codewhitesec/ColdFusionPwn external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

codewhitesec/ColdFusionPwn

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/codewhitesec/ColdFusionPwn)

Close

codewhitesec / ColdFusionPwnView on GitHubMore

• External links
• Readme badge

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

☆95Oct 18, 2022Updated 3 years ago

Alternatives and similar repositories for ColdFusionPwn

Users that are interested in ColdFusionPwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• 5up3rc / weblogic_cmd

  View on GitHub
  weblogic t3 deserialization rce
  ☆266Jul 13, 2017Updated 9 years ago
• matthiaskaiser / jmet

  View on GitHub
  Java Message Exploitation Tool
  ☆507Jul 6, 2022Updated 4 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆141Aug 9, 2026Updated 3 weeks ago
• skelsec / windows_ad_dos_poc

  View on GitHub
  PoC code for crashing windows active directory
  ☆34Sep 19, 2018Updated 7 years ago
• blazeinfosec / CVE-2017-10366_peoplesoft

  View on GitHub
  CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
  ☆25Sep 4, 2018Updated 7 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆174Jul 21, 2016Updated 10 years ago
• syriusbughunt / CVE-2018-14667

  View on GitHub
  All about CVE-2018-14667; From what it is to how to successfully exploit it.
  ☆50Nov 30, 2018Updated 7 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆104Dec 3, 2018Updated 7 years ago
• irsl / jackson-rce-via-spel

  View on GitHub
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Jan 9, 2018Updated 8 years ago
• NickstaDB / BaRMIe

  View on GitHub
  Java RMI enumeration and attack tool.
  ☆747Sep 28, 2017Updated 8 years ago
• jamieparfet / Apache-OFBiz-XXE

  View on GitHub
  XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04
  ☆12Oct 16, 2018Updated 7 years ago
• neargle / Go-Get-RCE-CVE-2018-6574-POC

  View on GitHub
  CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
  ☆24Jan 14, 2022Updated 4 years ago
• immunIT / CVE-2018-11759

  View on GitHub
  Proof of concept showing how to exploit the CVE-2018-11759
  ☆39Dec 11, 2018Updated 7 years ago
• mbechler / serjs

  View on GitHub
  A Java serializer in JavaScript
  ☆80May 21, 2018Updated 8 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• erpscanteam / CVE-2018-2380

  View on GitHub
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆51Mar 14, 2018Updated 8 years ago
• QAX-A-Team / SerialWriter

  View on GitHub
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Feb 28, 2018Updated 8 years ago
• tdy218 / ysoserial-cve-2018-2628

  View on GitHub
  Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
  ☆114May 21, 2018Updated 8 years ago
• brianwrf / S2-053-CVE-2017-12611

  View on GitHub
  A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
  ☆37Sep 8, 2017Updated 8 years ago
• exp-db / CommonServiceDefaultPort

  View on GitHub
  常用系统服务默认端口列表
  ☆13Apr 25, 2017Updated 9 years ago
• pwntester / dotnet-deserialization-scanner

  View on GitHub
  .NET Deserialization Passive Scanner
  ☆46Mar 23, 2018Updated 8 years ago
• mackleadmire / CVE-2018-3191-Rce-Exploit

  View on GitHub
  ☆17Oct 25, 2018Updated 7 years ago
• airman604 / jdbc-backdoor

  View on GitHub
  A fake JDBC driver that allows OS command execution.
  ☆125Oct 2, 2022Updated 3 years ago
• pyn3rd / CVE-2018-3245

  View on GitHub
  CVE-2018-3245-PoC
  ☆172Jul 13, 2021Updated 5 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• k8gege / ZimbraExploit

  View on GitHub
  Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
  ☆79Feb 22, 2023Updated 3 years ago
• coffeehb / portscan

  View on GitHub
  可能有一些你没见过的端口扫描脚本
  ☆11Nov 28, 2018Updated 7 years ago
• quentinhardy / jndiat

  View on GitHub
  JNDI Attacking Tool
  ☆244Jul 11, 2022Updated 4 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆485Dec 9, 2020Updated 5 years ago
• DownWithUp / CVE-2018-16712

  View on GitHub
  PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)
  ☆24Dec 1, 2018Updated 7 years ago
• novysodope / AMF_JRMP

  View on GitHub
  改造一个基于jrmp的AMF反序列化利用工具
  ☆16Jul 7, 2022Updated 4 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆272Mar 4, 2022Updated 4 years ago
• kingkaki / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆102Mar 10, 2020Updated 6 years ago
• ab1gale / phpcms-2008-CVE-2018-19127

  View on GitHub
  ☆41Nov 9, 2018Updated 7 years ago
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• im23pds / CVE-2018-3191

  View on GitHub
  CVE-2018-3191 反弹shell
  ☆15Oct 23, 2018Updated 7 years ago
• Imanfeng / Apache-Solr-RCE

  View on GitHub
  Apache Solr Exploits 🌟
  ☆345Oct 13, 2020Updated 5 years ago
• BishopFox / GadgetProbe

  View on GitHub
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆620Mar 4, 2021Updated 5 years ago
• quentinhardy / scriptsAndExploits

  View on GitHub
  Some scripts and exploits
  ☆147Jul 9, 2018Updated 8 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆433May 8, 2023Updated 3 years ago
• xiecat / prad

  View on GitHub
  Web directory and file discovery.
  ☆18Oct 31, 2022Updated 3 years ago
• threedr3am / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆212Jan 17, 2022Updated 4 years ago