chipicopwn

chipicopwn Bootloader exploit for Google Nest Hub 2nd Gen elaine requirements Google Nest Hub 2nd Gen Raspberry Pi Pico Powered USB hub or USB Y cable pico-sdk see Getting Started guide for installation instructions supported version factory firmware 2020/12 - U-Boot 2019.01-gbfc19012ea-dirty Dec...

spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-gateway/tree/master.svg?style=svg"CircleCI",...

log4j2-CVE-2021-45105

Sample Log4j2 vulnerable application CVE-2021-45105 Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: Import the project in Java IDE as a maven project...

log4j-vulnerability

Log4Shell CVE-2021-44228 is a zero-day vulnerability in Log4j Log4J Vulnerability Discovered: 24th November 2021 Patched: 6th December 2021 Attack Demo Click below for youtube video Sample application This sample application is spring boot application, and is using log4j as a logging framework, a...

android-pentest-tool

Android pentest tool designed for kali linux javaFX + Spring boot + bash scripts make all routine steps in one click Update Version 1.0 released! Build mvn clean package Run java -jar target/android-pentest-tool.jar TODO: add installation steps add features list more screenshots bug fixing add...

CVE-2024-22262

Spring CVE-2024-22262 Proof of Concept This repo contains a Development Container environment and Spring application of the correct version specifically to explore this CVE. Setup Instructions Clone the repo to your machine and use Docker and your favorite IDE. OR Use GitPod online with...

CVE-2021-44228-poc

Aplicación vulnerable de muestra Log4Shell CVE-2021-44228 Esta es una aplicación vulnerable casi copia/similar a https://github.com/christophetd/log4shell-vulnerable-app Las principales diferencias son el uso de maven en lugar de gradle, y el uso de rogue-jndi. Este repositorio contiene una...

log4shell-docker-lab

Laboratorio docker Log4Shell para CVE-2021-44228 Los componentes Este laboratorio docker utiliza tres componentes: La aplicación vulnerable spring-boot Un servidor HTTP que aloja archivos .class utilizados para la ejecución remota de código Un servidor de referencia LDAP que redirige consultas LD...

attestos

attestos Experimental Linux boot-attestation image and evidence harness for testing what an anti-cheat vendor could verify instead of relying on a distribution-name allowlist. The mechanism, the threat model, and the vendor specification live in plunder707/attested-gaming. This repository is the...

Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

Spring Cloud Netflix Hystrix Dashboard prior to version 2.2.10 is susceptible to remote code execution. Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view...

Spring Boot Actuator Logview Directory Traversal

spring-boot-actuator-logview before version 0.2.13 contains a directory traversal vulnerability in libraries that adds a simple logfile viewer as a spring boot actuator endpoint maven package "eu.hinsch:spring-boot-actuator-logview". id: CVE-2021-21234 info: name: Spring Boot Actuator Logview...

virt-firmware

Herramientas para volúmenes de firmware ovmf / armvirt Esta es una pequeña colección de herramientas para imágenes de firmware edk2. Permiten decodificar e imprimir el contenido de volúmenes de firmware. Los almacenes de variables OVMFVARS.fd se pueden modificar, por ejemplo para inscribir...

CVE-2024-56426

SM-G985F / Exynos9830 Bootrom exploit !CAUTION The current key bundle and generated files are fusing-capable. Once a device has been fused, the eFuse change is irreversible and the device must continue to use boot images and key material that match the fused key. Using these files or flows is at...

log4j2-hack-springboot

log4j2-hack-springboot...

spring-boot-cve-2022-22965

= Demostración de sobrescritura de versión de Spring Framework Este repositorio muestra cómo puedes sobrescribir la versión de Spring Framework de una aplicación basada en Spring Boot 2.4. Spring Boot 2.4.x está https://spring.io/projects/spring-bootsupportfuera del soporte OSS, la última versión...

log4j-lookups-vulnerability

log4j-lookups-vulnerability The project based on spring-boot,and the code reveals how Log4j2 Vulnerability CVE-2021-44228 works. The solution for CVE-2021-44228 is on the linked url https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot...

BootHoleFix

Boot Hole Fix Este script corregirá el error BootHole identificado en CVE-2020-25632 y/o CVE-2021-20233. El 29 de julio de 2020, Microsoft publicó el aviso de seguridad 200011 que describe una nueva vulnerabilidad relacionada con Secure Boot. Los dispositivos que confían en la Autoridad de...

CVE-2021-44228-docker-example

CVE-2021-44228-docker-example Una simple demostración de CVE-2021-44228 para transferir datos desde un servidor vulnerable a un servicio web controlado por un atacante. Todos los componentes implicados se ejecutan mediante Docker. Componentes vulnerable-server Este es un servidor Java estándar qu...

log4j-spring-vuln-poc

POC de log4j Spring vulnerable Este es un POC para un backend simple de inicio de Spring Boot con Maven que incluye una versión vulnerable de log4j para CVE-2021-44228 Spring Boot inicializado con https://start.spring.io. comandos ./mvnw spring-boot:run: inicia el servidor ./mvnw dependency:tree:...

CVE-2025-3052

🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...