMF3Module.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/BlazeDSAMFXModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/BlazeDSAMFXModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/BlazeDSPassiveDetectionModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/BlazeDSPassiveDetectionModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/BurlapModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/BurlapModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/CastorModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/CastorModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/FlexJsonModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/FlexJsonModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/GensonModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/GensonModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/HessianModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/HessianModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/JYAMLModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/JYAMLModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/JacksonModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/JacksonModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/JsonIoModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/JsonIoModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/KryoAltStrategyModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/KryoAltStrategyModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/KryoModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/KryoModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/KryoPassiveDetectionModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/KryoPassiveDetectionModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/ObjectInputStreamModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/ObjectInputStreamModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/Red5AMF0Module.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/Red5AMF0Module.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/Red5AMF3Module.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/Red5AMF3Module.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/SnakeYAMLModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/SnakeYAMLModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/XStreamModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/XStreamModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/XmlDecoderModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/XmlDecoderModule.java -------------------------------------------------------------------------------- /src/nb/freddy/modules/java/YAMLBeansModule.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/src/nb/freddy/modules/java/YAMLBeansModule.java -------------------------------------------------------------------------------- /test/FreddyTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nccgroup/freddy/HEAD/test/FreddyTest.java --------------------------------------------------------------------------------