text4shell-tools

commons-text-tools Schnelllinks Zum Finden anklicken: Finde commons-text .jar-Dateien und ihre Versionen Aufrufe verwundbarer commons-text-Funktionen Hot-Patch für commons-text .jar-Dateien, um die verwundbaren Verhaltensweisen zu deaktivieren Beispiel für Scan und Patch Übersicht CVE-2022-42889...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

JarHunter

JarHunter – Erweitertes JAR-Analyse- und Extraktionswerkzeug JarHunter ist ein Werkzeug, das entwickelt wurde, um große JAR-Dateien schnell und effizient zu durchsuchen, zu erkunden und bestimmte Klassen zu extrahieren. Anstatt manuell Tausende von Klassen zu durchsuchen, ermöglicht JarHunter,...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Framework, particularly the function hashing and malware analysis tools, but is expected to grow...

rbndr

rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...

vulnerable-java-app

Questo repository non contiene un README...

log4shell-homework9

Compito 9 – Proteggere i sistemi dagli exploit Log4Shell Panoramica Questo progetto dimostra lo sfruttamento e la mitigazione della vulnerabilità Log4Shell CVE-2021-44228 utilizzando un'applicazione web Java containerizzata con Log4j 2.14.1 vulnerabile. La configurazione include anche un server...

log4stdin

log4stdin — iniezione log4shell per qualsiasi cosa con stdout Questo repository contiene un'applicazione Java intenzionalmente vulnerabile a CVE-2021-44228, nota colloquialmente come log4shell. log4stdin non è letteralmente altro che un lettore di stdin, il cui input viene immesso in un'istanza...

java-log4j-cve-2020-9488

java-log4j-cve-2020-9488 Demo di CVE-2020-9488: logging non sicuro con Log4j e rimedio...

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Esecuzione di codice remoto tramite deserializzazione non sicura. Cronologia Vulnerabilità segnalata al fornitore: 22.09.2023 Nuova versione corretta 1.1.9.4 rilasciata: 08.12.2023 Divulgazione pubblica: 15.12.2023 Descrizione IBM i Access...

PT-2026-81356

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

f-for-java

f-for-java un progetto scritto in go e java che ho abbandonato per CVE-2021-44228 prova a sistemarlo se ci riesci XD IL MODULO IN JAVA NON È MIO...

CVE-2026-59649

A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...

CVE-2026-59647

A flaw was found in Bouncy Castle for Java. The Certificate Request Message Format CRMF and Certificate Management Protocol CMP password-based Message Authentication Code MAC implementation allows for an unbounded iteration count. A remote attacker can exploit this by sending a specially crafted...

CVE-2026-58063

A flaw was found in Bouncy Castle for Java. A remote attacker can exploit this vulnerability by providing a specially crafted BCFKS keystore file that specifies an unbounded Key Derivation Function KDF cost. This can lead to a Denial of Service DoS as the system attempts to process the file,...

CVE-2026-6009

⚠️ Avvertenza: Questo repository è solo a scopo educativo e per test di sicurezza autorizzati. Non utilizzare contro sistemi che non possiedi o per i quali non hai ottenuto esplicita autorizzazione scritta. CVE-2026-6009 Prova di Concetto Riepilogo La libreria Jaspersoft report versione = 7.0.3 è...

TraditionalJay

TraditionalJay Absichtlich verwundbarer klassischer / traditioneller Shop für Sicherheitsworkshops – Java auf einer VM EC2, Azure VM oder GCP Compute Engine, keine Container. Hauptstory: Kritische VM-Kompromittierung – SQL-Injection → Log4Shell CVE-2021-44228 → Reverse-Shell zu externem C2...

CVE-2021-34045

Informações Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Data do exploit：01.06.2021 Autor do exploit：Al1ex@Heptagram Página inicial do fornecedor：https://github.com/201206030/novel-plus Versão afetada：novel-plus-install-v3.5.3 Descrição：O sistema Novell plus carrega o...

log4shelldetect

log4shelldetect Scannt rekursiv eine Datei oder einen Ordner nach Java-Programmen, die möglicherweise anfällig sind für: CVE-2021-44228 Log4Shell v2.0.x - v2.14.x CVE-2021-45046 v2.15.x CVE-2021-45105 v2.16.x1 durch Überprüfung der Klassenpfade in Dateien. Wenn Sie nur möglicherweise anfällige...