Lucene search
+L

815 matches found

Kitploit
Kitploit
added 2026/09/17 6:27 p.m.7 views

log4shell-homework9

作业 9 – 保护系统免受 Log4Shell 漏洞攻击 概述 本项目演示了 Log4Shell 漏洞(CVE-2021-44228)的利用与缓解,使用了一个包含易受攻击的 Log4j 2.14.1 的 Dockerized Java Web 应用。该设置还包含一个模拟的恶意 LDAP 服务器,用于演示 JNDI 注入攻击路径。 在利用之后,系统通过升级 Log4j、验证输入以及应用 MITRE D3FEND 和 ATT&CK 建议进行了加固。 文件夹结构 root@kitploit: log4shell-homework9/ ├── docker-compose.yml ├──...

10CVSS7.7AI score0.99999EPSS
SaveExploits371
Kitploit
Kitploit
added 2026/09/17 6:24 p.m.12 views

ldap-swak

LDAP Swiss Army Knife Utilidad de servidor LDAP multifunción. Configura rápidamente un servidor LDAP para fines de prueba, proxies MitM para interceptar texto plano o reenviar credenciales NTLM, o explota varias vulnerabilidades de clientes Java JNDI/LDAP. Autor: Moritz Bechler...

8.3CVSS7.2AI score0.07156EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/17 5:45 p.m.12 views

freeipa

Servidor FreeIPA FreeIPA permite a los administradores de Linux gestionar de forma centralizada los aspectos de identidad, autenticación y control de acceso de los sistemas Linux y UNIX, ofreciendo herramientas de gestión por línea de comandos y web, fáciles de instalar y usar. FreeIPA está...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 2:04 p.m.7 views

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus English README JNDI-Injection-Exploit-Plus改写自welk1n大佬的JNDI-Injection-Exploit项目。 详细说明 是一款JNDI注入利用工具,可以生成JNDI链接并启动后端相关服务。 根据JNDI的三种触发点,提供3种JNDI利用方式 远程Reference链 (3种) 本地Reference链 (4种) 反序列化链(75种) P.S. 具体利用链名称及依赖见 表格 使用方法 root@kitploit: $ java -jar...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 1:45 a.m.9 views

rogue-jndi

Rogue JNDI Un servidor LDAP malicioso para ataques de inyección JNDI. Descripción El proyecto contiene servidores LDAP y HTTP para explotar la API Java JNDI insegura por defecto. Para realizar un ataque, puedes iniciar estos servidores localmente y luego provocar una resolución JNDI en el cliente...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/17 1:03 a.m.10 views

log4j

💻 -h3x0v3rl0rd- exploiting log4j CVE-2021-44228 TryHackMe Solar, Walkthrough root@kitploit: git clone https://github.com/n3rdh4x0r/log4j.git 1. run log4j.py This whill install all the nessasary applications and start the LDAP server root@kitploit: ifconfig tun0 python3 log4j.py 10.8.227.251 2...

10CVSS7.5AI score0.99999EPSS
SaveExploits371
Kitploit
Kitploit
added 2026/09/17 12:52 a.m.4 views

Log4j-Exploit-CVE-2021-44228

Log4j-Exploit-CVE-2021-44228 Herramienta de prueba de vulnerabilidad Log4Shell https://log4shell.tools/ Exploit con Java ya incluido, para evitar crear cuenta, etc. root@kitploit: http://www.mediafire.com/file/bs1spnysc6fbz1a/log4j-shell-poc%25281%2529.zip/file root@kitploit: pip install -r...

10CVSS7.7AI score0.99999EPSS
SaveExploits371
Kitploit
Kitploit
added 2026/09/16 8:36 p.m.7 views

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test 测试 1. LDAP服务器与恶意文件下载服务器 1.1 运行Docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN: "dc=bumbing,dc=xyz" ports: -...

10CVSS7.7AI score0.99999EPSS
SaveExploits371
Kitploit
Kitploit
added 2026/09/16 7:41 p.m.14 views

JNDI-Injection-Exploit

介绍 JNDI注入利用工具,生成JNDI链接并启动后端相关服务,可用于Fastjson、Jackson等相关漏洞的验证。 使用 可执行程序为jar包,在命令行中运行以下命令: root@kitploit: $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C command -A address 其中: -C - 远程class文件中要执行的命令。 (可选项 , 默认命令是mac下打开计算器,即"open /Applications/Calculator.app") -A - 服务器地址,可以是IP地址或者域名。 (可选项...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 8:49 p.m.8 views

CVE-2021-44228_dockernize

CVE-2021-44228 Log4Shell 漏洞实验室环境 简介 本项目提供了一个 Docker 化环境,用于安全地实践和理解关键 Log4j 漏洞 CVE-2021-44228 Log4Shell。 主要特性 安全的 Docker 化测试环境 自定义 Payload 测试能力 包含攻击者的 LDAP 服务器和易受攻击的 Java 应用程序 快速开始 root@kitploit: docker compose up --build Payload 测试 1. 您可以在 /vulnerable/Makefile 的测试部分修改 payload 2. 默认 payload 使用...

10CVSS7.8AI score0.99999EPSS
SaveExploits371
NVD
NVD
added 2026/09/15 8:18 p.m.7 views

CVE-2026-83066

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

9.8CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:18 p.m.5 views

CVE-2026-83063

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle...

7.2CVSS0.00367EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:18 p.m.5 views

CVE-2026-83061

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

9.8CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:18 p.m.4 views

CVE-2026-83062

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

9.8CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:18 p.m.6 views

CVE-2026-83059

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

10CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:18 p.m.6 views

CVE-2026-83060

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

9.8CVSS0.00483EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:18 p.m.6 views

CVE-2026-83057

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

9.9CVSS0.00479EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 8:03 p.m.5 views

EUVD-2026-79394

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

9.8CVSS5.6AI score0.00483EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 8:03 p.m.10 views

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...

9.8CVSS5.6AI score0.00483EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 8:03 p.m.5 views

EUVD-2026-79390

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

9.8CVSS5.6AI score0.00483EPSS
SaveExploits0References1
Rows per page
Query Builder