log4shelldetect

log4shelldetect Escanea un archivo o carpeta de forma recursiva en busca de programas Java que puedan ser vulnerables a: CVE-2021-44228 Log4Shell v2.0.x - v2.14.x CVE-2021-45046 v2.15.x CVE-2021-45105 v2.16.x1 inspeccionando las rutas de clase dentro de los archivos. Si solo desea que se impriman...

CVE-2020-26217

描述 XStream 可用于远程代码执行 影响版本 Xstream com.thoughtworks.xstream xstream 1.4.13 如何使用 0 text/plain 0 -1 1 cmd /c ca...

Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)

Summary Security vulnerabilities identified in the third party libraries shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned...

Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)

Summary Security vulnerabilities identified in the third party libraries shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-59901 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions...

Security Bulletin: Due to the use of IBM Semeru Runtime, IBM DataPower Gateway is affected by multiple vulnerabilities

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in IBM Semeru Runtime in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow chec...

CVE-2022-39197-fix_patch

CVE-2022-39197-fixpatch 使用方法 启动 cobaltstrike 时添加参数 -javaagent:fixXss-1.0-SNAPSHOT.jar...

CVE-2016-4463

CVE-2016-4463 Una implementación del exploit CVE-2016-4463. Exploit para Xerces 3.1.3 y anteriores. Pretendía enviar esto a Exploit-DB, pero no tengo una buena aplicación de referencia para probarlo. Java OpenSAML debería ser vulnerable, pero llevará tiempo explorar esto...

dtls-fuzzer

dtls-fuzzer 是一个Java工具，用于对DTLS服务器执行协议状态模糊测试。具体而言，它支持以下功能： 1. 给定一个字母表，它可以自动生成本地DTLS服务器实现的模型； 2. 给定一个测试（输入序列）和一个字母表，它可以在DTLS服务器实现上执行该测试； 3. 它可以运行批量学习任务，涉及多次学习运行。 dtls-fuzzer 使用 TLS-Attackertlsattacker 来生成/解析DTLS消息以及维护状态。 为此，TLS-Attacker 已扩展了对DTLS的支持。 dtls-fuzzer 依赖于 版本 3.0btlsattackerver 的...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0

Summary Multiple vulnerabilities were addressed in IBM Process Mining 2.2.0 Vulnerability Details CVEID:CVE-2026-41710 DESCRIPTION: An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache ...

Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i

Summary IBM Rational Developer for i is affected by cross-site scripting vulnerabilities in DOMPurify CVE-2026-65898, CVE-2026-65900, CVE-2026-65901, CVE-2026-49458, CVE-2026-49459, CVE-2026-49978, CVE-2026-66010, and CVE-2026-75838, a protection mechanism failure vulnerability in DOMPurify...

CVE-2022-26134-Godzilla-MEMSHELL

CVE-2022-26134-Godzilla-MEMSHELL Usage java -jar CVE-2022-26134.jar 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2022-26134.jar pass key 如果内存Shell已经注入成功但哥斯拉无法连接,请在请求配置添加以下协议头或者为哥斯拉配置Burp代理 Connection: close C:\CVE202226134jarjava -jar CVE-2022-26134.jar http://10.10.10.10:8090/ pass key url:...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar ofrece la verificación de la vulnerabilidad en modo de línea de comandos; si la vulnerabilidad existe, devuelve la cadena de caracteres característica. Solo necesita ejecutar el comando: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回:...

ldapsdk

UnboundID LDAP SDK for Java Download the Latest Release of the LDAP SDK Here The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free and open source Java library for communicating with LDAP directory servers. It offers better performance, better ease of use, and mo...

CVE-2021-26295

CVE-2021-26295-POC 利用DNSlog进行CVE-2021-26295的漏洞验证。 使用 poc: 将目标放于 target.txt 后运行python poc.py即可。（Jdk环境需12，否则ysoserial不能正常生成payload） exp: python exp.py https://baidu.com 然后进入命令执行界面（无回显） 仅供学习交流，请勿用于其他用途。...

CVE-2020-12116

CVE-2020-12116 用于利用CVE-2020-12116的概念验证代码：对ManageEngine OpManager进行未认证的任意文件读取。 摘要 OpManager的最新版本包含一个目录遍历漏洞，允许无限制地访问OpManager应用程序中的每个文件。这包括私有SSH密钥、受密码保护的Java密钥库，以及包含密钥库密码、私有证书和后端数据库密码的配置文件。如果配置了LDAP，则可以从"conf/OpManager/ldap.conf"获取域凭据。 漏洞分析 向ManageEngine OpManager应用程序的根目录发送一个未认证的GET请求，默认端口为8060。 GE...

WebSphere-WSIF-gadget

WSIF Gadget para WebSphere CVE-2020-4464 / CVE-2020-4450 Esto se basa en las excelentes entradas de blog de ZDI informe original de @tint0: https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere...

TraditionalJay

TraditionalJay 故意存在漏洞的经典/传统 安全工坊店铺 — 运行在VM 上的Java（EC2、Azure VM或GCP Compute Engine），而非容器。 主要故事：关键VM失陷 — SQL注入 → Log4Shell CVE-2021-44228 → 反向连接至外部C2。 !CAUTION 请勿部署到生产环境。 保持VM的临时性，并将网络限制在实验室内。 为何存在 Jay's Surf Shop覆盖云原生运行时（ECS / ACA / GKE）。TraditionalJay涵盖主机/VM 途径： | Surf Shop| TraditionalJay...

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

CVE-2022-21449-showcase

演示程序，展示CVE-2022-21449 请在JDK 17.0.0下运行 哦对了，这是截图...

XStream-1

master: v-1.4.x: XStream Serialización de Java a XML, y viceversa Binarios Todos los artefactos binarios están empaquetados en el archivo -bin. Incluye los jars de XStream y cualquier otra biblioteca utilizada en tiempo de compilación, o extras opcionales en tiempo de ejecución. Se recomienda el...