30 matches found
CVE-2021-44228-Apache-Log4j
CVE-2021-44228 Apache Log4j Esecuzione remota di codice Versioni interessate: tutte le versioni dalla 2.0-beta9 alla 2.12.1 e dalla 2.13.0 alla 2.15.0 Avvisi / bollettini di sicurezza collegati a Log4Shell CVE-2021-44228 Utilizzo: 1. Scarica il progetto, compila InjectClazz.java root@kitploit:...
CVE-2020-8840
CVE-2020-8840 Ambiente root@kitploit: jdk 8u161 windows10 1903 Procedura root@kitploit: 1.Create a java file named Exploit.java with code you wanna run in it & compile it 2.Create a http server using python or other tools at the same dir of class file 3.Create a ldap server using marshalsec: java...
CVE-2021-44228-Log4j-PoC-RCE
Apache Log4j CVE-2021-44228 GK7 PoC Schritte 1. Kompilieren Sie Log4jRCE.java und verschieben Sie die .class-Datei auf einen Webserver z.B. lokales PHP 1. cd src/main/java 2. javac Log4jRCE.java 3. Verschieben Sie die .class-Datei auf einen Webserver oder starten Sie lokal PHP, z.B.: php -S...
CVE-2021-44228_Example
CVE-2021-44228उदाहरण प्रत्येक 3 खंड को एक अलग टैब/कंसोल में चलाएँ marshalsec LDAP सर्वर https://github.com/chilliwebs/marshalsec से फोर्क किया गया https://github.com/mbechler/marshalsec root@kitploit: docker build -t marshalsec marshalsec/. docker run -it --rm -p 1389:1389...
log4j-docker
Log4j-Schwachstelle - Proof-of-concept Dieses Repo enthält die Docker- und k8s-YAMLs, die benötigt werden, um die Log4j-Schwachstelle nachzubilden siehe unten. Folgen Sie diesem Blog, um zu verstehen, wie alles zusammenhängt. Docker-Images erstellen Falls Sie die Docker-Images anpassen müssen...
CVE-2021-44228_PoC
POC per CVE-2021-44228 Questo script Python è stato creato mentre lavoravo sulla stanza TryHackMe per Log4j. Sebbene sia stato creato con variabili predefinite per questa stanza, ho usato argparse per rendere lo script versatile per una richiesta GET. Tutte le variabili necessarie possono essere...
marshalsec-jar
marshalsec-jar Serviva il file per un test...
Log4Shell-Minecraft-Server
Java Unmarshaller Security - Turning your data into code execu...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An aut...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228: Brief Description Apache L...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
vuln4japi A vulnerable Java based REST API for demonstrating C...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell POC CVE-2021-44228 The scope of this repository i...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell POC CVE-2021-44228 The scope of this repository i...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell POC CVE-2021-44228 The scope of this repository i...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
PoC exploit for CVE-2021-44228, a remote code execution vulnerab...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Apache Log4j CVE-2021-44228 GK7 PoC Pasos 1. Compilar Log...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
POC for CVE-2021-44228 This python script was created while I...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j2-CVE-2021-44228-revshell Usage For reverse...
Apache Log4j2 2.14.1 Remote Code Execution
Exploit Title: Apache Log4j 2 - Remote Code Execution RCE Date: 11/12/2021 Exploit Authors: kozmer, z9fr, svmorris Vendor Homepage: https://logging.apache.org/log4j/2.x/ Software Link: https://github.com/apache/logging-log4j2 Version: versions 2.0-beta-9 and 2.14.1. Tested on: Linux CVE:...