ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

ChromSploit-Framework

ChromSploit Framework v3.0 Professional Security Research Platform for Browser Vulnerability Analysis Multi-CVE exploitation chains with advanced obfuscation, intelligent detection, and comprehensive analytics Overview ChromSploit Framework is a cutting-edge educational security research tool...

AMBER-ICI

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

QLinspector

QLinspector Finding Java/C gadget chains with CodeQL. More information in our article Installation Clone the repo $ git clone https://github.com/synacktiv/QLinspector.git Search for gadgets: $ codeql database analyze log4j --format=sarif-latest --output=log4j.sarif --search-path=./QLinspector/...

blind-ssrf-chains

Introduction What is Server Side Request Forgery SSRF? Server Side Request Forgery occurs when you can coerce a server to make arbitrary requests on your behalf. As the requests are being made by the server, it may be possible to access internal resources due to where the server is positioned in...

SEOPress < 7.9 - Authentication Bypass

The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present. id:...

CVE-2025-24813

CVE-2025-24813 Exploit Toolkit This is an advanced and automated exploitation tool for CVE-2025-24813 , targeting Apache Tomcat servers vulnerable to insecure session deserialization. 🔍 Features Multi-target scanning from file or single URL --targets / --url Automatic gadget chain testing...

CVE-2015-7501

Lab for Java Deserialization Vulnerabilities This content is related to the paper written for the 12th edition of H2HC magazine. See full paper in: https://www.h2hc.com.br/revista/ Slides and video of the talk will be available soon. Um overview sobre as bases das falhas de desserialização nativa...

CVE-2020-0022

CVE-2020-0022 Many thanks to Insinuator for their amazing blog post and code! Results All the steps mentioned in the insinuator post have been completed, and more. These are a lot of steps to put in a README.md file, so feel free to check out the post from Insinuator mentioned above. The exploit ...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

CVE-2012-1889

CVE-2012-1889 This repository contains the files I used to learn about exploiting the CVE-2012-1889 vulnerability. 1.txt First module info 2.txt Second module info c2javascript.c Used to convert C-form shellcode into JavaScript-form shellcode cve-2012-1889.html Exploit web page...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC This repo contains a proof-of-concept PoC RCE exploit targeting the PlayStation 4 on firmware 6.20 leveraging CVE-2018-4441. The exploit first establishes an arbitrary read/write primitive as well as an arbitrary object address leak in wkexploit.js. It will then...

php_filter_chain_generator

PHP 필터 체인 생성기 PHP 필터 체인을 생성하는 CLI로, PHP에서 require 또는 include에 전달되는 파라미터를 완전히 제어할 수 있다면 파일을 업로드하지 않고 RCE를 얻을 수 있습니다! 사용법 도움말 $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN --rawbase64 RAWBASE64 PHP filter chain generator. optional arguments: -h, --he...

pyvex

PyVEX PyVEX is Python bindings for the VEX IR. Project Links Project repository: https://github.com/angr/pyvex Documentation: https://api.angr.io/projects/pyvex/en/latest/ Installing PyVEX PyVEX can be pip-installed: pip install pyvex Using PyVEX import pyvex import archinfo translate an AMD64...

ysoserial.net

안전하지 않은 .NET 객체 역직렬화를 악용하는 페이로드를 생성하기 위한 개념 증명 도구입니다. 설명 ysoserial.net은 일반적인 .NET 라이브러리에서 발견된 유틸리티 및 속성 지향 프로그래밍 "가젯 체인"의 모음으로, 적절한 조건에서 객체의 안전하지 않은 역직렬화를 수행하는 .NET 애플리케이션을 악용할 수 있습니다. 메인 드라이버 프로그램은 사용자가 지정한 명령을 받아 사용자가 지정한 가젯 체인으로 감싼 다음, 이 객체들을 stdout으로 직렬화합니다. 필요한 가젯이 클래스패스에 있는 애플리케이션이 이 데이터를...

ysoserial

ysoserial Инструмент для Proof-of-Concept генерации полезных нагрузок, эксплуатирующих небезопасную десериализацию объектов Java. Описание Изначально выпущен в рамках доклада AppSecCali 2015 "Marshalling Pickles: как десериализация объектов испортит ваш день" с гаджет-цепочками для Apache Commons...

react2shellexploitvisualized

React2Shell CVE-2025-55182 Visualization An interactive educational visualization explaining the React2Shell vulnerability - a critical CVSS 10.0 remote code execution flaw in React Server Components. What This Is A 5-step narrated walkthrough that explains: 1. Traditional SSR - How server-side...

sploit

sploit Sploit은 바이너리 분석 및 익스플로잇에 도움이 되는 Go 패키지입니다. Sploit 개발의 동기는 보다 일반적인 Python 익스플로잇 개발 프레임워크와 견줄 만한 기능을 갖춘 잘 설계된 API를 제공하면서 Go 프로그래밍 언어의 장점을 활용하는 데 있습니다. 뛰어난 크로스 컴파일러 지원, 고루틴, 강력한 암호화 라이브러리, 정적 타이핑은 Go를 선택하는 몇 가지 이유에 불과합니다. 이 프로젝트는 pwntools 및 다른 멋진 프로젝트에서 영감을 받았습니다. 아직 개발 초기 단계입니다. 이 프로젝트는 셸코딩,...

php_filter_chains_oracle_exploit_for_CVE-2023-6199

PHP filter chains: file read from error-based oracle. Updated Script to exploit CVE-2023-6199 A CLI to exploit parameters affected by the file read caused by the the error-based oracle of PHP filter chains. It can be used to leak the content of a local file when passed to vulnerable functions, su...