bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

SecurityRAT

OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...

CVE-2019-8449

CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

CVE-2019-8451

CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...

CVE-2019-8451

CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

Jira-Scan

Jira-Scan ONLY TESTED WITH PYTHON 3 Provide a list of websites to test with out the http or https and this will test each one for the SSRF vun. Use a VPS from DO CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before...

CVE-2019-3403

CVE-2019-3403 I wanted to easily be able to exploit CVE-2019-3403 to scrape all the users from a JIRA application, so I threw this script together. It isn't the cleanest code ever, and it doesn't handle requests that return over 1000 users it will just truncate them to the first 1000 - but it can...

CVE-2020-14181

CVE-2020-14181 Poc for CVE-2020-14181 Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. This vulnerability was discovered by Mikhail Klyuchnikov of Positive...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

watchTowr-vs-Atlassian-CVE-2026-21589

CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection in Action Detection Artifact Generator attempts to check if the target is vulnerable to CVE-2026-21589. Detection is implemented for following products: Atlassia...

CVE-2020-36287

CVE-2020-36287 The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions chec...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Limited Remote File Read/Include Vulnerable Endpoints: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2019-8449

CVE-2019-8449 CVE-2019-8449 Exploit for Jira Releases Below v8.3.4 CVSS Score: 5.0 Vulnerability Types: Information Disclosure Authentication: Not Required Affected Versions: 2.1 - 8.3.4 Publish Date: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 Description The...

CVE-2019-11581

CVE-2019-11581 Atlassian JIRA Template injection vulnerability RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Vuln Version Download https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc...

purify

Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo Description The goal of Purify to be an easy-in-use and efficient tool to simplify a workflow of managing vulnerabilities delivered from various even custom tools. Purify is aims to be a tool-agnostic applicatio...

faraday_plugins

Install pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path faraday-plugins list-plugins Test autodetect plugin from comman...

CVE-2019-12836

CVE-2019-12836 Application JEditor v3.0.5 - WYSIWIG Editor for JIRA Simple yet powerful rich text editor for Jira. Import HTML emails, paste rich contents, create templates and prepopulate fields. Vendor of Product Bobronix Vendor Website http://bobronix.com/ CVE Reference...