A malicious LDAP server for JNDI injection attacks
☆76Nov 15, 2024Updated last year
Alternatives and similar repositories for rogue-jndi
Users that are interested in rogue-jndi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities☆447Sep 7, 2022Updated 4 years ago
- RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets fro…☆108Oct 10, 2020Updated 6 years ago
- ☆23Oct 18, 2022Updated 4 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆664Feb 21, 2024Updated 2 years ago
- ☆17Aug 3, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆283Nov 12, 2021Updated 4 years ago
- RCE in NPM VSCode Extension☆20Apr 11, 2021Updated 5 years ago
- Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations☆28Aug 3, 2026Updated 3 months ago
- DupeKeyInjector☆134Apr 16, 2022Updated 4 years ago
- ☆71Mar 26, 2022Updated 4 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- Collection of different exploitation scenarios of JWT.☆21Jul 23, 2021Updated 5 years ago
- Proof of concept communications from C# via a web browser process☆21Feb 15, 2019Updated 7 years ago
- Some of my public exploits☆54Sep 15, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- attackRmi☆259Oct 14, 2020Updated 6 years ago
- Place for random PoCs☆17May 21, 2020Updated 6 years ago
- HTML5 WebSocket message fuzzer☆147Nov 23, 2018Updated 7 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆619Mar 4, 2021Updated 5 years ago
- Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)☆113Jan 14, 2019Updated 7 years ago
- Apache Solr Injection Research☆579Jan 28, 2020Updated 6 years ago
- CodeQL database manager☆51Apr 16, 2025Updated last year
- Detects request smuggling via HTTP/2 downgrades.☆93Jul 30, 2022Updated 4 years ago
- ☆154Jun 24, 2019Updated 7 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- PostMessage extension☆102Aug 28, 2019Updated 7 years ago
- A natural evolution of Burp Suite's Repeater tool☆202Apr 15, 2026Updated 6 months ago
- Attempt to connect to and dump all tables within a ServiceNow instance.☆20Jul 4, 2023Updated 3 years ago
- Web Server that serves a single file and keeps the connection open until user releases it.☆74Nov 27, 2013Updated 12 years ago
- Java RMI Vulnerability Scanner☆938Sep 3, 2026Updated 2 months ago
- shouganaiyo-loader is a cross-platform Frida-based Node.js command-line tool that forces Java processes to load a Java/JVMTI agent regard…☆39Dec 30, 2021Updated 4 years ago
- research☆149Mar 21, 2024Updated 2 years ago
- Grammar-based HTTP/1 fuzzer with mutation ability☆265Oct 30, 2024Updated 2 years ago
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆302Apr 9, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- HTTP parameter discovery suite.☆93Apr 16, 2020Updated 6 years ago
- ☆18Feb 14, 2019Updated 7 years ago
- ☆102May 5, 2020Updated 6 years ago
- StandIn is a small .NET35/45 AD post-exploitation toolkit☆255Dec 2, 2021Updated 4 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆110Jan 30, 2025Updated last year
- DNS rebinding toolkit☆256May 22, 2023Updated 3 years ago
- Java web and command line applications demonstrating various security topics☆239Updated this week