jdwp-shellifier

JDWP exploitation script What is it ? This exploitation script is meant to be used by pentesters against active JDWP service, in order to gain Remote Code Execution. How does it work ? Well, in a pretty standard way, the script only requires a Python 2 interpreter: % python ./jdwp-shellifier.py -...

AndBug

======================================= AndBug -- Un depurador Android scripteable AndBug es un depurador orientado a la máquina virtual Dalvik de la plataforma Android, diseñado para ingenieros inversos y desarrolladores. Utiliza las mismas interfaces que el plugin de depuración de Eclipse de...

Debuggable-App-Exploit

CVE-2024-31317 Exploit de Aplicación Depurable Un exploit basado en Python para CVE-2024-31317 Inyección de Zygote en Android que hace que cualquier aplicación Android instalada sea depurable inyectando argumentos maliciosos de zygote a través del ajuste hiddenapiblacklistexemptions. Incluye...

CVE-2026-100102

Perforce P4 Search container images prior to version 2026.4.2 are vulnerable to remote code execution due to an unauthenticated Java debug interface (JDWP) being enabled. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, which may lead ...

CVE-2026-100102 RCE via exposed JDWP debug agent in P4Search

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

CaptainHook

Captain Hook What is it ? The purpose of this tool is to trace user inputs, in order to find injection points into sensitive methods like java.lang.Runtime.exec, java.sql.Statement.executeQuery, ... as well as the mutations on these inputs between the injection point and the method call. "Marks"...

Exploit for Deserialization of Untrusted Data in Google Android

CVE-2024-31317 Debuggable App Exploit A Python-based exploit...

CVE-2025-11538: Binding to an Unrestricted IP Address

A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...

EUVD-2023-53627

Malicious code in bioql PyPI...

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

Threat actors are weaponizing exposed Java Debug Wire Protocol JDWP interfaces to obtain code execution capabilities and deploy cryptocurrency miners on compromised hosts. "The attacker used a modified version of XMRig with a hard-"coded configuration, allowing them to avoid suspicious command-li...

Exposed JDWP Exploited in the Wild: What Happens When Debug Ports Are Left Open

Understanding the risks and impact of deploying dev-mode in production environments...

CVE-2021-20032

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

CVE-2023-49693

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...

CVE-2023-49693

The CVE-2023-49693 entry concerns NETGEAR ProSAFE Network Management System, where Java Debug Wire Protocol (JDWP) is exposed on port 11611 and accessible without authentication, enabling remote arbitrary code execution. Multiple connected records corroborate an unauthenticated access vector via ...

CVE-2023-49693: Missing Authentication for Critical Function

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...

CVE-2021-20032

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

Remote code execution

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

CVE-2021-20032

CVE-2021-20032 affects SonicWall Analytics 2.5 On-Prem (versions up to 2.5.2518 and earlier). The vulnerability stems from a security misconfiguration of the Java Debug Wire Protocol (JDWP) interface, enabling potential remote code execution. Multiple sources (NVD, Red Hat, CVE listings, SonicWal...

CVE-2021-20032

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

CVE-2021-20032: Undefined Security Weakness

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...