Vm4J

Vm4J 用于检测 VMware 产品 log4j 漏洞的工具。 工作原理 首先启动一个 JNDIExploit 服务器。 启动本工具并将配置设置为正确的选项。 发送 payload。 截图 支持 VMware HCX VMware vCenter VMware Workspace One（即将添加） VMware NSX VMware Horizon VMware vRealize Operations Manager 注意 1. 本项目使用 Visual Studio 2022 和 .NET Framework 4.5。 2. 调试模式下，本工具将代理设置为...

JYso

JYso 可以同时当做 ysoserial 与 JNDIExploit 使用的工具，同时具备多种JNDI高版本、WAF、RASP的Bypass功能 中文文档 | English 🚀 上手指南 📢 请务必花一点时间阅读此文档，有助于你快速熟悉JYso！ 🧐 使用文档Wiki。 ✔ 下载最新版本的Releases。 👍 特点 GUI启动，傻瓜式操作 JNDI 账号密码启动 JNDI 路由隐藏或加密 JNDI 高版本Bypass 自定义修改内存马的路径、密码、验证的HTTP头与值 内存马支持无文件落地Agent打入 内存马写入 JRE 或环境变量来隐藏 序列化数据加脏数据...

CVE-2024-21006

1、没什么好说的就是一个ldap利用。 2、请检查ldap服务请求日志。 3、目标版本需要在Oracle WebLogic Server 为 12.2.1.4.0 和 14.1.1.0.0。并且需要在低版本jdk。 4、使用JNDIExploit-1.4-SNAPSHOT.jar开启ldap服务。...

JNDI-Exploit-1.2-log4shell

JNDI-Exploit-1.2-log4shell 详情 : CVE-2021-44228 用法 : root@kitploit: ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip 本地 IP 地址 -l, --ldapPort LDAP 绑定端口（默认：1389） -p, --httpPort HTTP 绑定端口（默认：8080） -u, --usage 显示用法（默认：false） -h, --help 显示此帮助...

log4jScan

log4jScan escáner simple en Python para verificar si tu red es vulnerable a CVE-2021-44228 uso : root@kitploit: git clone https://github.com/sinakeshmiri/log4jScan.git java -jar JNDIExploit-1.2-SNAPSHOT.jar -i $YOURPRIVATEIP -p 8888 sudo masscan -p 80,443 192.168.0.0/16 hosts.txt /bin/python...

CVE-2021-2109_poc

weblogicCVE-2021-2109poc weblogic CVE-2021-2109批量验证poc 使用方法： 首先在另一个服务器上下载JNDIExploit.jar并运行java -jar JNDIExploit.jar -i ip 然后将需要检测的ip放在urls.txt中，在运行该脚本即可...

h2database-rce-poc

H2 Console RCE Exploit Toolkit Vulnerability exploitation scr...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell Security Lab — nginx + Coraza WAF Mục đích giáo...

CVE-2022-41272

An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS of SAP NetWeaver Process Integration PI - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment O...

Exploit for Cross-site Scripting in Helpsystems Cobalt_Strike

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-3919...

WhiteHSBG JNDIExploit Path Traversal Vulnerability

WhiteHSBG JNDIExploit is a tool for JNDI injection exploitation, heavily referencing the code of the Rogue JNDI project, supporting direct in-memory shell implantation, and integrating common ways to bypass higher versions of the JDK, suitable for use with automation tools. A path traversal...

Open redirect

An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS of SAP NetWeaver Process Integration PI - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4ShellCVE-2021-44228 Demo !demo-scenariosimages/demo-...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This repository is a proof-of-concept PoC exploit for CVE-2021-44228, a vulnerability in the Log4j logging library. The exploit targets the Log4j 2 library, which is a popular logging framework for Java applications. The exploit uses the JNDI Java Naming and Directory Interface protocol to inject...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell...

Exploit for Path Traversal in Apache Http_Server

It is an exploit module for Apache Log4j. The target product/ser...

SpringBootVulExploit

This repository contains a collection of Spring Boot vulnerability exploit checklists, including information on how to exploit various vulnerabilities in Spring Boot applications. The repository includes several subdirectories, each containing a specific exploit: 1...