Osinton

Osinton Osinton is an open-source OSINT Open Source Intelligence tool designed to perform structured investigations on individuals using publicly available information. The project allows users to search, correlate, and analyze digital footprints such as names, usernames, email addresses, and pho...

JarHunter

JarHunter – Advanced JAR Analysis & Extraction Tool JarHunter is a tool designed to explore, search and extract specific classes from large JAR files quickly and efficiently. Instead of manually browsing thousands of classes, JarHunter allows you to search keywords across the entire JAR file and...

Log4Shell-CVE-2021-44228-Demo

CVE-2021–44228 Demo 1. CVE-2021–44228 Introduction At the end of 2021, the biggest news in the cybersecurity world was the Log4j vulnerability, numbered CVE-2021-44228, also known as Log4Shell. In the CVSS vulnerability scoring system, it was rated the most severe 10 out of 10 , and it is also...

JEP290Test

JEP290Test Bypass JEP290 Test...

JavaDeRe

Project Introduction Mainly used for base64-encoding class files while constructing Java deserialization echo payloads, and for decoding base64 strings back into class files to view attack payloads during incident response. PS: mainly because I'm lazy Usage Examples Run evil.java normally...

SMS4_Decrypt

SMS4Decrypt 0x01 Introducción El algoritmo SMS4 es un algoritmo de cifrado utilizado en el estándar de red inalámbrica WAPI, ampliamente usado en China. Es un algoritmo de cifrado por bloques con estructura Feistel no balanceada e iterativa de 32 rondas, cuya longitud de clave y de bloque son amb...

SHIRO-721

Vulnerabilidad RCE de Padding Oracle en SHIRO-721 RememberMe 0x00 Introducción: El cookie rememberMe de la cookie está cifrado mediante el modo AES-128-CBC, lo que lo hace susceptible a ataques de oracle de relleno padding oracle. Un atacante puede utilizar un cookie RememberMe válido como prefij...

jvmtiAgentLoad-Exploit

Ejecución de código arbitrario mediante jvmtiAgentLoad Descripción: Herramientas y código para generar un JAR malicioso para explotar jvmtiAgentLoad Uso: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Objetivo Linux El siguiente comando genera un JAR mal.jar que...

Java-Servlets-Shell

Java Servlets Shell Backdoor de Java Servlets inspirado en https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Nota : Los WAR contienen código Java compilado en lugar de páginas JSP para poder utilizarse en entornos que bloquean o no compilan archivos JSP...

Security Bulletin: IBM Verify Identity Governance Container affected by multiple vulnerabilities

Summary Multiple security vulnerabilities affecting dependent components used by IBM Verify Identity Governance Container have been addressed in the latest product update. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION: Java SE is vulnerable to a denial of service, caused by an easily...

CVE-2021-26295-Apache-OFBiz

CVE-2021-26295-Apache-OFBiz CVE-2021-26295 Apache OFBiz RMI deserialization POC You need to place ysoserial.jar in the directory, and you cannot use a high version of Java...

passfault

Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

VUL4J-59

jsoup: Java HTML parser that makes sense of real-world HTML soup. jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

quarantyne

=== ESTE PROYECTO ESTÁ ARCHIVADO === Quarantyne · Firewall web moderno 🛃 Seguridad web automatizada simplificada TL;DR Quarantyne es un proxy inverso que protege aplicaciones web y APIs de comportamientos fraudulentos, mal uso, bots y ciberataques en tiempo real. Requisitos Presentación...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

WLT3Serial

WLT3Serial Native Java-based deserialization exploit for WebLogic T3 and T3S listeners as outlined HERE. Requires third-party dependencies ysoserial and wlthint3client. Advantages/Disadvantages compared to JavaUnserializeExploits weblogic.py and loubia Advantages: Handles T3/T3S communication...

sAINT

Discontinued I decided to discontinue the development of this tool to concentrate my efforts on others one projects. Please fell free to clone this repository and continue the development of this tool. sAINT sAINT is a Spyware Generator for Windows systems written in Java. Disclaimer :computer:...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...