Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.
☆18Feb 21, 2019Updated 7 years ago
Alternatives and similar repositories for Demo-Exploit-Jackson-RCE
Users that are interested in Demo-Exploit-Jackson-RCE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2020-36188 &&Jackson-databind RCE☆11Jan 11, 2021Updated 5 years ago
- CVE-2020-36184 && Jackson-databind RCE☆15Jan 11, 2021Updated 5 years ago
- ☆19Mar 27, 2020Updated 6 years ago
- jre8u20 gadget☆34May 23, 2021Updated 5 years ago
- PoC for CVE-2021-43557☆23Nov 22, 2021Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞☆37Feb 24, 2020Updated 6 years ago
- GQL Burp Extension☆21Sep 16, 2022Updated 3 years ago
- Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告☆106Dec 13, 2017Updated 8 years ago
- ☆14May 26, 2026Updated 3 months ago
- Jackson nested property filter that performs with almost no overhead☆11Nov 18, 2016Updated 9 years ago
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆136Sep 24, 2020Updated 5 years ago
- 一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。☆56Oct 29, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Experimenting protostuff☆13Mar 5, 2016Updated 10 years ago
- peda like debugger script for windbg/windbgx and mingw-gdb☆11Dec 31, 2021Updated 4 years ago
- CVE-2022-37042 Zimbra Auth Bypass leads to RCE☆28Dec 9, 2022Updated 3 years ago
- ☆15Sep 30, 2020Updated 5 years ago
- Exploiting Jackson deserialization vulnerability with 3 gadgets☆10May 3, 2021Updated 5 years ago
- CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE☆16Mar 11, 2019Updated 7 years ago
- A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)☆19Aug 18, 2023Updated 3 years ago
- Multi-module project that contains Jackson-based "new" Jakarta-RS (nee "JAX-RS" -- ones under `jakarta.ws.rs`) providers for JSON, XML, Y…☆20Aug 16, 2026Updated 2 weeks ago
- XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04☆12Oct 16, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Generate and Permutate Context Aware Dictionaries for Application Testing☆11Aug 16, 2016Updated 10 years ago
- REST API using: Spring Boot + Hibernate + MySQL + Jackson + Retrofit☆10Jan 22, 2016Updated 10 years ago
- GreHack 2021 CodeQL for Java workshop☆73Nov 19, 2021Updated 4 years ago
- PoC code for CVE-2018-9539☆20Nov 11, 2018Updated 7 years ago
- Quarkus extension for the Jackson JQ library☆16Updated this week
- Aspectj load-time weaving scripting agent☆16Mar 5, 2017Updated 9 years ago
- naxsi elasticsearch injector☆17Jan 20, 2014Updated 12 years ago
- The Jackson Laboratory Colony Management System☆14Mar 27, 2020Updated 6 years ago
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆16Feb 13, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14May 29, 2021Updated 5 years ago
- GitHub Action安全工具，可以将Action Secrets还原拿到明文，用于证明Secrets并不是绝对的安全。（测试通过，放心使用，再有问题来issues区锤我...）☆24Sep 12, 2022Updated 3 years ago
- SSRF 绕过 Payload☆15Nov 12, 2020Updated 5 years ago
- CVE-2020-8163 - Remote code execution of user-provided local names in Rails☆60Dec 14, 2022Updated 3 years ago
- 使用axis2+spring+ehcache+druid +jackson搭建的webservice☆14Sep 4, 2014Updated 11 years ago
- Project that contains JMH-based micro-benchmarks to help with optimizations☆17Jun 26, 2026Updated 2 months ago
- DEFCON 2018 Qualification writeups☆13May 14, 2018Updated 8 years ago