PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

CVE-2021-26295

CVE-2021-26295 CVE-2021-26295 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Any illegal use is strictly prohibited. The user shall bear all consequences. Trigger command execution EXP 1. VPS starts RMI listener on port 9999 root@kitploit: java -cp...

rmiscout

Description RMIScout enables wordlist and bruteforce attacks against exposed Java RMI interfaces to safely guess method signatures without invocation. It supports multiple Java RMI protocols, method invocation, and exploitation. Feature overview Supports multiple types of Java RMI servers: RMI-JR...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg es un escáner de vulnerabilidades Java RMI y puede usarse para identificar y verificar vulnerabilidades de seguridad comunes en endpoints Java RMI...

BaRMIe

BaRMIe BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testin...

ermir

Ermir Ermir es un Registro RMI Malicioso/Pícaro, explota la deserialización insegura en cualquier código Java que llame a métodos RMI estándar sobre él list/lookup/bind/rebind/unbind. Requisitos Ruby v3 o superior. Instalación Instala Ermir desde rubygems.org: root@kitploit: $ gem install ermir o...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...

cve_2011_3556

CVE-2011-3556 — 概念実証（PoC） 免責事項 このツールは、mihi が Metasploit Framework 向けに作成した既存の 概念実証（PoC） を Python 3 で実装したものです。 前提条件 モジュールを使用するには、以下の手順に従ってください: root@kitploit: Clone this repository locally. $ git clone https://github.com/sk4la/cve20113556.git && cd cve20113556/ Optionally set the x bit to be able t...

log4shell-rmi-poc

log4shell-rmi-poc Log4j脆弱性（CVE-2021-44228）のJava-RMI経由でのProof of Concept spring-boot-starter-log4j2のLog4j 2.5.7を使用しています。 必要条件: Java 8（JDK 1.8.025）およびJava 11（JDK 11.0.1）でテスト済み POCの実行方法 1. リポジトリをクローン: root@kitploit: git clone https://github.com/Labout/log4shell-rmi-poc.git 2. 攻撃者側のRMIサーバーを起動...

GadgetProbe

Description You just found a Java deserialization bug, you ran all your ysoserial payloads, and.... you got nothing. What now? How can you debug or build a gadget chain if you're totally blind? Introducing GadgetProbe, a tool that shines a light on remote classpaths and raises bug severity for al...

mjet

MJET by MOGWAI LABS MOGWAI LABS JMX Exploitation Toolkit MJET is a fork of sjet, which was developed by siberas but is no longer actively maintained. MJET is maintained by the MOGWAI LABS team which also provided most of the original sjet codebase. MJET allows an easy exploitation of insecure...

CVE-2017-3241-POC

CVE-2017-3241-POC POC for java RMI deserialization vulnerability You probably need to use JDK 8 to run this poc. Just pay attention to Message class in both client and server side. They are different. And the difference is the key to understand this vulnerability. The fix Oracle published is to...

HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Java RMI レジストリのデシリアライゼーション RCE 脆弱性 CVE ID CVE-2017-5792 エクスプロイト ベンダーホームページ: www.hpe.com バージョン: iMC PLAT v7.3 E0504 Standard テスト環境: Windows Server 2008 R2 Enterprise 64-bit この PoC は calc.exe を起動することに注意してください $ java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.RMIRegistryExplo...

WebSphere-WSIF-gadget

WSIF Gadget for WebSphere CVE-2020-4464 / CVE-2020-4450 これは、ZDIの優れたブログ記事に基づいています（元のレポートは@tint0によるものです）： https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere https://www.zerodayinitiative.com/blog/2020/9/29/exploiting-other-remote-protocols-in-ibm-websphere...

mjet

mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet is a tool that can be used to protect insecure configured JMX services. It is based on the blog post "Exploiting JMX-RMI" from Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi" and can be used to...

TencentOS Server 3: java-1.8.0-openjdk (TSSA-2026:0365)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0365 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: java-17-openjdk (TSSA-2026:0363)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0363 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-8216

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the component Java RMI Session Management. Such manipulation leads to improper authentication. The attack can be launched remotely. The vendo...

CVE-2026-8216 Industrial Application Software IAS Canias ERP Java RMI Session Management iasServerRemoteInterface.doAction improper authentication

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This issue affects the function iasServerRemoteInterface.doAction of the component Java RMI Session Management. Such manipulation leads to improper authentication. The attack can be launched remotely. The vendo...