splinter

splinter splinter는 JVM 분석 툴킷으로, 사용자가 런타임에 클래스, 메서드, 필드, 상수 풀 및 바이트코드를 볼 수 있게 해줍니다. 이는 OpenJDK 빌드 22.0.2+9-70에서 만들어지고 테스트되었습니다. splinter란 무엇인가? 보통 JVM용 분석 툴킷을 생각하면 JNI나 JVMTI를 사용한다고 생각하지만, splinter는 그렇지 않습니다! splinter는 실제로 외부에 있으며 현재 다음과 같은 기능을 가지고 있습니다: 실행 중인 프로세스에서 HotSpot VMStruct를 읽을 수 있습니다...

kaiju

CERT Kaiju Binary Analysis Framework for GHIDRA CERT Kaiju is a collection of binary analysis tools for Ghidra. This is a Ghidra/Java implementation of some features of the CERT Pharos Binary Analysis Frameworkpharos, particularly the function hashing and malware analysis tools, but is expected t...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

CVE-2025-24813

모든 Tomcat 버전에 대해 CVE-2025-24813 취약점 여부 테스트 이 POC를 사용하면 취약한 조건에서 특정 Tomcat 버전이 CVE-2025-24813에 취약한지 Unix 환경에서 Ubuntu 머신에서 테스트됨 확인할 수 있습니다. 참고: openjdk 11을 사용하여 테스트되었습니다. 1. 01-prepare-environment.sh 파일의 tomcatversion 변수를 대상 Tomcat 버전으로 수정하세요 !/bin/bash tomcatversion="10.1.20" 2. 환경 준비:...

CVE-2023-46604

CVE-2023-46604 Ruben Fobe & Klaas Stessens 작성 소개 경고 이 프로젝트는 교육 및 실습 목적으로만 사용됩니다. 소유한 환경이나 테스트 권한이 있는 환경에서만 이 기술을 사용하십시오. 이 실습은 Kali Linux VM공격자과 Debian 11 서버 VM피해자을 사용하여 CVE-2023-46604의 악용을 시뮬레이션합니다. 이 실습은 호스트 운영 체제가 Windows인 경우에만 작동합니다! -- Linux를 사용하는 경우 이 실습은 작동하지 않습니다! 전제 조건 Oracle VirtualBox...

wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations...

wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations...

SUSE SLES12: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:4515-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4515-1 advisory. - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907:...

CVE-2022-34169

설명 기기가 CVE-2022-34169에 대해 패치되었는지 확인합니다. 알려진 바에 따르면, Google 직원이 익스플로잇을 발견했지만 공개되지 않았습니다. 수정 방법이 알려져 있으므로, 런타임에 수정이 적용되었는지 확인하기 위해 이 작은 테스트 루틴을 작성했습니다. 직접 빌드 선택 사항 선택 사항: JDK가 있는 경우에만 가능합니다: Optional: To see if javac is available: sudo updatedb && sudo locate /bin/javac javac Bcel.java 6개의 경고는 무시해도...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: improve resource resolving bsc1275777. CVE-2026-61308: enhance HTTP connections bsc1275778. CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to jdk-11.0.32.1+1 August 2026 CSPU Patch...

SUSE-SU-2026:4515-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to jdk-11.0.32.1+1 August 2026 CSPU...

hot-jar-swapping-urlclassloader

URLClassLoader 핫 jar 스와핑 다음 예제 코드는 이미 로드된 JAR 파일을 핫 스와핑하고, inode가 변경되지 않는 한 내부 클래스가 호출될 때 여전히 JAR 파일에 접근한다는 점을 악용하여 코드 실행을 얻을 수 있는 기능을 보여줍니다. MacOS의 OpenJDK에서 테스트되었습니다 그리고 Transporter를 사용하는 Apple의 Author publisher에서도 악용되었습니다. NahamCon 2022 EU에서 열린 Frans Rosén의 발표 "Story of a RCE on Apple through...

log4shell-vulnerable-app

存在漏洞的应用程序 本仓库包含一个存在 CVE-2021-44228 漏洞的 Spring Boot Web 应用程序，该漏洞被称为 log4shell。 该应用使用了： log-4j-core:2.14.1（通过 spring-boot-starter-log4j2） openjdk:8u181 运行应用 启动应用： docker run --name vulnerable-app --rm -p 8080:8080 romanutti/log4shell-vulnerable-app 或者自行构建： docker build . -t vulnerable-app docker ru...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_5683)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225683 advisory. OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 OpenJDK: imprope...

AlmaLinux 9.6 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1777393695)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777393695 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Support...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1770310846)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1770310846 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_1442)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221442 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_0185)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220185 advisory. OpenJDK: Incomplete deserialization class filtering in ObjectInputStream Serialization, 8264934 CVE-2022-21248 OpenJDK: Incorrect reading of TIFF files in...