JarHunter

JarHunter – Advanced JAR Analysis & Extraction Tool JarHunter is a tool designed to explore, search and extract specific classes from large JAR files quickly and efficiently. Instead of manually browsing thousands of classes, JarHunter allows you to search keywords across the entire JAR file and...

CVE-2021-44228_scanner-main-Modified-

CVE-2021-44228scanner modified - Deprecated Original Script and Repo: https://github.com/CERTCC/CVE-2021-44228scanner Modified by: Alex Pena Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...

ansible-role-log4shell

Ansible role - log4shell ⭐ Star us on GitHub — it motivates us a lot! Find Log4Shell CVE-2021-44228 on your system This role tries to find JAR and WAR from filesystem and from opened files lsof ⚠️ Your system may runs slowly during the scan due to a find on and the unarchive process to lookup...

Get-log4j-Windows-local

Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description:...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides a command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: root@kitploit: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jbo...

HackBar

HackBar Burpsuite Plugin Usage Requirements Burpsuite How to Install root@kitploit: Download Latest Jar from https://github.com/d3vilbug/HackBar/releases/ and add in burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS Upcoming Features/Modules Ctrl + H shortcut WAF bypass SQLi...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

log4j-fix-CVE-2021-44228

log4j-fix-CVE-2021-44228 Windows Batch Script to Scan all the local drive and Fix the log4jCVE-2021-44228 impacted jars Below configurations are needed to make it work SET ZIPPATH =C:\PROGRA1\7-Zip\7z.exe set RESULTFILENAM E=log4jimpactedjars set APPLYFIX =FALSE set LOG4JLOGDIR =%temp% ZIPPATH...

chk_log4j

chklog4j - Tool to find jar files which are vulnerable to log4j CVE-2021-44228. Install 1. git clone https://github.com/gcmurphy/chklog4j 2. cd chklog4j && cargo install --path . Usage The tool only checks a single file so it is best combined with something like fd. root@kitploit: $ fd -a -e jar ...

CVE-2024-25897

parameters ip, port, path exploit output Help panel exploit explanation Here is the explanation of the code in Markdown: Code Explanation This script is designed to exploit a specific vulnerability in Jenkins CVE-2024-23897. It allows downloading a JAR file from a Jenkins server and executing a...

CVE-2018-11770

CVE-2018-11770 Apache Spark Unauthenticated Reverse Shell RCE Standalone Python 3 RCE exploit for Apache Spark rewritten from this Metasploit module Exploit POC explained here. The exploit code itself is explained here. Tested with Python 3.7 on this target. Usage: root@kitploit:...

log4j_checker_beta

log4jcheckerbeta - Linux, macOS and Windows Scripts If you want to use the windows/linux download cradles below, please review the scripts beforehand. Loading code from the internet and execute it is what brought us here with Log4Shell - right? ;- Linux and macOS servers or clients The...

CVE-2021-25641

CVE-2021-25641 A Exploit Tool For CVE-2021-25641. All dependencies was packed,You don't care the dependencies problem If you have dependencies you can just donwload the CVE-2021-25641.jar to run. Used for: Basic dubbo-common =2.7.3 Dubbo 2.7.0 to 2.7.8 Dubbo 2.6.0 to 2.6.9 Dubbo all 2.5.x version...

log4jjndilookupremove

log4jjndilookupremove A simple script to remove Log4J JndiLookup.class from jars in given directory. This script can be used to temporarily resolve the CVE-2021-45046 and CVE-2021-44228, until the application can be repackaged with a proper Log4J version. Usage On Linux or other nix system just r...

log4j-checker

Log4j-Checker This repository contains scripts that can help identity .jar files which may be vulnerable to CVE-2021-44228 aka Log4Shell. Log4Shell Hash Check This script will find .jar files within the filesystem starting from a specific path, calculate a SHA-256 hash for each .jar file found -...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 vulnerability scanner for Windows OS. Example Usage Usage root@kitploit: .\log4j-scanner.exe Terminal is used to output results, deploy this to machines via RMM and Start/Report from PowerShell or CMD Prompt. Build from source root@kitploit: git clone...

inspec-log4j

inspec-log4j This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files. Running the profile locally root@kitploit: git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Running the profile against a remote...

log4j-scanner

Log4j Scanner Discover Log4Shell vulnerability CVE-2021-44832 in your files and directories. Description This Rust-based Log4j Scanner is designed to help you identify and locate vulnerable files that may contain the Log4Shell vulnerability CVE-2021-44832. It scans files and directories to find...

hot-jar-swapping-urlclassloader

URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...