jdwp-shellifier

JDWP 利用脚本 它是什么？ 此漏洞利用脚本供渗透测试人员针对处于活动状态的 JDWP 服务使用，以获取远程代码执行（Remote Code Execution）能力。 它是如何工作的？ 嗯，其工作方式相当标准，脚本只需要一个 Python 2 解释器： root@kitploit: % python ./jdwp-shellifier.py -h usage: jdwp-shellifier.py -h -t IP -p PORT --break-on JAVAMETHOD --cmd COMMAND Universal exploitation script for JDWP by...

CVE-2026-89046

A flaw was found in zstd-jni. This out-of-bounds read vulnerability in the Zstd.getFrameContentSize function occurs because it fails to validate negative srcPosition arguments. A remote attacker can supply negative offset values, bypassing bounds checks and accessing the native frame-header parse...

splinter

splinter splinter は JVM 分析ツールキットであり、ユーザーが実行時にクラス、メソッド、フィールド、定数プール、バイトコードを表示できるようにします。これは OpenJDK ビルド 22.0.2+9-70 で作成およびテストされました。 splinter とは？ 通常、JVM 用の分析ツールキットと言えば、JNI や JVMTI を使用するものと思われるかもしれませんが、splinter は違います！ splinter は実際には外部ツールであり、現在次の機能を備えています： 実行中のプロセスから HotSpot VMStruct を読み取ることができる Method...

cve-2022-42889-intercept

cve-2022-42889-intercept 低于 Java11版本的需要注意，更高的版本已经取消了Javascript解释器 本次方案针对 Java8 通过 jvm 启动参数 以及 jps pid进行拦截非法参数 quick start root@kitploit: -----------------------load...... cve-2022-42889 check start cve-2022-42889 isdeepmatch org.apache.commons.text.StringSubstitutor md.getReturnType.getActualName...

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-for-Apache-ActiveMQ （PoC）漏洞利用程序，针对 CVE-2025-27533 ，Apache ActiveMQ 中的一个拒绝服务（DoS）漏洞。该工具发送恶意的 OpenWire 数据包，耗尽目标服务器的 JVM 堆内存， 并可能导致 ActiveMQ 服务在端口 61616 上崩溃。 使用 root@kitploit: python CVE-2025-27533Exploit.py --host --port 61616 --total-packets 2000 --buffer-sizes 0x1E00000...

Xjar_tips

Xjartips 简介： root@kitploit: Spring Boot JAR 安全加密运行工具, 同时支持的原生JAR. 基于对JAR包内资源的加密以及拓展ClassLoader来构建的一套程序加密启动, 动态解密运行的方案, 避免源码泄露以及反编译. 功能特性 无代码侵入, 只需要把编译好的JAR包通过工具加密即可. 完全内存解密, 降低源码以及字节码泄露或反编译的风险. 支持所有JDK内置加解密算法. 可选择需要加解密的字节码或其他资源文件. 支持Maven插件, 加密更加便捷. 动态生成Go启动器, 保护密码不泄露. 其中xjar...

MicroStrategy Web 10.4 - Information Disclosure

MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...

CVE-2015-7501

Java反序列化漏洞实验室 此内容与为H2HC杂志第12期撰写的论文相关。完整论文请见：https://www.h2hc.com.br/revista/ 演讲的幻灯片和视频将很快发布。 关于Java（JVM）环境中原生反序列化缺陷基础的概述 Java虚拟机（JVM）中反序列化漏洞的概述 内容 该实验室包含代码示例，帮助你理解反序列化漏洞以及gadget链如何利用它们。其目标是让你更深入地理解，以便你能够开发新的payload和/或更好地设计你的环境。 其中还包含一个易受攻击的测试应用程序（VulnerableHTTPServer.java），可用于测试你的payload。 幻灯片...

cve-2021-44228

这个Ansible playbook为所有用户应用一个全局的'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true'。 这可以缓解清单中主机上所有JVM应用的CVE-2021-44228漏洞。 执行： root@kitploit: ansible-playbook playbook.yml -i inventory...

activemq-stomp: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer them without limit, exhausting the JVM hea...

DEBIAN-CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize . The root cause is a missing validation of negative srcPosition arguments, which bypass bounds checks and propagate into the native frame-header parser, causing out-of-bounds memory...

CVE-2026-89046 zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

EUVD-2026-75635

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

CVE-2026-87824

A flaw was found in zstd-jni. Attackers can exploit this by supplying oversized per-sample lengths to the Zstd.trainFromBufferDirect function, which fails to validate the samples buffer capacity. This allows for reading past buffer boundaries, leading to out-of-bounds memory access and ultimately...

CVE-2026-87825

A flaw was found in zstd-jni. This use-after-free vulnerability occurs because streams and contexts only hold a dictionary's shared lock during the load call, allowing the dictionary to be closed while still being referenced. A remote attacker could exploit this by closing a dictionary after...

log4j-recognizer

log4j-recognizer Una utilidad para buscar log4j en el JVM que se está ejecutando actualmente CVE-2021-44228 Log4Shell. Esto es útil para sistemas que permiten a los plugins incluir sus propios jars. Por lo tanto, puedes detectar si alguien ha incluido log4j en una versión peligrosa. Uso Simplemen...

PT-2026-89525

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...