ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files e.g., a JSP web-shell onto the server. Proof-of-concept tool to check for and exploit the unauthenticated file upload vulnerability CVE-2025-31324 in SAP NetWeaver Visual...

CVE-2023-34212

CVE-2023-34212: Java Deserialization via JNDI Components in Apache NiFi The JndiJmsConnectionFactoryProvider Controller Service along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properti...

CVE-2020-2555

CVE-2020-2555 http://1984-0day.com https://www.youtube.com/watch?v=VzmZTYbm4Zw python CVE-2020-2555.py ip port test.ser...

Jboss_JMXInvokerServlet_Deserialization_RCE

JbossJMXInvokerServletDeserializationRCE Using Burp Suite to Exploit Java Deserialization Vulnerabilities 0x01 Setting Up the Jboss JMXInvokerServlet Deserialization Vulnerability Test Environment: Jboss JMXInvokerServlet Deserialization Vulnerability Vulnerability Principle: JBoss reads the...

ermir

Ermir Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it list/lookup/bind/rebind/unbind. Requirements Ruby v3 or newer. Installation Install Ermir from rubygems.org: $ gem install ermir or clone the repo and build the gem:...

CVE-2026-27172

camel-consul Reproducción de Vulnerabilidad de Deserialización en ConsulRegistry CVE-2026-27172 Este proyecto demuestra una vulnerabilidad de deserialización en Java en el componente camel-consul de Apache Camel ConsulRegistry, registrada como CVE-2026-27172. Pertenece a la misma clase de problem...

CVE-2022-21445

CVE-2022-21445 Exploit - PoC This toolkit generates exploit payloads for CVE-2022-21445, a critical Java deserialization vulnerability affecting Oracle WebLogic Server 12.2.1.x running Oracle ADF Faces. The flaw exists in the RemoteApplicationResourceLoader component and allows an attacker to sen...

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

CVE-2017-3066

CVE-2017-3066 Description Adobe ColdFusion uses message format the Action AMF. The AMF Protocol is a custom binary serialization Protocol. It has two formats: AMF0 and AMF3. Action message consists of headers and bodies. There are several implementations of AMF in different languages. For Java we...

CVE-2026-40858

camel-infinispan Remote Aggregation Repository Unsafe Deserialization Reproducer CVE-2026-40858 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-infinispan component, tracked as CVE-2026-40858. The ProtoStream-based remote aggregation repository serializes ea...

CVE-2020-5902

CVE-2020-5902 BIG-IP RCE Actualización: Uso de reglas de bypass /hsqldb%0a/ para deserialización Java o /hsqld%b /hsqldb; /tmui/login.jsp/..;/hsqldb Redirect 404 / bypass /hsqldb; Redirect 404 / bypass /hsqldb%0a include 'FileETag MTime Size Redirect 404 / Redirect 404 / ' fix:...

CVE-2019-16941

CVE-2019-16941 Proof-of-Concept: The vulnerability requires multiple and relatively improbable conditions in order to get triggered, fact that limits its exploitability. However, it takes little effort and understanding to prepare a payload given the fact that it can result into an arbitrary code...

weblogic_cve-2019-2890

1）Start the XXER tool python xxer.py -H 192.168.17.223 2）Place the xxer PoC into the xx.xml file, replace the serialized data, and inject the xxer PoC; java -jar weblogicxxe.jar xx.xml 3）Use weblogic.py from the java-deserialization-exploit tool to send data to the Weblogic server python...

CVE-2022-26133

CVE-2022-26133 Información Descripción SharedSecretClusterAuthenticator en Atlassian Bitbucket Data Center versiones 5.14.0 y posteriores anteriores a 7.6.14, 7.7.0 y posteriores anteriores a 7.17.6, 7.18.0 y posteriores anteriores a 7.18.4, 7.19.0 y posteriores anteriores a 7.19.4, y 7.20.0...

CVE-2018-2893

CVE-2018-2893 Weblogic CVE-2018-2893 利用 测试环境-Docker Docker 在这里！ https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.md 附注：由于外网有 RMI 远程服务器，很方便弹到 shell；如果在内网，你需要指定自己的 RMI 服务器，不然无法获取到反弹 Shell ！！！ 0x01 生成 payload 0x02 发送 payload Payload:...

CVE-2023-51518

CVE-2023-51518: Deserialización de Java Preautenticada a través de JMX en Apache James La distribución de Apache James anterior a las versiones 3.7.5 y 3.8.1 permite la escalada de privilegios mediante la deserialización preautenticada de JMX. Dado un gadget de deserialización, esto podría ser...

QVIS NVR/DVR - Remote Code Execution

QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization. id: CVE-2021-41419 info: name: QVIS NVR/DVR - Remote Code Execution author: me9187 severity: critical description: | QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java...

JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization

The JMS over HTTP Invocation Layer in JBossMQ, as implemented in HTTPServerILServlet.java in JBoss Application Server AS 4.x and earlier, does not properly restrict the classes that can be deserialized from the raw POST body. This allows remote attackers to execute arbitrary code or cause a denia...

CVE-2026-43865

camel-hazelcast Default-Instance Unsafe Deserialization Reproducer CVE-2026-43865 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-hazelcast component, tracked as CVE-2026-43865. When Camel builds the Hazelcast Config itself — i.e. when no user-supplied...