62030 matches found
CVE-2012-4431
Welcome to Apache Tomcat! What Is It? The Apache Tomcatยฎ software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are...
cve-2020-2555
CVE-2020-2555 Running Main.java will generate payload.ser in the current directory. This payload can be sent to the target server using the t3 protocol...
MemoryShellHunter
MemoryShellHunter Java Agent memory horse scanner combined with Call Graph modus About MemoryShellHunter es una herramienta Scanner/Killer de memory horse que combina la construcciรณn dinรกmica de Call Graph. Soporta detecciรณn iniciada por Agent y Attach, compensando el problema de que las...
log4j-CVE-2021-44228
Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduction Reproducing the problem in k8s env Setting up k8s env with the vulnerability Possible Solutions KubeArmor Security Policy Not allowing any execs from the JVM/Java Default Deny based rules KubeArmor Visibility/Observability into t...
CVE-2020-5902
CVE-2020-5902 BIG-IP RCE Update Use /hsqldb%0a/ Bypass Rules For Java Deserialization or /hsqld%b /hsqldb; /tmui/login.jsp/..;/hsqldb Redirect 404 / bypass /hsqldb; Redirect 404 / bypass /hsqldb%0a include 'FileETag MTime Size Redirect 404 / Redirect 404 / ' fix:...
irule-cve-2022-22965
irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...
Odysseus
Odysseus A demo of the Log4Shell CVE-2021-44228 vulnerability. Build Instructions The vulnerable webserver and malicious LDAP server were both built and tested on JDK 1.8.0181. Good Guys Web Server 1. Inside goodguys, run gradlew bootJar 2. Run vulnerable webserver using java -jar...
CVE-2024-21683-RCE
CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...
CVE-Exploit
Twitter: @0xAbbarhSF 1ใCVE-2020-2551 CVE-2020-2551 poc exploit python example keys: GIOP corba How use python3 CVE-2020-2551.py -u http://192.168.26.79:7001 cat urls.txt|sort -u|xargs -I % python3 CVE-2020-2551.py -u % cat xxx.html|grep -Eo 'https?://^ /+'|sort -u|xargs -I % python3...
CVE-2023-25157-and-CVE-2023-25158
GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 This repository contains a detailed description and replication steps of the SQL Injection vulnerabilities found in the GeoServer platform and GeoTools Library. The vulnerability has been assigned the identifier CVE-2023-25157 for...
log4j-samples
log4j-samples Samples of log4j library versions to help log4j scanners / detectors including our own log4j-detector improve their accuracy for detecting CVE-2021-45046 and CVE-2021-44228. The samples include shaded jars, uber jars, spring-boot executable jars, jars inside jars, exploded jars, etc...
BetterBackdoor
BetterBackdoor Una puerta trasera es una herramienta utilizada para obtener acceso remoto a una mรกquina. Normalmente, las utilidades de puerta trasera como NetCat tienen dos funciones principales: canalizar la entrada remota a cmd o bash y devolver la respuesta. Esto es รบtil, pero tambiรฉn es...
CVE-2023-51518
CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James Apache James distribution prior to release 3.7.5 and 3.8.1 allow privilege escalation via JMX pre-authentication deserialization. Given a deserialization gadget, this could be leveraged as part of an exploit chain that...
jvmxray
JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...
java-cve-2021-29425-tika-xxe
java-cve-2021-29425-tika-xxe...
Log4ShellAuditor
๐ค AUTO AUDIT Isolated demonstration testbed of an autonomous reflexive executor agent Go/Java ะ ัััะบะธะน ๐ท๐บ โข English ๐ฌ๐ง โข ไธญๆ ๐จ๐ณ โข Espaรฑol ๐ช๐ธ โข Deutsch ๐ฉ๐ช โข Italiano ๐ฎ๐น โข ุงูุนุฑุจูุฉ ๐ธ๐ฆ ๐งญ Overview !NOTE AUTO AUDIT is a software suite demonstrating a 100% autonomous closed loop Sense-Think-Act for...
svja
svja The RDPS Super Vulnerable Java Application is just that -- a super vulnerable java application created for the benefit of all to see a variety of common, often "complex", vulnerabilities. This software was created as part of the Roniel and DaRon Podcast Show...
CVE-2025-30065
CVE-2025-30065 Research Notes This repository is kept intentionally small and readable. It is intended for authorized security research, local validation, and defensive study of CVE-2025-30065 in Apache Parquet / Avro schema handling. The README focuses on repository hygiene, build reproducibilit...
godofwar
GodOfWar - Malicious Java WAR builder A command-line tool to generate war payloads for penetration testing / red teaming purposes, written in ruby. . hhh hhhhhhh hhhhhhhh hhhhhhhh+ hhhhhhhh' hhhhhhhh. hhhhhhhhh ..-- hhhhhhhhh -sh/.. +. hhhhhhhhh: /+/:-/+ss- hhhhhhhhhh: /MMMss:. hhhhhhhhhh: .MMMMM...
JavaUnserializeExploits
JavaUnserializeExploits Scripts de Python y peticiรณn HTTP referenciados en la entrada de blog ยฟQuรฉ tienen en comรบn WebLogic, WebSphere, JBoss, Jenkins, OpenNMS y su aplicaciรณn? Esta vulnerabilidad en http://foxglovesecurity.com...