marshalsec

Java Unmarshaller Security - 데이터를 코드 실행으로 바꾸기 Log4Shell/CVE-2021-44228 때문에 여기에 오셨다면, 공격 벡터와 영향을 받는 Java 런타임 버전에 대해 읽어보시기 바랍니다: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ 논문 Chris Frohoff와 Garbriel Lawrence가 Java 객체 역직렬화 취약점에 대한 연구를 발표한 지 2년 이상이 지났습니다. 그 연구는 궁극적으로 Java 역사상 가장...

readable-thrift

Readable Thrift Readable Thrift는 바이너리 Thrift 프로토콜 메시지를 사람이 읽기 쉬운 형식으로 변환하거나 그 반대로 변환하여 쉽게 작업할 수 있게 해줍니다. 이를 통해 바이너리 형식 Thrift 메시지의 수동 분석 및 변조가 HTTP와 같은 평문 프로토콜을 작업하는 것만큼 쉬워집니다. 이 라이브러리는 Java로 구현되어 JVM에서 실행되는 Burp 및 ZAP과 같은 인기 있는 웹 애플리케이션 테스트 도구용 확장 기능과 통합할 수 있습니다. 분석 또는 변조 도구를 실행하려면 적절한 바이트를 파싱하여...

shouganaiyo-loader

shouganaiyo-loader: Java 에이전트를 위한 강제 진입 shouganaiyo-loader는 크로스 플랫폼 Frida 기반 Node.js 명령줄 도구로, JVM이 에이전트 연결attach API를 비활성화했는지 여부와 관계없이 Java 프로세스가 Java/JVMTI 에이전트를 로드하도록 강제합니다. 설치 root@kitploit: $ sudo npm install -g shouganaiyo-loader 소스에서 빌드 root@kitploit: $ git clone...

JavaPayload

JavaPayload JavaPayload는 순수 Java 익스플로잇 또는 일반적인 잘못된 구성비밀번호로 보호되지 않는 Tomcat 매니저 또는 디버거 포트 등에서 포스트 익스플로잇post-exploitation에 사용하기 위한 순수 Java 페이로드 모음입니다. 구버전 문서는 다음에서 찾을 수 있습니다. http://schierlm.users.sourceforge.net/JavaPayload/ http://schierlm.users.sourceforge.net/J2EEPayload/...

A-potential-Denial-of-Service-issue-in-protobuf-java

A-potential-Denial-of-Service-issue-in-protobuf-java A potential Denial of Service issue in protobuf-java high severity GitHub Reviewed Published 5 days ago in protocolbuffers/protobuf • Updated yesterday Vulnerability details Dependabot alerts 2 Package com.google.protobuf:protobuf-java maven...

SimpleRmiDiscoverer

SimpleRmiDiscoverer 간단한 JMX RMI 스캐닝 도구 전체 코드: https://github.com/marcin-wolak/SimpleRmiDiscoverer/blob/master/SimpleRmiDiscoverer.java 이 도구는 노출된 Java JMX에 대해 다음 옵션을 제공합니다: RMI 레지스트리에서 JMX 엔드포인트IP/이름 및 TCP 포트 추출-d, --dumponly 사용 위 RMI 레지스트리에서 추출한 IP/이름 및 TCP 포트를 통해 JMX 객체가 사용자/비밀번호로 보호되는지 확인 위 RMI...

jndi-ldap-test-server

jndi-ldap-test-server This is a minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. How to test vulnerability to CVE-2021-44228 1. Download the test server binary for your platform you can find all binaries under Release...

CVE20131491-JIT

========================= Title ========================================= CVE-2013-1491 PoC using JIT-Spray by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= About this PoC...

cve-2022-42889-text4shell

安装 Maven - maven-linux 1. Maven 安装以创建 fat jar root@kitploit: mvn clean install 2. Docker 构建 root@kitploit: docker build --tag=text4shell . 3. Docker 运行 root@kitploit: docker run -p 80:8080 text4shell 4. 测试应用 root@kitploit: http://localhost/text4shell/attack?search= 5...

CVE-2025-30065

💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...

log4j-CVE-2021-44228

Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduction Reproducing the problem in k8s env Setting up k8s env with the vulnerability Possible Solutions KubeArmor Security Policy Not allowing any execs from the JVM/Java Default Deny based rules KubeArmor Visibility/Observability into t...

JEP290_RMI_Bypass

이게 뭐지? 이 프로젝트는 JEP290 Bypass 연구를 위한 것입니다. 결과...

CVE-2021-40865

CVE-2021-40865 CVE-2021-40865 POC/exploit-poc root@kitploit: import org.apache.commons.io.IOUtils; import org.apache.storm.serialization.KryoValuesSerializer; import ysoserial.payloads.ObjectPayload; import ysoserial.payloads.URLDNS; import java.io.; import java.math.BigInteger; import java.net.;...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST vulnerability RCE exploit with Java. Features Scan a single target Scan multiple targets Exploit with a shell Setup Lab You can find the lab Here Run You can run the code directly by user javac main.java followed by user java main help If you don't have JVM,...

CVE-2017-12149

CVE-2017-12149 Jboss Java Deserialization RCE CVE-2017-12149 The python script uses ysoserial to dynamically generate the payload. Therefore java is required as well...

CVE-2024-21006_jar

CVE-2024-21006jar Exploit code reference: https://github.com/momika233/CVE-2024-21006 Here, the source code has been compiled into a JAR package for ease of use. The lib directory contains dependency files. If you wish to modify the source code, you can compile it yourself. Usage root@kitploit:...

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

fusionauth-samlv2

fusionauth-samlv2 This repository is SAML v2.0 bindings in Java using JAXB. You'd use this library to process SAML requests and responses. See the tests for example code. Security disclosures If you find a vulnerability or other security related bug, please report the vulnerability here before...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

CVE-2023-25157-and-CVE-2023-25158

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 This repository contains a detailed description and replication steps of the SQL Injection vulnerabilities found in the GeoServer platform and GeoTools Library. The vulnerability has been assigned the identifier CVE-2023-25157 for...