Coalfire-Research/java-deserialization-exploits

Stars
586
Rank 76,279 (Top 2 %)
Language
Python
Created over 8 years ago
Updated over 3 years ago

Coalfire-Research/java-deserialization-exploits

Coalfire-Research

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A collection of curated Java Deserialization Exploits

Java Deserialization Exploits

A collection of curated Java Deserialization Exploits

Currently this repo contains exploits for the following vulnerabilities:

Cisco Prime Infrastructure Java Deserialization RCE (CVE-2016-1291)
IBM WebSphere Java Object Deserialization RCE (CVE-2015-7450)
OpenNMS Java Object Deserialization RCE (No CVE ?)
Jenkins CLI RMI Java Deserialization RCE (CVE-2015-8103)
Jenkins Groovy XML RCE (CVE-2016-0792)
Oracle WebLogic Server Java Object Deserialization RCE (CVE-2016-3510)
JBoss Java Deserialization RCE (CVE-2015-7501)

Red-Baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

npk

A mostly-serverless distributed hash cracking platform

Slackor

A Golang implant that uses Slack as a command and control server

iOS-11.1.2-15B202-Jailbreak

iOS 11.1.2 (15B202) Jailbreak

DeathMetal

Red team & penetration testing tools to exploit the capabilities of Intel AMT

sqlinator

Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS

Vampire

Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.

Doozer

Password cracking utility

ERC.Xdbg

An Xdbg Plugin of the ERC Library.

pymetasploit3

Python3 Metasploit automation library

HashBot

IRC bot for cracking hashes

Git-Scrapers

Collect OSINT from git repositories

autorelayx

Automatically perform advanced NTLM hash relay attacks

LambProxy

HTTP Proxy using Amazon Lambda for source IP cycling

IP-sampler

Ping sweep a list of subnets then save a random % sample of the hosts that are up

ERC.Net

A collection of tools for debugging Windows application crashes.

WinAPRS-Exploits

A collection of exploits, shellcode, and tools related to CVE-2022-24702

AnomalousCookie

Find anomalies using AnomalousCookie!

Nmap-Extensions

Extensions to Nmap written for the NSE

AppSec-2014-Presentation

Presentation for Application Hacking 101 at AppSec 2014

paas-cloud-goat

PaaS Cloud Goat is a simulated vulnerable Salesforce application providing hands-on experience with penetration testing of custom Salesforce applications.

cazt

Cloud AuthZ Trainer - A a simulator of cloud-provider responsible REST APIs. It includes a lab manual for getting hands-on practice with how to attack authorization vulnerabilities in a cloud API.

webvulns-db

Webvulns-db scripts

freezeout

Notes on acquiring a domain user list via kerberos