rmiscout

Descripción RMIScout permite ataques de lista de palabras y fuerza bruta contra interfaces Java RMI expuestas para adivinar de forma segura firmas de métodos sin invocación. Soporta múltiples protocolos Java RMI, invocación de métodos y explotación. Resumen de características Soporta múltiples...

PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

WebSphere-WSIF-gadget

WSIF Gadget para WebSphere CVE-2020-4464 / CVE-2020-4450 Esto se basa en las excelentes entradas de blog de ZDI informe original de @tint0: https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg es un escáner de vulnerabilidades Java RMI y puede usarse para identificar y verificar vulnerabilidades de seguridad comunes en endpoints Java RMI...

ermir

Ermir Ermir es un Registro RMI Malicioso/Pícaro, explota la deserialización insegura en cualquier código Java que llame a métodos RMI estándar sobre él list/lookup/bind/rebind/unbind. Requisitos Ruby v3 o superior. Instalación Instala Ermir desde rubygems.org: root@kitploit: $ gem install ermir o...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...

mjet

mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet is a tool that can be used to protect insecure configured JMX services. It is based on the blog post "Exploiting JMX-RMI" from Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi" and can be used to...

log4shell-rmi-poc

log4shell-rmi-poc A Proof of Concept of the Log4j vulnerability CVE-2021-44228 over Java-RMI It uses Log4j 2.5.7 from spring-boot-starter-log4j2 Requirements: Tested with Java 8 JDK 1.8.025 and Java 11 JDK 11.0.1 How to run the POC 1. Clone the repo: root@kitploit: git clone...

BaRMIe

BaRMIe BaRMIe es una herramienta para enumerar y atacar servicios Java RMI Remote Method Invocation. Los servicios RMI a menudo exponen funcionalidades peligrosas sin controles de seguridad adecuados; sin embargo, los servicios RMI tienden a pasar desapercibidos durante las evaluaciones de...

CVE-2021-26295

CVE-2021-26295 CVE-2021-26295 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Any illegal use is strictly prohibited. The user shall bear all consequences. Trigger command execution EXP 1. VPS starts RMI listener on port 9999 root@kitploit: java -cp...

CVE-2019-12409

CVE-2019-12409 RCE en Apache Solr ENABLEREMOTEJMXOPTS="true" root@kitploit: root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true"...

GadgetProbe

Description You just found a Java deserialization bug, you ran all your ysoserial payloads, and.... you got nothing. What now? How can you debug or build a gadget chain if you're totally blind? Introducing GadgetProbe, a tool that shines a light on remote classpaths and raises bug severity for al...

CVE-2017-3241-POC

CVE-2017-3241-POC POC for java RMI deserialization vulnerability You probably need to use JDK 8 to run this poc. Just pay attention to Message class in both client and server side. They are different. And the difference is the key to understand this vulnerability. The fix Oracle published is to...

cve_2011_3556

CVE-2011-3556 — Prueba de concepto PoC Descargo de responsabilidad Esta herramienta es una implementación en Python 3 de una prueba de concepto PoC existente, creada por mihi para Metasploit Framework. Requisitos previos Para usar el módulo, simplemente sigue las instrucciones que se indican a...

HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Vulnerabilidad de RCE por deserialización en el registro RMI de Java ID de CVE CVE-2017-5792 Exploit Página web del proveedor: www.hpe.com Versión: iMC PLAT v7.3 E0504 Standard Probado en: Windows Server 2008 R2 Enterprise 64-bit tenga en cuenta que este PoC ejecutará calc.exe $ java...

TencentOS Server 3: java-1.8.0-openjdk (TSSA-2026:0365)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0365 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: java-17-openjdk (TSSA-2026:0363)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0363 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-8216

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the component Java RMI Session Management. Such manipulation leads to improper authentication. The attack can be launched remotely. The vendo...

CVE-2026-8216 Industrial Application Software IAS Canias ERP Java RMI Session Management iasServerRemoteInterface.doAction improper authentication

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the component Java RMI Session Management. Such manipulation leads to improper authentication. The attack can be launched remotely. The vendo...