activemq-rce-cve-2023-46604

README simple analysis for CVE-2023-46604 https://thinkycx.me/2024-04-19-activemq-cve-2023-46604-analysis.html...

ActiveMQ_CVE-2015-5254

ActiveMQ Deserialization CVE-2015-5254 Vulnerability Description: Security vulnerabilities exist in Apache ActiveMQ versions before 5.13.0. The issue stems from the program not restricting the classes that can be serialized in the broker. Remote attackers can exploit this by sending a specially...

CVE-2023-46604

CVE-2023-46604 Set up docker-compose containing 2 images: the victim machine and the target machine according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Open an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen fo...

CVE-Lab

CVE-2023-46604 Lab This lab guides on exploiting vulnerabilities of CVE-2023-46604 Acknowledgements Apache ActiveMQ CVE-2023-46604 Environment This lab requires the installation of 2 virtual machines. One Kali Linux machine version 2023.4 and one Ubuntu machine version 22.04.3 LTS. You can downlo...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

CVE-2026-34197-Apache-ActiveMQ-RCE

Fixed the issue where the reverse shell failed because the command was not XML-escaped...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overview Item| Details ---|--- CVE ID| CVE-2026-34197 CVSS| 8.8 HIGH Vulnerability Type| Remote Code Execution RCE CWE| CWE-20 Improper Input Validation / CWE-94 Code Injection Affected Component| Apache ActiveMQ Classic - Jolokia JMX-HTTP Bridg...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

CVE-2023-46604_ActiveMQ_RCE_Recurrence

Enter activemq/bin, select x64 or x32, and run activemq.bin with administrator privileges. Access admin at port 8161, admin/admin If it cannot be started, check whether the port is occupied and modify activemq.xml in conf. In my machine, the MQTT port was occupied, so I modified it. 2. Start an...

ActiveMQ_putshell-CVE-2016-3088

ActiveMQputshell-CVE-2016-3088- ActiveMQputshell directly obtains webshell Usage： python3 ActiveMQputshell.py -u url...

CVE-2026-41044

CVE-2026-41044 Note: Educational Purposes Only From Advisory to RCA in an Afternoon: How AI Collapses N-Day Analysis A short, honest walkthrough of CVE-2026-41044 in Apache ActiveMQ using the exact pre and post patch code. CVE-2026-41044 was disclosed on April 24, 2026. It's a remote code executi...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit English | Simplified Chinese CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit No outbound network exploit Supports JDK 1.8 runtime; automatically checks if target version is within the vulnerability scope Supports exploiting no-outbound targets using Shiro INI configuration to achieve...

CVE-2022-41678

Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...

apache-activemq-rce-research

Apache ActiveMQ Classic — RCE Research Private research archive for the Apache ActiveMQ Classic Jolokia → addNetworkConnector → xbean/Spring-XML remote-code-execution chain CVE-2026-34197 and its patch-bypass CVE-2026-42588, plus a full auto-research audit of the fixed 6.2.6 release and a...

CVE-2022-41678

CVE-2022-41678: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/api/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J resulting in Remote Code Executio...

CVE-2026-34197-Lab

CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab Overview This repository is a local Docker lab for studying CVE-2026-34197 , an Apache ActiveMQ Classic remote code execution issue reachable through the Jolokia JMX-HTTP API. The lab compares two ActiveMQ Classic instances side by side:...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

CVE-2026-34197

CVE-2026-34197 Apache ActiveMQ Remote Code Execution via Jolokia API Overview • Details...

CVE-2026-34197-payload-Apache-ActiveMQ-

ActiveMQ Jolokia RCE Vulnerability Reproduction Guide This repository provides a remote code execution RCE vulnerability reproduction environment and exploitation script based on the exposed Jolokia API endpoint /api/jolokia/ of Apache ActiveMQ. By invoking the addNetworkConnector operation, it...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...