wrongsecrets

OWASP WrongSecrets !Docker container testhttps://github.com/OWASP/wrongsecrets/actions/workflow...

ipscan

Angry IP Scanner This is the source code of Angry IP Scanner, licensed with GPL v2. Official site The code is written mostly in Java. SWT library from Eclipse project is used for GUI that provides native components for each supported platform. The project runs on Linux, Windows and macOS. Helping...

Osinton

Osinton Osinton is an open-source OSINT Open Source Intelligence tool designed to perform structured investigations on individuals using publicly available information. The project allows users to search, correlate, and analyze digital footprints such as names, usernames, email addresses, and pho...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

apache__jspwiki_CVE-2019-10077_2-11-0-M3

Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

vulnerable-java-app

This repository does not have a README...

ApkAnalyser

Copyright C 2012 Sony Mobile Communications AB Il presente file fa parte di ApkAnalyser. Concesso in licenza secondo l'Apache License, Versione 2.0 la "Licenza"; non puoi utilizzare questo file se non in conformità con la Licenza. Puoi ottenere una copia della Licenza all'indirizzo: root@kitploit...

Dubbo-CVE-2020-1948

Ambiente di test Apache Dubbo CVE-2020-1948 Introduzione Quando è comparsa questa vulnerabilità, per verificarne l'impatto abbiamo cercato su Internet diversi esempi preparati da altre persone, ma nessuno permetteva di riprodurla correttamente. Abbiamo quindi creato un ambiente nostro, che...

mimosa

Mimosa Beschreibung Systeme werden neu gestartet, Datenbanken werden gedumpt, früher hieß es SecureCoding, dann wurde es an Junioren übergeben und schließlich komplett neu geschrieben. Dies ist ein Open-Source-Kern; administrative Kontrollen sind ausgeschlossen. Funktionen Viele Challenges Verwei...

CaptainHook

Captain Hook O que é? O objetivo desta ferramenta é rastrear entradas do usuário, a fim de encontrar pontos de injeção em métodos sensíveis como java.lang.Runtime.exec, java.sql.Statement.executeQuery, ..., bem como as mutações nessas entradas entre o ponto de injeção e a chamada do método...

CVE-2021-44228_dockernize

CVE-2021-44228 Log4Shell Ambiente de Laboratório de Vulnerabilidade Introdução Este projeto fornece um ambiente dockerizado para praticar com segurança e entender a vulnerabilidade crítica do Log4j conhecida como CVE-2021-44228 Log4Shell. Principais Recursos Ambiente de teste dockerizado e seguro...

svja

svja La RDPS Super Vulnerable Java Application è esattamente questo: un'applicazione Java super vulnerabile, creata per il beneficio di tutti, per vedere una varietà di vulnerabilità comuni, spesso "complesse". Questo software è stato creato come parte del Roniel and DaRon Podcast Show...

Writing-Sample-1

Log4j：CVE-2021-44228 Log4j 漏洞及缓解措施概述 目录 1. 执行摘要 2. 识别易受攻击的端点和服务 3. 缓解措施 A. 在边界处阻止 B. 在服务器端点上安装端点检测与响应 EDR C. 将易受攻击的企业应用置于 F5 之后 4. 资源与延伸阅读 执行摘要 Log4j 是许多 Java 应用程序中使用的日志记录工具。2021年12月，Apache 披露了一个远程代码执行 RCE 漏洞，拥有修改日志配置文件权限的攻击者可借此构造并执行恶意代码。据 Apache 称，Log4j2 版本 2.0-beta7 至 2.17.0 均受到该 RCE 漏洞的影响。NIST...

jsql-injection

Descrizione jSQL Injection è un'applicazione leggera utilizzata per recuperare informazioni dal database di un server. È gratuita , open source e cross-platform per Windows, Linux e Mac, e funziona con Java dalla versione 21 alla 25. jSQL Injection fa anche parte della distribuzione ufficiale per...

log4stdin

log4stdin — iniezione log4shell per qualsiasi cosa con stdout Questo repository contiene un'applicazione Java intenzionalmente vulnerabile a CVE-2021-44228, nota colloquialmente come log4shell. log4stdin non è letteralmente altro che un lettore di stdin, il cui input viene immesso in un'istanza...

SAP NetWeaver AS Java Apache Log4j Vulnerability (3726899)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a vulnerability in the Apache Log4j library as referenced in SAP Security Note 3726899: - The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses logback-core-1.5.21.jar which is vulnerable to CVE-2026-1225

Summary IBM Maximo Application Suite - Visual Inspection component uses logback-core-1.5.21.jar which is vulnerable to CVE-2026-1225, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-1225 DESCRIPTION: ACE vulnerability in...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Demonstration of the Log4jShell Exploit This code may contain...

dst-admin 安全漏洞

dst-admin is a web application developed by Qinming99 using the Java language. Versions of dst-admin prior to 1.5.0 contained security vulnerabilities. These vulnerabilities stemmed from incorrect operations on the deleteBackup function in the FileHandler component within the...

CVE-2009-4776

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors relate...