AndBug

AndBug -- 스크립트 가능한 안드로이드 디버거 AndBug는 리버스 엔지니어와 개발자를 대상으로 안드로이드 플랫폼의 Dalvik 가상 머신을 겨냥한 디버거입니다. 이는 안드로이드의 Eclipse 디버깅 플러그인, Java Debug Wire Protocol JDWP 및 Dalvik Debug Monitor DDM와 동일한 인터페이스를 사용하여 사용자가 Dalvik 메서드를 후킹하고, 프로세스 상태를 검사하며, 심지어 변경을 수행할 수 있도록 합니다. Google의 자체 안드로이드 SDK 디버깅 도구와 달리, AndBug는...

Debuggable-App-Exploit

CVE-2024-31317 디버깅 가능 앱 익스플로잇 CVE-2024-31317 Android Zygote Injection을 위한 Python 기반 익스플로잇입니다. hiddenapiblacklistexemptions 설정을 통해 악의적인 zygote 인수를 주입하여 설치된 모든 Android 앱을 디버깅 가능하게 만듭니다. 런타임 후킹을 위한 선택적 Frida gadget 주입을 포함합니다. 개요 이 익스플로잇은 Android Zygote 프로세스의 명령어 주입 취약점을 활용하여 대상 애플리케이션을 debuggable 플래...

jdwp-shellifier

JDWP 익스플로잇 스크립트 무엇인가? 이 익스플로잇 스크립트는 침투 테스터가 활성 JDWP 서비스를 대상으로 원격 코드 실행RCE을 달성하기 위해 사용하도록 만들어졌습니다. 어떻게 동작하나요? 음, 아주 표준적인 방식으로, 이 스크립트는 Python 2 인터프리터만 필요로 합니다: % python ./jdwp-shellifier.py -h usage: jdwp-shellifier.py -h -t IP -p PORT --break-on JAVAMETHOD --cmd COMMAND Universal exploitation...

CaptainHook

Captain Hook 무엇인가요? 이 도구의 목적은 사용자 입력을 추적하여 민감한 메서드java.lang.Runtime.exec, java.sql.Statement.executeQuery, ...에 대한 주입 지점을 찾고, 주입 지점과 메서드 호출 사이에서 발생하는 입력의 변형mutation을 찾는 것입니다. "마크Mark"가 생성되며, 이 마크는 앱의 모든 가능한 사용자 입력에 삽입되어야 합니다. 서로 다른 마크는 알림alert의 출처를 파악하는 데 도움이 됩니다. 모니터링되는 메서드 목록은 CLI에서...

Exploit for Deserialization of Untrusted Data in Google Android

CVE-2024-31317 Debuggable App Exploit A Python-based exploit...

CVE-2025-11538: Binding to an Unrestricted IP Address

A vulnerability exists in Keycloak's server distribution where enabling debug mode --debug insecurely defaults to binding the Java Debug Wire Protocol JDWP port to all network interfaces 0.0.0.0. This exposes the debug port to the local network, allowing an attacker on the same network segment to...

EUVD-2023-53627

Malicious code in bioql PyPI...

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

Threat actors are weaponizing exposed Java Debug Wire Protocol JDWP interfaces to obtain code execution capabilities and deploy cryptocurrency miners on compromised hosts. "The attacker used a modified version of XMRig with a hard-"coded configuration, allowing them to avoid suspicious command-li...

Exposed JDWP Exploited in the Wild: What Happens When Debug Ports Are Left Open

Understanding the risks and impact of deploying dev-mode in production environments...

CVE-2021-20032

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

CVE-2023-49693

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...

CVE-2023-49693

The CVE-2023-49693 entry concerns NETGEAR ProSAFE Network Management System, where Java Debug Wire Protocol (JDWP) is exposed on port 11611 and accessible without authentication, enabling remote arbitrary code execution. Multiple connected records corroborate an unauthenticated access vector via ...

CVE-2023-49693: Missing Authentication for Critical Function

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...

CVE-2021-20032

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

Remote code execution

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

CVE-2021-20032

CVE-2021-20032 affects SonicWall Analytics 2.5 On-Prem (versions up to 2.5.2518 and earlier). The vulnerability stems from a security misconfiguration of the Java Debug Wire Protocol (JDWP) interface, enabling potential remote code execution. Multiple sources (NVD, Red Hat, CVE listings, SonicWal...

CVE-2021-20032

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

SonicWall Analytics 配置错误漏洞

SonicWall Analytics is a high-performance management and reporting engine for the Web from SonicWall, Inc. A misconfiguration vulnerability exists in SonicWall Analytics 2.5 On-Prem due to a security misconfiguration of the Java Debug Wire Protocol JDWP interface, which can be exploited by an...

CVE-2021-20032: Undefined Security Weakness

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol JDWP interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier...

Java Debug Wire Protocol (JDWP) Service Detection (TCP)

TCP based detection of services supporting the Java Debug Wire Protocol JDWP. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...