check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE

CVE-2021-41773 – Apache HTTP Server 2.4.49 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this cod...

CVE-2017-5638-Apache-Struts2

This repository does not have a README...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...

struts-pwn_CVE-2017-9805

struts-pwn - CVE-2017-9805 Exploit An exploit for Apache Struts CVE-2017-9805 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Check if the vulnerability exists against a list of URLs. python struts-pwn.py...

CVE-2024-36104

CVE-2024-36104 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are solely the responsibility of the user. The tool author does not assume any responsibility. version = 18.12.14...

cybersecurity-struts2

Apache Struts2 Vulnerability | CVE-2017-5638 | Version 2.5 Disclaimer This is meant for educational, and research purposes only. I do not authorize or endorse any illegal or unethical use of this projects contents or information Instructions To run the webapp: java -jar ms-cybersecurity-1.jar use...

community-scripts

Community Scripts A collection of ZAP scripts provided by the community, i.e. you lot : The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace. !CAUTION While we do review all scripts to ensure they don't do anything obviously malicious, you...

CVE-2022-42889

CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.10 which is vulnerable to CVE-2022-42889. Running the application Replace DemoApplication.java nc command by your host ip address. Listening with netcat: $ nc -l -p 30000 Build and run docker...

synaptic-sentinel

SYNAPTIC Sentinel The vibe-coding security sentinel. An Apache-2.0 agentic security toolkit for projects where most of the code is written by AI. Five deterministic scouts catch the syntactic problems; a Brain Layer BYOK Anthropic decides what really matters and how to fix it — all inside the IDE...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK + Apache XML...

CVE-Lab

CVE-2023-46604 Lab This lab guides on exploiting vulnerabilities of CVE-2023-46604 Acknowledgements Apache ActiveMQ CVE-2023-46604 Environment This lab requires the installation of 2 virtual machines. One Kali Linux machine version 2023.4 and one Ubuntu machine version 22.04.3 LTS. You can downlo...

cybersecurity_portfolio

Portfolio. Gleb Usoltsev Second-year student, Institute of Computer Science and Cybersecurity, Peter the Great St. Petersburg Polytechnic University, field of study 10.03.01 «Information Security». As part of the educational introductory practice at Positive Technologies JSC, two practical cases...

shiro-cve-2020-17523

Apache Shiro Two Postures Authentication Bypass Analysis CVE-2020-17523 0x01 Vulnerability Description Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro's easy-to-understand API, you can...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner shodan...

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token Full walkthrough https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack These are just some scripts which you can use to detect and exploit the Apache Struts Vulnerability CVE-2017-5638 There is a MassScanner and Exploiter, You can use scanner to Mass Scan a list of URLs and then exploit them by Exploiter. The Exploiter will run arbitrary...

CVE-2024-53677-S2-067-thread

Disclaimer Do not use the related technologies in this article for illegal testing. Any direct or indirect consequences and losses caused by the dissemination or use of the information or tools provided in this article are solely the responsibility of the user. All adverse consequences arising fr...