JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus 中文 README Описание JNDI-Injection-Exploit-Plus — это инструмент для генерации рабочих JNDI-ссылок и предоставления фоновых сервисов путём запуска RMI-сервера, LDAP-сервера и HTTP-сервера. С помощью этого инструмента вы можете получить JNDI-ссылки и вставить их в свой P...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Descrizione JNDI-Injection-Exploit è uno strumento per generare link JNDI funzionanti e fornire servizi di background avviando server RMI, server LDAP e server HTTP. I server RMI e LDAP sono basati su marshals e ulteriormente...

log4j

💻 -h3x0v3rl0rd- Sfruttare log4j CVE-2021-44228 TryHackMe Solar, Walkthrough root@kitploit: git clone https://github.com/n3rdh4x0r/log4j.git 1. Esegui log4j.py Questo installerà tutte le applicazioni necessarie e avvierà il server LDAP root@kitploit: ifconfig tun0 python3 log4j.py 10.8.227.251 2...

ldap-swak

LDAP Swiss Army Knife Utilità server LDAP multifunzione. Configura rapidamente un server LDAP per scopi di test, proxy MitM per intercettare testo in chiaro o inoltrare credenziali NTLM, oppure sfrutta varie vulnerabilità dei client Java JNDI/LDAP. Autore: Moritz Bechler [email protected]...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Test 1. LDAP-Server und Download-Server für Schadcode-Dateien 1.1 Docker-compose ausführen docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD:...

Log4j-Exploit-CVE-2021-44228

Log4j-Exploit-CVE-2021-44228 Log4Shell Schwachstellen-Testwerkzeug https://log4shell.tools/ Exploit mit bereits enthaltenem Java, um kein Konto erstellen zu müssen usw.. root@kitploit: http://www.mediafire.com/file/bs1spnysc6fbz1a/log4j-shell-poc%25281%2529.zip/file root@kitploit: pip install -r...

docker-log4shell

docker-log4shell App Go semplice / immagine Docker per giocare con la vulnerabilità CVE-2021-44228. Ospita un semplice file server e un server ldap che fornisce tutte le classi ospitate nel file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class root@kitploit: docker build -t log4shell...

l4srs

l4srs Implémentation Rust de Log 4 Shell log 4 j - CVE-2021-44228 pour compiler exécutez cargo +nightly build Cette version vous permet de construire des classes de commandes, de servir dynamiquement un mini meterpreter qui s'exécute dans un thread de l'application Java exploitée, et exécute les...

l4s_poc

l4spoc Log4Shell CVE-2021-44228 Machbarkeitsnachweis Dies ist ein persönliches Projekt, das einen einfachen POC ausführt, der einen LDAP-Server und einen HTTP-Server für den Log4Shell-Exploit hostet. Server Die runservers.py richtet einen abgespeckten Meterpreter-Client ein, der zurück zur...

Odysseus

Odysseus Ein Demo der Log4Shell CVE-2021-44228-Schwachstelle. Bauanleitung Der anfällige Webserver und der schädliche LDAP-Server wurden beide mit JDK 1.8.0181 erstellt und getestet. Webserver der Guten 1. Wechsle in das Verzeichnis goodguys und führe gradlew bootJar aus. 2. Starte den anfälligen...

CVE-2021-44228_dockernize

CVE-2021-44228 Log4Shell Vulnerability Lab Environment Introduzione Questo progetto fornisce un ambiente dockerizzato per esercitarsi in sicurezza e comprendere la critica vulnerabilità Log4j nota come CVE-2021-44228 Log4Shell. Caratteristiche Principali Ambiente di test dockerizzato sicuro...

log4shell-homework9

Compito 9 – Proteggere i sistemi dagli exploit Log4Shell Panoramica Questo progetto dimostra lo sfruttamento e la mitigazione della vulnerabilità Log4Shell CVE-2021-44228 utilizzando un'applicazione web Java containerizzata con Log4j 2.14.1 vulnerabile. La configurazione include anche un server...

freeipa

Server FreeIPA FreeIPA consente agli amministratori Linux di gestire centralmente gli aspetti di identità, autenticazione e controllo degli accessi dei sistemi Linux e UNIX, fornendo strumenti di gestione da riga di comando e basati sul web, semplici da installare e utilizzare. FreeIPA è costruit...

rogue-jndi

Rogue JNDI Ein bösartiger LDAP-Server für JNDI-Injection-Angriffe. Beschreibung Das Projekt enthält LDAP- und HTTP-Server zum Ausnutzen der standardmäßig unsicheren Java-JNDI-API. Um einen Angriff durchzuführen, kannst du diese Server lokal starten und dann eine JNDI-Auflösung auf dem verwundbare...

CVE-2026-61248

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-61241

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-61258

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

EUVD-2026-61343

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

EUVD-2026-61342

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

EUVD-2026-61341

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...