Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.
☆18Feb 21, 2019Updated 7 years ago
Alternatives and similar repositories for Demo-Exploit-Jackson-RCE
Users that are interested in Demo-Exploit-Jackson-RCE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2020-36188 &&Jackson-databind RCE☆11Jan 11, 2021Updated 5 years ago
- CVE-2020-36184 && Jackson-databind RCE☆15Jan 11, 2021Updated 5 years ago
- ☆16Jun 22, 2022Updated 3 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆124Jan 9, 2018Updated 8 years ago
- ☆19Mar 27, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- jre8u20 gadget☆34May 23, 2021Updated 4 years ago
- CVE-2020-9547：FasterXML/jackson-databind 远程代码执行漏洞☆23Mar 2, 2020Updated 6 years ago
- PoC for CVE-2021-43557☆22Nov 22, 2021Updated 4 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞☆37Feb 24, 2020Updated 6 years ago
- Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告☆107Dec 13, 2017Updated 8 years ago
- A sample web application using Node.js, Express and Angular that is vulnerable to common security vulnerabilities.☆10Jun 15, 2023Updated 2 years ago
- A Golang implementation of the Jackson-Smile data format☆12Jan 28, 2026Updated 2 months ago
- Deserialization support for Scala case classes, including proper handling of default values.☆11Apr 5, 2016Updated 10 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆136Sep 24, 2020Updated 5 years ago
- Jackson nested property filter that performs with almost no overhead☆11Nov 18, 2016Updated 9 years ago
- A comparison of JSON frameworks: JSON Binding, Jackson, Gson, Boon☆14Oct 30, 2017Updated 8 years ago
- 一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。☆56Oct 29, 2019Updated 6 years ago
- Sencha Cmd 5 + Sencha ExtJS 5 + Maven integration in Java web application☆18Mar 15, 2015Updated 11 years ago
- CVE-2022-37042 Zimbra Auth Bypass leads to RCE☆30Dec 9, 2022Updated 3 years ago
- 通过censys搜索引擎中的ssl证书信息进行资产探测及子域名收集☆11Apr 15, 2019Updated 6 years ago
- Exploiting Jackson deserialization vulnerability with 3 gadgets☆10May 3, 2021Updated 4 years ago
- A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)☆19Aug 18, 2023Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Multi-module project that contains Jackson-based "new" Jakarta-RS (nee "JAX-RS" -- ones under `jakarta.ws.rs`) providers for JSON, XML, Y…☆17Mar 28, 2026Updated last week
- CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE☆16Mar 11, 2019Updated 7 years ago
- The PoC files for ethereum client's JSON-RPC DNS Rebinding☆35Jan 22, 2018Updated 8 years ago
- XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04☆13Oct 16, 2018Updated 7 years ago
- Scaleset Geo is a GeoJSON compatible framework for working with simple feature data.☆16Sep 22, 2016Updated 9 years ago
- Sample application wiring ExtJS with Spring MVC 3.0☆23Jan 11, 2011Updated 15 years ago
- Experimenting protostuff☆13Mar 5, 2016Updated 10 years ago
- Amazon Web Services (AWS) Microsoft Threat Modeling Tool Template☆16Aug 19, 2021Updated 4 years ago
- ☆27Dec 5, 2019Updated 6 years ago
- Wordpress hosting with auto-scaling on Cloudways • AdFully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
- GreHack 2021 CodeQL for Java workshop☆73Nov 19, 2021Updated 4 years ago
- ☆14May 29, 2021Updated 4 years ago
- Aspectj load-time weaving scripting agent☆16Mar 5, 2017Updated 9 years ago
- POC for CVE-2023-29360☆12Aug 31, 2024Updated last year
- a golang implementation of gauntlt☆12Oct 25, 2018Updated 7 years ago
- GitHub Action安全工具，可以将Action Secrets还原拿到明文，用于证明Secrets并不是绝对的安全。（测试通过，放心使用，再有问题来issues区锤我...）☆24Sep 12, 2022Updated 3 years ago
- ☆11May 10, 2022Updated 3 years ago