rogue-jndi

Rogue JNDI Un servidor LDAP malicioso para ataques de inyección JNDI. Descripción El proyecto contiene servidores LDAP y HTTP para explotar la API Java JNDI insegura por defecto. Para realizar un ataque, puedes iniciar estos servidores localmente y luego provocar una resolución JNDI en el cliente...

CVE-2021-44228-poc

Aplicação vulnerável de exemplo Log4Shell CVE-2021-44228 Esta é uma aplicação vulnerável quase cópia/similar a https://github.com/christophetd/log4shell-vulnerable-app As principais diferenças são o uso de maven em vez de gradle, e o uso de rogue-jndi. Este repositório contém uma aplicação web...

JNDIExploit

This is a Java-based exploit tool for JNDI Java Naming and Directory Interface injection vulnerabilities. The tool is designed to inject a payload into the JNDI repository, allowing an attacker to execute arbitrary code on the target system. The tool is based on the Rogue JNDI project and support...

Exploit for CVE-2019-2423

This is a malicious LDAP server for JNDI injection attacks, classified as an exploit module/toolkit targeting Java JNDI API. The primary CVE ID is not explicitly mentioned, but the tool is designed to exploit insecure-by-default Java JNDI API, which is related to CVE-2019-2423. The tool targets...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228-docker-example A simple demonstration of CVE-2...