log4shell-rmi-poc

log4shell-rmi-poc Una prova di concetto della vulnerabilità Log4j CVE-2021-44228 su Java-RMI Usa Log4j 2.5.7 da spring-boot-starter-log4j2 Requisiti: Testato con Java 8 JDK 1.8.025 e Java 11 JDK 11.0.1 Come eseguire il POC 1. Clona il repository: root@kitploit: git clone...

CVE-2021-44228-Apache-Log4j-Rce

Verwendung: 1. RMIServer ausführen 2. Main ausführen...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus README in cinese Descrizione JNDI-Injection-Exploit-Plus è uno strumento per generare link JNDI funzionanti e fornire servizi in background avviando server RMI, LDAP e HTTP. Usando questo strumento puoi ottenere link JNDI che puoi inserire nel tuo POC per testare la...

evil-rmi-server

evil-rmi-server Un server RMI malvagio che può lanciare un comando arbitrario. Può essere utile per CVE-2021-44228 in uno scenario di escalation dei privilegi locale. Compilazione ./gradlew bootJar Esecuzione root@kitploit: Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evi...

cve_2011_3556

CVE-2011-3556 — Prova di Concetto PoC Disclaimer Questo strumento è un'implementazione in Python 3 di una prova di concetto PoC esistente realizzata da mihi per il Metasploit Framework. Prerequisiti Per utilizzare il modulo, segui semplicemente le istruzioni qui sotto: root@kitploit: Clone this...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Descrizione JNDI-Injection-Exploit è uno strumento per generare link JNDI funzionanti e fornire servizi di background avviando server RMI, server LDAP e server HTTP. I server RMI e LDAP sono basati su marshals e ulteriormente...

CVE-2018-3191-Rce-Exploit

CVE-2018-3191-Rce-Exploit Autore: Break Passo 1: java -jar GenPayload.java output SJpayload.bin, Address è l'indirizzo del server RMI Passo 2:java -jar RMISERVER.jar httpaddress, il server RMI ascolta sulla porta 1099 e carica le classi Reverse remote sul server web Passo 3:mettere due file rever...

EUVD-2020-30540

Malware in sbrugna...

EUVD-2017-12325

Malware in sbrugna...

EUVD-2017-18744

Malicious code in bioql PyPI...

Exploit for CVE-2021-22006

It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is CVE-2021-22006. The target product/service is Java-based applications, specifically those using JNDI services. The vulnerability class/vector is RCE Remote Code Execution, and the probable entry points are...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

CVE-2020-9761

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

GHSA-8V4H-J42H-WFHC Deserialization of Untrusted Data in Spring-flex

The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may b...

GHSA-8M35-R25C-QR56 GraniteDS Insecure Deserialization

The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be...

JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability

JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further to link with HTTP server. Using this tool allows you get JNDI links, you ca...

CVE-2021-42392

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Remote code execution

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various atta...

Default configuration

An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called...