Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.
☆18Feb 21, 2019Updated 7 years ago
Alternatives and similar repositories for Demo-Exploit-Jackson-RCE
Users that are interested in Demo-Exploit-Jackson-RCE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2020-36188 &&Jackson-databind RCE☆11Jan 11, 2021Updated 5 years ago
- ☆19Mar 27, 2020Updated 6 years ago
- jre8u20 gadget☆34May 23, 2021Updated 5 years ago
- CVE-2019-12384 漏洞测试环境☆21Nov 16, 2022Updated 3 years ago
- CVE-2020-9547:FasterXML/jackson-databind 远程代码执行漏洞☆23Mar 2, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PoC for CVE-2021-43557☆23Nov 22, 2021Updated 4 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- CVE-2020-8840:FasterXML/jackson-databind 远程代码执行漏洞☆37Feb 24, 2020Updated 6 years ago
- GQL Burp Extension☆21Sep 16, 2022Updated 4 years ago
- A sample web application using Node.js, Express and Angular that is vulnerable to common security vulnerabilities.☆10Jun 15, 2023Updated 3 years ago
- Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告☆106Dec 13, 2017Updated 8 years ago
- A Golang implementation of the Jackson-Smile data format☆12Jan 28, 2026Updated 7 months ago
- ☆14May 26, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Jackson nested property filter that performs with almost no overhead☆11Nov 18, 2016Updated 9 years ago
- Deserialization support for Scala case classes, including proper handling of default values.☆11Apr 5, 2016Updated 10 years ago
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆134Sep 24, 2020Updated 5 years ago
- 一些结合第三方组件的Fastjson POC,在1.2.48以后版本中陆续被添加至黑名单。☆56Oct 29, 2019Updated 6 years ago
- Experimenting protostuff☆13Mar 5, 2016Updated 10 years ago
- A comparison of JSON frameworks: JSON Binding, Jackson, Gson, Boon☆15Oct 30, 2017Updated 8 years ago
- peda like debugger script for windbg/windbgx and mingw-gdb☆11Dec 31, 2021Updated 4 years ago
- CVE-2022-37042 Zimbra Auth Bypass leads to RCE☆28Dec 9, 2022Updated 3 years ago
- anything I find interesting regarding reverse engineering☆12May 7, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Exploiting Jackson deserialization vulnerability with 3 gadgets☆10May 3, 2021Updated 5 years ago
- CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE☆16Mar 11, 2019Updated 7 years ago
- A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)☆19Aug 18, 2023Updated 3 years ago
- Multi-module project that contains Jackson-based "new" Jakarta-RS (nee "JAX-RS" -- ones under `jakarta.ws.rs`) providers for JSON, XML, Y…☆20Sep 1, 2026Updated 2 weeks ago
- couchdb remote command exec.☆14Mar 27, 2018Updated 8 years ago
- XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04☆12Oct 16, 2018Updated 7 years ago
- Amazon Web Services (AWS) Microsoft Threat Modeling Tool Template☆16Aug 19, 2021Updated 5 years ago
- GreHack 2021 CodeQL for Java workshop☆73Nov 19, 2021Updated 4 years ago
- PoC code for CVE-2018-9539☆20Nov 11, 2018Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Quarkus extension for the Jackson JQ library☆16Updated this week
- ☆27Dec 5, 2019Updated 6 years ago
- A fairly simple music player for Mac OSX☆14Feb 26, 2025Updated last year
- naxsi elasticsearch injector☆17Jan 20, 2014Updated 12 years ago
- Easily use Hashids with Spring Boot☆15Mar 31, 2023Updated 3 years ago
- The Jackson Laboratory Colony Management System☆14Mar 27, 2020Updated 6 years ago
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆16Feb 13, 2017Updated 9 years ago