log4jScan

log4jScan scanner python simple pour vérifier si votre réseau est vulnérable à CVE-2021-44228 utilisation : root@kitploit: git clone https://github.com/sinakeshmiri/log4jScan.git java -jar JNDIExploit-1.2-SNAPSHOT.jar -i $YOURPRIVATEIP -p 8888 sudo masscan -p 80,443 192.168.0.0/16 hosts.txt...

JYso

JYso ysoserial과 JNDIExploit를 동시에 사용할 수 있는 도구로, 다양한 JNDI 고버전, WAF, RASP 우회 기능을 제공합니다. 한국어 문서 | English 🚀 시작 가이드 📢 이 문서를 꼭 읽어주세요. JYso를 빠르게 익히는 데 도움이 됩니다! 🧐 사용 문서: Wiki ✔ 최신 버전 다운로드: Releases 👍 특징 GUI 실행, 간편한 조작 JNDI 계정/비밀번호 실행 JNDI 경로 숨김 또는 암호화 JNDI 고버전 우회 메모리 셸의 경로, 비밀번호, 인증 HTTP 헤더 및 값을 사용자 정의 메...

CVE-2024-21006

لا شيء يُقال، إنه مجرد استغلال LDAP. 2. يُرجى التحقق من سجلات طلبات خدمة LDAP. 3. الإصدارات المستهدفة يجب أن تكون Oracle WebLogic Server 12.2.1.4.0 و 14.1.1.0.0، ويجب أن يكون JDK بإصدار قديم. 4. استخدم JNDIExploit-1.4-SNAPSHOT.jar لبدء خدمة LDAP...

Vm4J

Vm4J أداة لاكتشاف ثغرة log4j في منتجات VMware. كيف يعمل؟ أولاً، ابدأ تشغيل خادم JNDIExploit. شغّل هذه الأداة واضبط أي إعدادات على الوضع الصحيح. أرسِل الحمولة. لقطة الشاشة الدعم VMware HCX VMware vCenter VMware Workspace One سيتم إضافته VMware NSX VMware Horizon VMware vRealize Operations Manager...

CVE-2021-2109_poc

weblogicCVE-2021-2109poc weblogic CVE-2021-2109 أداة تحقق جماعي poc طريقة الاستخدام: أولاً، قم بتنزيل JNDIExploit.jar على خادم آخر وقم بتشغيل java -jar JNDIExploit.jar -i ip ثم ضع عناوين ip المطلوب فحصها في urls.txt، وبعد ذلك قم بتشغيل هذا السكربت فقط...

JNDI-Exploit-1.2-log4shell

JNDI-Exploit-1.2-log4shell تفاصيل : CVE-2021-44228 الاستخدام : root@kitploit: ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u,...

h2database-rce-poc

H2 Console RCE Exploit Toolkit Vulnerability exploitation scr...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell Security Lab — nginx + Coraza WAF Mục đích giáo...

CVE-2022-41272

An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS of SAP NetWeaver Process Integration PI - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment O...

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-3919...

WhiteHSBG JNDIExploit Path Traversal Vulnerability

WhiteHSBG JNDIExploit is a tool for JNDI injection exploitation, heavily referencing the code of the Rogue JNDI project, supporting direct in-memory shell implantation, and integrating common ways to bypass higher versions of the JDK, suitable for use with automation tools. A path traversal...

Open redirect

An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS of SAP NetWeaver Process Integration PI - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4ShellCVE-2021-44228 Demo !demo-scenariosimages/demo-...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This repository is a proof-of-concept PoC exploit for CVE-2021-44228, a vulnerability in the Log4j logging library. The exploit targets the Log4j 2 library, which is a popular logging framework for Java applications. The exploit uses the JNDI Java Naming and Directory Interface protocol to inject...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell...

Exploit for Path Traversal in Apache Http_Server

It is an exploit module for Apache Log4j. The target product/ser...

SpringBootVulExploit

This repository contains a collection of Spring Boot vulnerability exploit checklists, including information on how to exploit various vulnerabilities in Spring Boot applications. The repository includes several subdirectories, each containing a specific exploit: 1...