log4shell-homework9

Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...

ldap-swak

LDAP Swiss Army Knife Utilidad de servidor LDAP multifunción. Configura rápidamente un servidor LDAP para fines de prueba, proxies MitM para interceptar texto plano o reenviar credenciales NTLM, o explota varias vulnerabilidades de clientes Java JNDI/LDAP. Autor: Moritz Bechler...

freeipa

Servidor FreeIPA FreeIPA permite a los administradores de Linux gestionar de forma centralizada los aspectos de identidad, autenticación y control de acceso de los sistemas Linux y UNIX, ofreciendo herramientas de gestión por línea de comandos y web, fáciles de instalar y usar. FreeIPA está...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus English README JNDI-Injection-Exploit-Plus改写自welk1n大佬的JNDI-Injection-Exploit项目。 详细说明 是一款JNDI注入利用工具，可以生成JNDI链接并启动后端相关服务。 根据JNDI的三种触发点，提供3种JNDI利用方式 远程Reference链 （3种） 本地Reference链 （4种） 反序列化链（75种） P.S. 具体利用链名称及依赖见 表格 使用方法 root@kitploit: $ java -jar...

rogue-jndi

Rogue JNDI Un servidor LDAP malicioso para ataques de inyección JNDI. Descripción El proyecto contiene servidores LDAP y HTTP para explotar la API Java JNDI insegura por defecto. Para realizar un ataque, puedes iniciar estos servidores localmente y luego provocar una resolución JNDI en el cliente...

log4j

💻 -h3x0v3rl0rd- exploiting log4j CVE-2021-44228 TryHackMe Solar, Walkthrough root@kitploit: git clone https://github.com/n3rdh4x0r/log4j.git 1. run log4j.py This whill install all the nessasary applications and start the LDAP server root@kitploit: ifconfig tun0 python3 log4j.py 10.8.227.251 2...

Log4j-Exploit-CVE-2021-44228

Log4j-Exploit-CVE-2021-44228 Herramienta de prueba de vulnerabilidad Log4Shell https://log4shell.tools/ Exploit con Java ya incluido, para evitar crear cuenta, etc. root@kitploit: http://www.mediafire.com/file/bs1spnysc6fbz1a/log4j-shell-poc%25281%2529.zip/file root@kitploit: pip install -r...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Prueba 1. Servidor LDAP y servidor de descarga del archivo malicioso 1.1 Ejecución de docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han"...

JNDI-Injection-Exploit

介绍 JNDI注入利用工具，生成JNDI链接并启动后端相关服务，可用于Fastjson、Jackson等相关漏洞的验证。 使用 可执行程序为jar包，在命令行中运行以下命令： root@kitploit: $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C command -A address 其中: -C - 远程class文件中要执行的命令。 （可选项 , 默认命令是mac下打开计算器，即"open /Applications/Calculator.app"） -A - 服务器地址，可以是IP地址或者域名。 （可选项...

CVE-2021-44228_dockernize

Entorno de laboratorio para la vulnerabilidad CVE-2021-44228 Log4Shell Introducción Este proyecto proporciona un entorno dockerizado para practicar y comprender de forma segura la crítica vulnerabilidad de Log4j conocida como CVE-2021-44228 Log4Shell. Características clave Entorno de pruebas...

CVE-2026-83066

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-83063

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-83059

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83061

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83062

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83060

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83057

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

EUVD-2026-79394

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...

EUVD-2026-79390

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...