CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner Plugin de escaneo pasivo de burpsuite basado en la detección de la vulnerabilidad CVE-2025-55182, usando JDK 17 Uso del plugin: Escaneo predeterminado del historial / escaneo activo con clic derecho, al detectar una vulnerabilidad se dirige automáticamente al módulo...

-CVE-2017-10271-

-CVE-2017-10271- CVE-2017-10271Java Deserialization Vulnerability Java Deserialization Vulnerability Exploitation Tool V1.0 A tool for checking vulnerabilities related to Java deserialization, developed using JDK 1.8. The software requires JDK 1.8 or above to be installed...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: root@kitploit: docke...

CVE-2021-44228

CVE-2021-44228 Log4Shell Proof of Concept CVE-2021-44228 Make sure to use Java 8 JDK. Java 8 Download Images Credits Casey Dunham - Java Reverse Shell kozmer - Initial PoC Legal The author of this script does NOT take any responsibility of how this piece of code is used! This was created solely...

Log4j

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.020 for better results . Exploit-db - https://www.exploit-db.com/exploits/50592...

spring4shell_victim

spring4shellvictim Intentionally vulnerable Spring app to test CVE-2022-22965 For more information: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Usage Build The following code will quickly build a vulnerable Docker image using the following components: JDK...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

CVE-2022-21449-showcase

Demo program to showcase CVE-2022-21449 Pls run with JDK 17.0.0 O yeah here is screenshot...

CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics root@kitploit: org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK...

GeoServer-Tools-CVE-2024-36401

GeoServer-Tools-CVE-2024-36401 CVE-2024-36401 Graphical Exploitation Tool, supports exploitation across various JDK versions, as well as echo and memory shell implementation. Affected versions: GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 Recently during HW Red/Blue team...

spring-core-rce

Spring Core RCE/CVE-2022-22965 Affected scope: Spring framework and derivative frameworks with JDK=9 Reference article This script is for learning purposes only. Any legal liability arising from its use for other purposes is solely the responsibility of the user, not the author. 1. Installation...

CVE-2022-22965

Análisis de CVE-2022-22965 Spring4Shell Descripción de la vulnerabilidad Spring4Shell es el nombre de un CVE que existe en Spring Core del Spring Framework. Con una puntuación CVSS 3.x de 9.8, la vulnerabilidad está clasificada en el nivel de riesgo más alto crítico. Esta vulnerabilidad permite a...

Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Following Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE The Circulating coding poc: The exploit has been uploaded asexp.py The official Spring patch is also in active production Patch Links in...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

log4j-cve-2021-44228

Log4j CVE-2021-44228 and CVE-2021-45046 Requisites Use a vulnerable JDK, for instance JDK 1.8.0181 Usage Malicious server The malicious server deploys the following endpoints: 1389 LDAP server 1099 RMI server 8081 HTTP server root@kitploit: ./gradlew :malicious-server:bootRun Vulnerable applicati...

spring-shell-vuln

spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...

CVE-2020-14645

CVE-2020-14645 Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData Project depends on https://github.com/5up3rc/weblogiccmd Demo Require 1. JDK Version JDK6u211/7u201/8u191 2. Weblogic Version 12.2.1.4.0 Do not use illegally!!!!!!!! Reference 1...

AutoGenerateXalanPayload

AutoGenerateXalanPayload Introduction This is an automated payload generation tool for the JDK Xalan overflow vulnerability CVE-2022-34169. It was created because different JDK versions require different overflow payloads. Running this tool with different JDK versions will generate different XSLT...

CVE-2024-21006

1、Nothing much to say, it's just an LDAP exploitation. 2、Please check the LDAP service request log. 3、The target version needs Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0. And a low-version JDK is required. 4、Use JNDIExploit-1.4-SNAPSHOT.jar to start the LDAP service...

apache__jspwiki_CVE-2022-46907_2-11-3

Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...