cn-panda / logbackRceDemo
The project is a simple vulnerability Demo environment written by SpringBoot. Here, I deliberately wrote a vulnerability environment where there are arbitrary file uploads, and then use the `scan` attribute in the loghack configuration file to cooperate with the logback vulnerability to implement RCE.
☆87Updated 3 years ago
Alternatives and similar repositories for logbackRceDemo
Users that are interested in logbackRceDemo are comparing it to the libraries listed below
Sorting:
- spring-cloud-function SpEL RCE, Vultarget & Poc☆134Updated 3 years ago
- ☆16Updated 5 years ago
- Log4j_dos_CVE-2021-45105☆13Updated 3 years ago
- A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692☆36Updated 2 years ago
- Intentionally Vulnerable to Spring4Shell☆52Updated 3 years ago
- Java web and command line applications demonstrating various security topics☆237Updated 3 weeks ago
- https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet☆50Updated 3 years ago
- Sample Spring application to Demonstrate the Gateway Actuator☆47Updated 3 years ago
- CVE-2020-36188 &&Jackson-databind RCE☆11Updated 4 years ago
- log4j2-vaccine☆85Updated 3 years ago
- Apache Log4j 1.2.X存在反序列化远程代码执行漏洞☆78Updated 5 years ago
- 来源于jackson-CVE-2020-8840,需要开autotype☆16Updated 2 years ago
- 《深入理解IAST交互式应用安全测试》Interactive Application Security Testing.☆13Updated 2 years ago
- 个人用于在自动化挖掘gadget时,方便查找gadget chains中class所在jar包,以助于便捷审计测试gadget有效性的那么一个小工具。☆60Updated 5 years ago
- ☆20Updated 4 years ago
- Java反序列化漏洞学习笔记☆16Updated 5 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated 2 years ago
- Native Java serialization filter blacklist for common gadgets☆20Updated 5 years ago
- nmap + masscan scan☆14Updated 2 years ago
- CVE-2020-36179~82 Jackson-databind SSRF&RCE☆81Updated 4 years ago
- jasypt Decrypt Encrypt☆14Updated 3 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago
- ☆62Updated last year
- CVE-2020-36184 && Jackson-databind RCE☆15Updated 4 years ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0☆82Updated 5 years ago
- CVE-2020-8840:FasterXML/jackson-databind 远程代码执行漏洞☆36Updated 5 years ago
- [CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE☆16Updated last month
- Shiro漏洞实例源码☆26Updated 3 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆52Updated last year