CVE-2021-44228-Apache-Log4j-Rce

Utilizzo: 1. Esecuzione di RMIServer 2. Esecuzione di Main...

evil-rmi-server

evil-rmi-server Ein böswilliger RMI-Server, der einen beliebigen Befehl ausführen kann. Kann für CVE-2021-44228 in einem lokalen Privesc-Szenario nützlich sein. Erstellen ./gradlew bootJar Ausführen root@kitploit: Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil RMI Serv...

cve_2011_3556

CVE-2011-3556 — 개념 증명PoC 면책사항 이 도구는 mihi가 Metasploit Framework용으로 제작한 기존 개념 증명PoC의 Python 3 구현입니다. 전제 조건 모듈을 사용하려면 아래 지침을 따르세요: root@kitploit: Clone this repository locally. $ git clone https://github.com/sk4la/cve20113556.git && cd cve20113556/ Optionally set the x bit to be able to execute the...

log4shell-rmi-poc

log4shell-rmi-poc Una prova di concetto della vulnerabilità Log4j CVE-2021-44228 su Java-RMI Usa Log4j 2.5.7 da spring-boot-starter-log4j2 Requisiti: Testato con Java 8 JDK 1.8.025 e Java 11 JDK 11.0.1 Come eseguire il POC 1. Clona il repository: root@kitploit: git clone...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection Chinesisches Dokument Verwandte Artikel Beschreibung JNDI-Injection-Exploit ist ein Werkzeug zum Generieren funktionsfähiger JNDI-Links und zur Bereitstellung von Hintergrunddiensten durch Starten von RMI-Server, LDAP-Server und HTTP-Server...

CVE-2018-3191-Rce-Exploit

CVE-2018-3191-Rce-Exploit Autor: Break Paso 1: java -jar GenPayload.java output SJpayload.bin, la dirección es la dirección del servidor RMI Paso 2:java -jar RMISERVER.jar httpaddress, el servidor RMI escucha en el puerto 1099 y carga las clases Reverse remotas en el servidor web Paso 3:coloca do...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus README in cinese Descrizione JNDI-Injection-Exploit-Plus è uno strumento per generare link JNDI funzionanti e fornire servizi in background avviando server RMI, LDAP e HTTP. Usando questo strumento puoi ottenere link JNDI che puoi inserire nel tuo POC per testare la...

EUVD-2020-30540

Malware in sbrugna...

EUVD-2017-12325

Malware in sbrugna...

EUVD-2017-18744

Malicious code in bioql PyPI...

Exploit for CVE-2021-22006

It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is CVE-2021-22006. The target product/service is Java-based applications, specifically those using JNDI services. The vulnerability class/vector is RCE Remote Code Execution, and the probable entry points are...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

CVE-2020-9761

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

GHSA-8V4H-J42H-WFHC Deserialization of Untrusted Data in Spring-flex

The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may b...

GHSA-8M35-R25C-QR56 GraniteDS Insecure Deserialization

The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be...

JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability

JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further to link with HTTP server. Using this tool allows you get JNDI links, you ca...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Remote code execution

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Default configuration

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called...