Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...

DeliberatelyVulnerableWebApp

Deliberately Vulnerable Web Application Struts 2 This project is a Java web application using the Struts 2 framework. It is built with Maven and can be run using the Jetty server. Prerequisites Java Development Kit JDK 8 or higher Apache Maven 3.6.0 or higher Getting Started Build the project mvn...

cve-2025-24813-poc

CVE-2025-24813 Apache Tomcat RCE Exploit PoC This repository contains a proof-of-concept exploit for CVE-2025-24813, a Java deserialization vulnerability in Apache Tomcat. Based on absholi7ly/POC-CVE-2025-24813/. Prerequisites Docker Setup 1. Install dependencies: uv venv source .venv/bin/activat...

jlangch__venice_CVE-2022-36007_1-10-16

Venice Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. Overview Venice is a Lisp dialect born from the need for a safe, sandboxed, general-purpose language. It shares with Lisp the code-as-data philosophy and a powerful macro system. Venice is mainly a...

CVE-2026-14441

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

JDSer-ngng

JDSer-ngng A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library. Why? This release fixes the bug in the other implementation in JDSer-ng which didn't actually allow modification of the request. Also extends it further, allowing proper use of...

EUVD-2026-86470

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

CVE-2026-14441 Logic flaw in SANnav Java cache key handling object comparison handling

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

CVE-2026-14441

A logic flaw in the Java cache key handling of Brocade SANnav allows for improper identifier resolution when processing specific user account structures. This vulnerability exists in SANnav versions before 3.0.1a . The issue has been remediated by updating the internal comparison routines to ensu...

readable-thrift

Readable Thrift Readable Thrift facilita el trabajo con mensajes binarios del protocolo Thrift, convirtiéndolos a y desde un formato legible para humanos. Esto hace que el análisis manual y la manipulación de mensajes Thrift en formato binario sean tan sencillos como trabajar con protocolos de...

shouganaiyo-loader

shouganaiyo-loader: Entrada forzada para agentes de Java shouganaiyo-loader es una herramienta de línea de comandos de Node.js multiplataforma basada en Frida que obliga a los procesos Java a cargar un agente Java/JVMTI independientemente de si la JVM ha deshabilitado o no la API de adjunción de...

GadgetProbe

Description You just found a Java deserialization bug, you ran all your ysoserial payloads, and.... you got nothing. What now? How can you debug or build a gadget chain if you're totally blind? Introducing GadgetProbe, a tool that shines a light on remote classpaths and raises bug severity for al...

GadgetProbe

Descripción Acabas de encontrar un bug de deserialización de Java, ejecutaste todos tus payloads de ysoserial y... no obtuviste nada. ¿Y ahora qué? ¿Cómo puedes depurar o construir una cadena de gadgets si estás completamente a ciegas? Te presentamos GadgetProbe, una herramienta que arroja luz...

VulnerableGWTApp

Vulnerable GWT Web Application This is a version of the StockWatcher example application described in the GWT getting-started guide that has been modified to use the GWT "enhanced classes" feature, making it vulnerable to a Java deserialization attack. It should only be used for testing detection...

org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification

A flaw was found in Bouncy Castle for Java. During the RSA PKCS1 verification process, the last two hash bytes are incorrectly skipped when a NULL-omitted path is utilized. This vulnerability could allow an attacker to bypass cryptographic signature verification, potentially leading to the...

org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names

A flaw was found in Bouncy Castle for Java. A remote, unauthenticated attacker could exploit a quadratic-time escaping vulnerability when stringifying X.500 distinguished names. This could lead to a Denial of Service DoS due to excessive resource consumption...

CaptainHook

Captain Hook What is it ? The purpose of this tool is to trace user inputs, in order to find injection points into sensitive methods like java.lang.Runtime.exec, java.sql.Statement.executeQuery, ... as well as the mutations on these inputs between the injection point and the method call. "Marks"...

struts2-tool

Herramienta de Detección y Explotación de Struts2 s2tool Una herramienta de detección y explotación de vulnerabilidades Struts2 S2-045 / S2-046 CVE-2017-5638 implementada puramente en Java. El módulo de detección cubre las dos vulnerabilidades S2-045 / S2-046, el módulo de explotación proporciona...

yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

burpFakeIP

burpFakeIP 下载使用：Releases 2021/09/24 1. 修复M00nBack反馈的一个bug。 2. 添加了AutoXFF的开关,并将AutoXFF默认设置不开启,如需让插件给每个请求头添加一个随机的XFF请求头可在右键菜单中选择ON开启 2021/05/21 使用Java重构，增加了issue中提到的功能特性，新增给每个请求自动添加XFF头以及随机IP的功能，具体可见右键菜单AutoXFF,默认情况下自动添加的xff头为X-Forwarded-For,值为生成的随机IP,均可自定义。 2020/04/25 优化代码，新增9种请求头。 四个小功能 伪造指定ip...