OWASPBugBounty

Programa de Bug Bounty de OWASP para Proyectos Introducción Muchos desarrolladores y empresas que buscan implementar seguridad están recurriendo a OWASP para utilizar librerías Defender que puedan implementar para proteger sus aplicaciones críticas. Dado que esto implica una forma de confianza en...

CVE-2026-75516

A flaw was found in the RabbitMQ Java client. A malicious AMQP Advanced Message Queuing Protocol server, or a man-in-the-middle attacker, can modify connection parameters and inject oversized frames. This can cause the client to allocate a large amount of memory, leading to memory exhaustion and...

CVE-2026-69219

A flaw was found in the RabbitMQ Java client library. A malicious AMQP Advanced Message Queuing Protocol peer can exploit this by sending a specially crafted message during the pre-authentication phase. This message can cause the client to allocate an excessively large amount of memory, leading t...

CVE-2026-63337

A flaw was found in the RabbitMQ Java client library. A remote attacker, by intercepting or answering a JsonRpcClient request, could provide a malicious javaReturnType value. This unvalidated input is then used in Class.forName, allowing the attacker to load an arbitrary class already present in...

CVE-2026-61634

A flaw was found in the RabbitMQ Java client library. A malicious or compromised broker can send a method frame larger than the negotiated Advanced Message Queuing Protocol AMQP framemax value. This inconsistent validation causes the client to allocate and decode a protocol-invalid frame, leading...

CVE-2026-13505

A flaw was found in Bouncy Castle for Java FIPS BC-FJA. Sensitive cryptographic key material, intended to be securely erased from memory zeroised upon garbage collection, may persist longer than expected. This occurs because the zeroisation process relies on a deprecated Java finalization...

Decompiler_Tools

Herramientas de Descompilador 0x01 descompilador predeterminado de IDEA Directorio de Mac OS /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib root@kitploit: /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19...

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 is vulnerable to RCE through insecure java deserialization. The exploit attack the transport protocol on port 9300. The deserialization is based on Groovy MethodClosure chain to achive RCE...

GeoServerExploit

GeoServerExploit Una herramienta de explotación de vulnerabilidades para GeoServer CVE-2024-36401/CVE-2024-36404 Este proyecto ha sido desarrollado conjuntamente por @hony y @wh!te?be6ar. Si crees que este proyecto te resulta útil, no olvides darle una ⭐Star como apoyo. ¡Gracias! Ejemplo de uso...

QLinspector

QLinspector Encontrando cadenas gadget de Java/C con CodeQL. Más información en nuestro artículo Instalación Clona el repositorio root@kitploit: $ git clone https://github.com/synacktiv/QLinspector.git Buscar gadgets: root@kitploit: $ codeql database analyze log4j --format=sarif-latest...

cats

CATS 文档可在 https://endava.github.io/cats/ 获取 REST API 模糊测试与负面测试工具。无需编码，几分钟内运行数千个自愈式 API 测试！ 全面 ：测试自动生成，涵盖每个字段和头部 智能 ：测试基于数据类型和约束生成；每个 Fuzzer 根据测试场景有特定期望 高度可配置 ：高度自定义：可过滤特定 Fuzzer、HTTP 响应码、HTTP 方法、请求路径，提供业务上下文等 自愈 ：测试生成后，任何 OpenAPI 规范变更自动识别 易于学习 ：学习曲线平缓，配置和语法直观 快速 ：自动完成测试编写、运行和报告，几分钟内覆盖数千个场景 时间紧迫？查...

ofbiz-CVE-2023-49070-RCE-POC

ofbiz-CVE-2023-49070-RCE-POC Este es un POC de RCE sin autenticación para CVE-2023-49070 que afectó a las aplicaciones Apache OFBiz wget https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar POC de DNS POC de RCE Estos tweets me ayudaron mucho:...

CVE-2026-95848 Moquette fails open when configured authentication or authorization classes cannot load

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to...

traccar

Traccar Resumen Traccar es un sistema de seguimiento GPS de código abierto. Este repositorio contiene un servicio back-end basado en Java. Es compatible con más de 200 protocolos GPS y más de 2000 modelos de dispositivos de seguimiento GPS. Traccar puede utilizarse con cualquier sistema de base d...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2026-18490

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint BrmRMISSLServerSocketFactory.java:95, EP8. An adjacent-network attacker can deliver a crafted...

trivy-java-db

trivy-java-db Resumen trivy-java-db construye una base de datos SQLite a partir de los datos del repositorio maven-index, almacenando ArtifactID, GroupID, Version y sha1 para archivos jar. La base de datos se utiliza en Trivy para descubrir información sobre jars sin GAV en su interior. Intervalo...

Liferay-CE-Portal-Java-Deserialization

Liferay-CE-Portal-Java-Deserialization Este repositorio contiene el PoC de la vulnerabilidad de ejecución remota de código de Liferay CE Portal. Payloads Ya he compartido payloads en el repositorio. Debe encontrar la sintaxis correcta mediante el método de fuerza bruta. Los payloads que comparto...

CVE-2026-75935

A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...

rmiscout

描述 RMIScout 支持对暴露的 Java RMI 接口进行字典和暴力破解攻击，无需实际调用即可安全猜测方法签名。它支持多种 Java RMI 协议、方法调用和漏洞利用。 功能概览 支持多种类型的 Java RMI 服务器： RMI-JRMP（即普通 RMI；通常端口 1099）：远程对象注册服务（rmiregistry） 通过 rmid 的 RMI 激活存根 RMI-IIOP：Java CORBA 编程模型（orbd；通常端口 1050） IIOP 需要使用 JRE 1.8，因为在后续运行时中已弃用。 RMI-SSL 多种操作模式 字典模式： 使用签名列表（见附带的...