86 matches found
Log4jPatcher
Log4jPatcher A Java Agent based mitigation for Log4j2 JNDI exploits. This agent employs 2 patches: Disabling all Lookup conversions on supported Log4j versions in org.apache.logging.log4j.core.pattern.MessagePatternConverter by setting noLookups to true in the constructor. Disabling the...
alibaba__one-java-agent_CVE-2022-25842_0-0-1
one-java-agent Goals 1. Provide plugin support to centrally manage multiple Java Agents. 2. Plugins support install/uninstall, requiring the plugin to implement interfaces. 3. Support traditional Java agents, i.e., already developed Java agents. Plugin System If a plugin wishes to be aware of the...
CVE-2022-39197-fix_patch
CVE-2022-39197-fixpatch Usage Add parameters when starting cobaltstrike -javaagent:fixXss-1.0-SNAPSHOT.jar...
hotpatch-for-apache-log4j2
Log4jHotPatch Esta es una herramienta que inyecta un agente Java en un proceso JVM en ejecución. El agente intentará parchear el método lookup de todas las instancias cargadas de org.apache.logging.log4j.core.lookup.JndiLookup para que devuelvan incondicionalmente la cadena "Patched...
cloudrasp-log4j2
CloudArmor · Módulo de Autoprotección de Aplicaciones en Tiempo de Ejecución - Versión Log4j2 简体中文 Este proyecto es una versión local de CloudArmor construida específicamente para defender Log4j2 CVE-2021-44228. No se requiere conexión de red para ejecutar este proyecto. Por favor, REALICE PRUEBA...
MemoryShellHunter
MemoryShellHunter Java Agent memory horse scanner combined with Call Graph modus About MemoryShellHunter is a memory shell Scanner/Killer tool that combines dynamic Building Call Graph. It supports Agent and Attach modes for detection, addressing the issue that conventional memory shell detection...
SECURITY-3430
SECURITY-3430 Workaround This is a Java agent for use with Jenkins controllers that do not have the fix for SECURITY-3430 i.e., up to and including 2.470 and LTS 2.452.3. Mechanism and Compatibility It transforms the definition of the class containing the SECURITY-3430 vulnerability to prevent...
jvmtiAgentLoad-Exploit
Arbitrary code execution via jvmtiAgentLoad Description: Tools and code for generating a malicious JAR to exploit jvmtiAgentLoad Usage: root@kitploit: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Linux Target The following command generates a JAR mal.jar that...
Log4jPatch
-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...
shouganaiyo-loader
shouganaiyo-loader: Entrada forzada para agentes de Java shouganaiyo-loader es una herramienta de línea de comandos de Node.js multiplataforma basada en Frida que obliga a los procesos Java a cargar un agente Java/JVMTI independientemente de si la JVM ha deshabilitado o no la API de adjunción de...
CVE-2026-33701-Unsafe-Deserialization-in-OpenTelemetry-Java-Agent-RMI-Instrumentation
CVE-2026-33701 — Unsafe Deserialization in OpenTelemetry Java Agent RMI Instrumentation Severity: Critical CVSS v4.0: 9.3 Affected versions: opentelemetry-javaagent 2.26.1 Patched in: 2.26.1 released March 23, 2026 Overview OpenTelemetry is probably the most widely adopted observability framework...
log4noshell
Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...
log4j-vulnerability-patcher-agent
log4j-vulnerability-patcher-agent This agent fixes critical vulnerability CVE-2021-44228 in log4j by patching JndiLookup class, as recommended here. WARNING: this is not a substitute for proper upgrade to log4j 2.15.0 , where this vulnerability was fixed for good. Use this agent IF, and ONLY IF,...
ROOT-APP-MAVEN-CVE-2026-33701 CVE-2026-33701 in io.opentelemetry.javaagent:opentelemetry-javaagent - Patched by Root
Root has patched CVE-2026-33701 in the io.opentelemetry.javaagent:opentelemetry-javaagent package for Root:Maven. Multiple fixed versions available...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the RMI context propagation process. An attacker can cause excessive memory allocation by sending an oversized context propagation payload to a network-reachable RMI endpoint on an...
PYSEC-2026-634 APM Java Agent Local Privilege Escalation
A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...
CVE-2026-54712 OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.27.0, the RMI context propagation payload reader limits the number of context entries but does not limit the aggregate size of the strings read from the...
CVE-2026-54712 OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.27.0, the RMI context propagation payload reader limits the number of context entries but does not limit the aggregate size of the strings read from the...
GO-2026-5253 OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR in go.opentelemetry.io/obi
OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR in go.opentelemetry.io/obi...