Log4j-RCE-Exploiter

Log4j-RCE-Exploiter Scanner for Log4j RCE CVE-2021-44228 Installation For installation, Run the Following command with SUPERUSER ROOT ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh Usage ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h,...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

Collabfiltrator

Collabfiltrator Exfiltrate Blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator. Version: 4.0.1 Authors: Adam Logue Jared McLaren Frank Scarpella Ryan Griffin AI Authors: Claude 3.5 Sonnet ChatGPT 4o Requirements: Burp Suite Professional 2024.12.1 or Later Support:...

Burp-Log4j-HammerTime

Log4j-HammerTime This Burp Suite Active Scanner extension validates exploitation of the Apache Log4j CVE-2021-44228 and CVE-2021-45046 vulnerabilities. This extension uses the Burp Collaborator to verify the issue. Usage Enable this extension Launch an Active Scan on a specific target if you want...

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

log4j

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading This script is based from takito1812/log4j-detect By ExodataCyberdefense The script "log4j-detect.py" developed in Python 3 is responsible for detecting whethe...

MAL-2026-16359 Malicious code in @uh-platform/domain-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa27cef146dec157eaf78519d56ff2ef696f32e99746cdabea9e30be7c03b96 Package @uh-platform/[email protected] is a scoped placeholder with an empty author, generic description, and no real functionality. Its...

MAL-2026-16235 Malicious code in strapi-plugin-osag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d9349a970008e54774fc533af589248d578e1d34f6f82a9a6630beeabd2203 The package presents itself as a Strapi plugin but ships no plugin code — only a postinstall.js script that runs automatically on npm install. The...

Malicious code in tracker-cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...

MAL-2026-16140 Malicious code in tracker-cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...

Malicious code in alloy-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee3815d12ec95aedb4bbe0d3de5c516e99163ca1eba52c2a3de7038b9a2ac0 package.json declares a preinstall hook that runs index.js on npm install. The script collects hostname, username, home directory, DNS servers, curre...

MAL-2026-16063 Malicious code in alloy-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee3815d12ec95aedb4bbe0d3de5c516e99163ca1eba52c2a3de7038b9a2ac0 package.json declares a preinstall hook that runs index.js on npm install. The script collects hostname, username, home directory, DNS servers, curre...

Malicious code in ckeditor5-ckbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9373ed3aa6afb53ef5d5d3dd4860a4ed9e7b151fdd8c5c7782f2b2e914810fc7 Unscoped npm package ckeditor5-ckbox mimics the legitimate @ckeditor/ckeditor5-ckbox plugin. package.json declares a preinstall hook node index.js th...

MAL-2026-15549 Malicious code in ckeditor5-ckbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9373ed3aa6afb53ef5d5d3dd4860a4ed9e7b151fdd8c5c7782f2b2e914810fc7 Unscoped npm package ckeditor5-ckbox mimics the legitimate @ckeditor/ckeditor5-ckbox plugin. package.json declares a preinstall hook node index.js th...

Malicious code in analytics-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a589041eddd586d6269526f6c6e67f6b645994a24a143af07e35d8e2f9ce0982 On npm install, the package's preinstall hook executes index.js which harvests host and user identity data os.hostname, os.platform, os.arch,...

MAL-2026-14531 Malicious code in analytics-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a589041eddd586d6269526f6c6e67f6b645994a24a143af07e35d8e2f9ce0982 On npm install, the package's preinstall hook executes index.js which harvests host and user identity data os.hostname, os.platform, os.arch,...

MAL-2026-14536 Malicious code in mt-ts-serverless-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da5b8989180a10122e1e8ab801ab76dc7587761bb58d05377359b8f8e09d52 package.json declares a preinstall hook that runs node index.js on every npm install. index.js collects installer host identity and system files —...

MAL-2026-14434 Malicious code in openai-pr-reviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...

Malicious code in carbon-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c617e93833344e13d376182fb00c13994a4d2e7f3f8220998e541d77a8e8713 The package's package.json declares a postinstall hook that runs index.js on npm install. index.js collects host reconnaissance and installer secrets...