30 matches found
log4j-docker
Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images root@kitploit: cd...
CVE-2021-44228_PoC
POC for CVE-2021-44228 This python script was created while I was working on the TryHackMe room for Log4j. While this was created with default variables for this room, I used argparse to make the script versatile for a GET request. All necessary varaibles can be changed with different options, se...
CVE-2021-44228_Example
CVE-2021-44228Example Run each of the 3 sections in a spearate tab/console marshalsec LDAP server https://github.com/chilliwebs/marshalsec Forked from https://github.com/mbechler/marshalsec root@kitploit: docker build -t marshalsec marshalsec/. docker run -it --rm -p 1389:1389...
CVE-2020-8840
CVE-2020-8840 Environment root@kitploit: jdk 8u161 windows10 1903 Procedure root@kitploit: 1.Create a java file named Exploit.java with code you wanna run in it & compile it 2.Create a http server using python or other tools at the same dir of class file 3.Create a ldap server using marshalsec:...
CVE-2021-44228-Log4j-PoC-RCE
Apache Log4j CVE-2021-44228 GK7 PoC Passaggi 1. Compilare Log4jRCE.java e spostare il file .class su un server web es. PHP locale 1. cd src/main/java 2. javac Log4jRCE.java 3. Spostare il file .class su un server web oppure avviare localmente un PHP, ad esempio: php -S 127.0.0.1:8888 2. Avviare i...
marshalsec-jar
marshalsec-jar परीक्षण के लिए फ़ाइल की आवश्यकता थी।...
CVE-2021-44228-Apache-Log4j
CVE-2021-44228 Apache Log4j Esecuzione remota di codice Versioni interessate: tutte le versioni dalla 2.0-beta9 alla 2.12.1 e dalla 2.13.0 alla 2.15.0 Avvisi / bollettini di sicurezza collegati a Log4Shell CVE-2021-44228 Utilizzo: 1. Scarica il progetto, compila InjectClazz.java root@kitploit:...
Log4Shell-Minecraft-Server
Java Unmarshaller Security - Turning your data into code execu...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An aut...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228: Brief Description Apache L...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
vuln4japi A vulnerable Java based REST API for demonstrating C...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell POC CVE-2021-44228 The scope of this repository i...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell POC CVE-2021-44228 The scope of this repository i...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell POC CVE-2021-44228 The scope of this repository i...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
PoC exploit for CVE-2021-44228, a remote code execution vulnerab...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Apache Log4j CVE-2021-44228 GK7 PoC Pasos 1. Compilar Log...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
POC for CVE-2021-44228 This python script was created while I...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j2-CVE-2021-44228-revshell Usage For reverse...
Apache Log4j2 2.14.1 Remote Code Execution
Exploit Title: Apache Log4j 2 - Remote Code Execution RCE Date: 11/12/2021 Exploit Authors: kozmer, z9fr, svmorris Vendor Homepage: https://logging.apache.org/log4j/2.x/ Software Link: https://github.com/apache/logging-log4j2 Version: versions 2.0-beta-9 and 2.14.1. Tested on: Linux CVE:...