NCSC-NL/spring4shell external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

NCSC-NL/spring4shell

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/NCSC-NL/spring4shell)

Close

NCSC-NL / spring4shellView on GitHubMore

• External links
• Readme badge

Operational information regarding the Spring4Shell vulnerability in the Spring Core Framework

☆175Apr 20, 2023Updated 3 years ago

Alternatives and similar repositories for spring4shell

Users that are interested in spring4shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• krisnova / boopkit

  View on GitHub
  Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
  ☆1,671Oct 19, 2023Updated 2 years ago
• s0md3v / Smap

  View on GitHub
  a drop-in replacement for Nmap powered by shodan.io
  ☆3,270Apr 13, 2026Updated 2 months ago
• trufflesecurity / trufflehog

  View on GitHub
  Find, verify, and analyze leaked credentials
  ☆26,947Updated this week
• jfrog / jfrog-spring-tools

  View on GitHub
  ☆79Apr 6, 2022Updated 4 years ago
• as0ler / vecna

  View on GitHub
  Automatic tool to find arbitrary Intent that gets reflected back vulnerabilities on Android apps.
  ☆12Nov 15, 2022Updated 3 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• ethicalhackingplayground / crlfmap

  View on GitHub
  CRLFMap is a tool to find HTTP Splitting vulnerabilities
  ☆25Jul 31, 2020Updated 5 years ago
• shriyanss / Log-Venom

  View on GitHub
  Inject different payloads in the log of your target
  ☆18Apr 3, 2022Updated 4 years ago
• slyd0g / SharpCryptUnprotectData

  View on GitHub
  ☆15Feb 9, 2022Updated 4 years ago
• P4x1s / CVE-2024-23897

  View on GitHub
  CVE-2024-23897 jenkins-cli
  ☆15Jan 27, 2024Updated 2 years ago
• pry0cc / pscan

  View on GitHub
  A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.
  ☆17Jul 1, 2020Updated 6 years ago
• HACK-THE-WORLD / FuckAnywhere

  View on GitHub
  FuckAnywhere - 这是一个BurpSuite Jython（Python）插件，用于在HTTP请求中随处插入你想要进行测试的代码。
  ☆52Mar 19, 2026Updated 3 months ago
• cygenta / CVE-2020-3452

  View on GitHub
  ☆26Jun 2, 2022Updated 4 years ago
• RiccardoAncarani / DirSync-Poc

  View on GitHub
  A PoC that uses the DirSync protocol to poll Active Directory for changes
  ☆13Aug 16, 2020Updated 5 years ago
• ninoseki / fanger

  View on GitHub
  An npm package to defang and refang IoC
  ☆13Jun 16, 2026Updated 3 weeks ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• shubham-rooter / Xss-automation

  View on GitHub
  ☆11Apr 8, 2024Updated 2 years ago
• eCrimeLabs / cratos-fastapi

  View on GitHub
  The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…
  ☆13Jun 28, 2026Updated last week
• nirsarkar / vscan

  View on GitHub
  ☆37Jun 23, 2022Updated 4 years ago
• romanrounkle / burp_extensions

  View on GitHub
  Burp Suite Extensions
  ☆13Oct 19, 2021Updated 4 years ago
• justakazh / CVE-2022-1388

  View on GitHub
  Tool for CVE-2022-1388
  ☆13May 13, 2022Updated 4 years ago
• warp682 / SubdomainEnumeration

  View on GitHub
  All about subdomain enumeration
  ☆16Feb 5, 2019Updated 7 years ago
• boku7 / OffensiveRust

  View on GitHub
  Rust Weaponization for Red Team Engagements.
  ☆16Oct 9, 2021Updated 4 years ago
• west-wind / Spring4Shell-Detection

  View on GitHub
  Lazy SPL to detect Spring4Shell exploitation
  ☆12Jul 8, 2022Updated 4 years ago
• post-cyberlabs / CVE-Advisory

  View on GitHub
  Publishing advisories for CVEs found by POST Cyberforce
  ☆13Jan 7, 2025Updated last year
• End-to-end encrypted email - Proton Mail • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
• SentineLabs / log4j_response

  View on GitHub
  ☆15Dec 22, 2021Updated 4 years ago
• LeakIX / l9fuzz

  View on GitHub
  Help fuzz various protocols and waits for ping backs Integrates LDAP server and JNDI payload
  ☆11Dec 27, 2021Updated 4 years ago
• 2igosha / sunburst_dga

  View on GitHub
  ☆22Dec 22, 2020Updated 5 years ago
• smokeme / ProxyNotShell

  View on GitHub
  ☆19Oct 2, 2022Updated 3 years ago
• jackrichardzon / s4p0

  View on GitHub
  ☆14Jul 13, 2020Updated 5 years ago
• MISP / misp-grafana

  View on GitHub
  A real-time Grafana dashboard using MISP ZeroMQ message queue and InfluxDB
  ☆19Mar 15, 2024Updated 2 years ago
• 1ultimat3 / tld-scan

  View on GitHub
  Top level domain scanner in Go
  ☆30Sep 24, 2023Updated 2 years ago
• klaammer / AbuseCH-to-MISP

  View on GitHub
  Import AbuseCH IOC Feeds into MISP
  ☆12Feb 17, 2021Updated 5 years ago
• NCSC-NL / log4shell

  View on GitHub
  Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
  ☆1,885Jun 15, 2022Updated 4 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• RandomRhythm / YARA_Rules_Util

  View on GitHub
  YARA duplicate rule detection and removal. YARA rule index creation. YARA rule file merger.
  ☆10Jan 19, 2026Updated 5 months ago
• momika233 / Oracle-E-Business_Login

  View on GitHub
  ☆17May 21, 2022Updated 4 years ago
• jbaines-r7 / staystaystay

  View on GitHub
  Proof of Concept for CVE-2021-1585: Cisco ASA Device Manager RCE
  ☆13Aug 15, 2022Updated 3 years ago
• blackhatethicalhacking / malicious-pdf

  View on GitHub
  💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
  ☆33May 1, 2022Updated 4 years ago
• kagancapar / CVE-2022-29072

  View on GitHub
  7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Hel…
  ☆670Apr 22, 2022Updated 4 years ago
• dinosn / CVE-2022-22963

  View on GitHub
  CVE-2022-22963 PoC
  ☆115Mar 30, 2022Updated 4 years ago
• jfmaes / Red-Route53-Interactive

  View on GitHub
  ☆19Aug 26, 2020Updated 5 years ago