r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

Bughound

¿Qué es Bughound? Bughound es una herramienta de análisis estático de código abierto que analiza tu código y envía los resultados a Elasticsearch y Kibana para obtener información útil sobre las posibles vulnerabilidades en tu código. Bughound tiene su propia imagen Docker de Elasticsearch y Kiba...

log4j2

log4j2 this is a log4j2 jmi attack demo, inspired by link...

threadtear

Threadtear Threadtear es una herramienta multifuncional de desofuscación para Java. Próximamente se añadirá soporte para aplicaciones Android actualmente trabajando en un conversor de dalvik a Java. Adecuada para un análisis de código más sencillo sin preocuparse demasiado por la ofuscación...

bluepot

bluepot Bluepot es un honeypot de Bluetooth escrito en Java, que se ejecuta en Linux. Bluepot fue un proyecto universitario de tercer año que intentaba implementar un honeypot de Bluetooth completamente funcional. Un software diseñado para aceptar y almacenar cualquier malware que se le envíe e...

zaproxy

...

whitesource__curekit_CVE-2022-23082_1-1-3

CureKit - WhiteSource Cure Encoding Package CureKit is a security library mostly used by the WhiteSource Cure self-fixing product. WhiteSource Cure is an innovative solution that automatically generates remediation suggestions for vulnerabilities identified by detection tools in proprietary code...

x-stream__xstream_CVE-2020-26217_1-4-14-java77

master: v-1.4.x: XStream Java to XML Serialization, and back again Binaries All binary artifacts are bundled in the -bin archive. It includes the XStream jars and any other library used at build time, or optional runtime extras. MXParser is recommend for use as it will greatly improve the...

traccar

Traccar Overview Traccar is an open source GPS tracking system. This repository contains Java-based back-end service. It supports more than 200 GPS protocols and more than 2000 models of GPS tracking devices. Traccar can be used with any major SQL database system. It also provides easy to use RES...

cats

...

x-stream__xstream_CVE-2021-21345_1-4-15

master: v-1.4.x: XStream Java to XML Serialization, and back again Binaries All binary artifacts are bundled in the -bin archive. It includes the XStream jars and any other library used at build time, or optional runtime extras. Xpp3 is recommend for use as it will greatly improve the performance...

java-html-sanitizer

OWASP Java HTML Sanitizer A fast and easy to configure HTML Sanitizer written in Java which lets you include HTML authored by third-parties in your web application while protecting against XSS. The existing dependency is on JSR 305. The other jars are only needed by the test suite. The JSR 305...

CVE-2024-21006_jar

CVE-2024-21006jar Exploit code reference: https://github.com/momika233/CVE-2024-21006 Here, the source code has been compiled into a JAR package for ease of use. The lib directory contains dependency files. If you wish to modify the source code, you can compile it yourself. Usage root@kitploit:...

cloudrasp-log4j2

CloudArmor · Runtime Application Self-Protection Module - Log4j2 Version 简体中文 This project is a local version from CloudArmor specifically built for defending Log4j2 CVE-2021-44228 . No network connection is required to run this project. Please DO TESTING before deploying it to production...

mimosa

Mimosa Description Systems rebooting, database dumping, used to be called SecureCoding, now given to juniors, and finally completely rewritten. This is an opensource core; it excludes administrative controls. Features Lots of challenges References to modern pop culture Getting Started Method 1:Ja...

CVE-2012-4431

Welcome to Apache Tomcat! What Is It? The Apache Tomcat® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are...

TLS-Attacker

TLS-Attacker TLS-Attacker es un framework basado en Java para analizar bibliotecas TLS. Es capaz de enviar mensajes de protocolo arbitrarios en un orden arbitrario al par TLS, y definir sus modificaciones utilizando una interfaz proporcionada. Esto le brinda al desarrollador la oportunidad de...

cve-2020-2555

CVE-2020-2555 Running Main.java will generate payload.ser in the current directory. This payload can be sent to the target server using the t3 protocol...

MemoryShellHunter

MemoryShellHunter Java Agent memory horse scanner combined with Call Graph modus About MemoryShellHunter es una herramienta Scanner/Killer de memory horse que combina la construcción dinámica de Call Graph. Soporta detección iniciada por Agent y Attach, compensando el problema de que las...

log4j-CVE-2021-44228

Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduction Reproducing the problem in k8s env Setting up k8s env with the vulnerability Possible Solutions KubeArmor Security Policy Not allowing any execs from the JVM/Java Default Deny based rules KubeArmor Visibility/Observability into t...