pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

splinter

splinter splinter 是一个 JVM 分析工具包，允许用户在运行时查看类、方法、字段、常量池和字节码。该工具在 OpenJDK 构建 22.0.2+9-70 上开发和测试。 splinter 是什么？ 通常，当你想到 JVM 的分析工具包时，你会认为它使用 JNI 或 JVMTI，但 splinter 不是！ splinter 实际上是外部工具，目前具备以下能力： 可以从正在运行的进程中读取 HotSpot VMStructs 可以通过 Method 和 ConstMethod 实时解码字节码 其长期目标是成为运行时 JVM 分析工具包，用于： 已加载类检查 方法和字段检查...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Framework, particularly the function hashing and malware analysis tools, but is expected to grow...

CVE-2022-34169

Descripción Comprueba si CVE-2022-34169 está corregido en tu máquina. Hasta donde sé, un empleado de Google encontró un exploit y no fue publicado. Dado que la corrección es conocida, se escribió una pequeña rutina de prueba para verificar si la corrección está disponible en tiempo de ejecución...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

hot-jar-swapping-urlclassloader

URLClassLoader JAR 热替换 以下示例代码展示了热替换已加载 JAR 文件并实现代码执行的能力，其利用的事实是：只要 inode 不变，内部类在被调用时仍会访问该 JAR 文件。 已在 MacOS 上使用 OpenJDK 测试通过（并且还曾通过 Transporter 在 Apple 的 Author publisher 上完成了利用）。 演示来自 Frans Rosén 在 NahamCon 2022 EU 上的演讲《通过热 JAR 替换在 Apple 上实现 RCE 的故事》。 如何运行 build-and-run.sh 运行方式： root@kitploit:...

CVE-2025-24813

测试任何Tomcat版本以查看该版本是否易受CVE-2025-24813影响 此POC允许您测试任何Tomcat版本，以验证该版本在易受攻击的条件下是否易受CVE-2025-24813影响，适用于Unix环境（已在Ubuntu机器上测试）。 注意： 使用openjdk 11进行测试。 1. 修改01-prepare-environment.sh文件中的tomcatversion变量为目标Tomcat版本 root@kitploit: !/bin/bash tomcatversion="10.1.20" 2. 准备环境：运行文件01-prepare-environment.sh 3...

log4shell-vulnerable-app

存在漏洞的应用程序 本仓库包含一个存在 CVE-2021-44228 漏洞的 Spring Boot Web 应用程序，该漏洞被称为 log4shell。 该应用使用了： log-4j-core:2.14.1（通过 spring-boot-starter-log4j2） openjdk:8u181 运行应用 启动应用： root@kitploit: docker run --name vulnerable-app --rm -p 8080:8080 romanutti/log4shell-vulnerable-app 或者自行构建： root@kitploit: docker build...

CVE-2023-46604

CVE-2023-46604 作者: Ruben Fobe & Klaas Stessens 介绍 WARNING 本项目仅用于教育和实验目的。 仅在您拥有或有权测试的环境中使用这些技术。 本实验将模拟利用CVE-2023-46604，使用Kali Linux VM（攻击者）和Debian 11服务器VM（受害者）。 此实验仅在您的主机操作系统为Windows时有效！ -- 如果您使用Linux，此实验将无法运行！ 前提条件 Oracle VirtualBox VBoxmanage（已在PATH中） PowerShell SSH客户端 至少约30 GB可用磁盘空间 使用的软件 警告...

USN-8689-1: OpenJDK 26 vulnerabilities

It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 26 did not correctly authorize users. A remote attack...

USN-8689-1 openjdk-26 vulnerabilities

It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 26 did not correctly authorize users. A remote attack...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059, CVE-2026-47010, CVE-2026-16439, CVE-2026-16441, CVE-2026-1624...

TencentOS Server 3: java-21-openjdk (TSSA-2026:0927)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0927 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

MiracleLinux 9 : java-21-openjdk-21.0.12.1.1-1.2.el9.ML.1 (AXSA:2026-1672:10)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1672:10 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...

TencentOS Server 3: java-17-openjdk (TSSA-2026:0928)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0928 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: java-1.8.0-openjdk (TSSA-2026:0926)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0926 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

[SECURITY] [DLA 4757-1] openjdk-17 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4757-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 26, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4756-1] openjdk-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4756-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 26, 2026 https://wiki.debian.org/LTS -...

USN-8681-1 openjdk-25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...