cn-panda / logbackRceDemo
The project is a simple vulnerability Demo environment written by SpringBoot. Here, I deliberately wrote a vulnerability environment where there are arbitrary file uploads, and then use the `scan` attribute in the loghack configuration file to cooperate with the logback vulnerability to implement RCE.
☆87Updated 3 years ago
Alternatives and similar repositories for logbackRceDemo:
Users that are interested in logbackRceDemo are comparing it to the libraries listed below
- spring-cloud-function SpEL RCE, Vultarget & Poc☆134Updated 3 years ago
- Intentionally Vulnerable to Spring4Shell☆52Updated 3 years ago
- Log4j_dos_CVE-2021-45105☆13Updated 3 years ago
- jasypt Decrypt Encrypt☆14Updated 3 years ago
- Test and monitor your projects for vulnerabilities with Maven. This plugin is officially maintained by Snyk.☆79Updated 7 months ago
- 《深入理解IAST交互式应用安全测试》Interactive Application Security Testing.☆13Updated 2 years ago
- nmap + masscan scan☆14Updated 2 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- Apache Log4j 1.2.X存在反序列化远程代码执行漏洞☆78Updated 5 years ago
- Sample Spring application to Demonstrate the Gateway Actuator☆47Updated 3 years ago
- My CodeQL queries collection☆96Updated last year
- Debug CVEs!☆33Updated last year
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆49Updated 2 years ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩,可以做一些破解、加密验证的绕过等操作☆99Updated 9 months ago
- Native Java serialization filter blacklist for common gadgets☆20Updated 5 years ago
- Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"☆101Updated 5 years ago
- 个人用于在自动化挖掘gadget时,方便查找gadget chains中class所在jar包,以助于便捷审计测试gadget有效性的那么一个小工具。☆60Updated 5 years ago
- Java agent without file 无文件的Java agent☆78Updated 2 years ago
- ☆15Updated 5 years ago
- Java反序列化漏洞学习笔记☆15Updated 5 years ago
- log4j2-vaccine☆85Updated 3 years ago
- A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692☆36Updated 2 years ago
- ☆148Updated 5 years ago
- JavaShellcodeRunner☆10Updated 11 years ago
- ☆41Updated 4 years ago
- GreHack 2021 CodeQL for Java workshop☆75Updated 3 years ago
- Apache Solr RCE via Velocity template☆108Updated 5 years ago
- Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0☆82Updated 5 years ago
- ☆61Updated last year
- Java After-Deserialization Attack☆79Updated 3 years ago