codewhitesec/ColdFusionPwn external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

codewhitesec/ColdFusionPwn

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/codewhitesec/ColdFusionPwn)

Close

codewhitesec / ColdFusionPwnView on GitHubMore

• External links
• Readme badge

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

☆95Oct 18, 2022Updated 4 years ago

Alternatives and similar repositories for ColdFusionPwn

Users that are interested in ColdFusionPwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• syriusbughunt / CVE-2018-14667

  View on GitHub
  All about CVE-2018-14667; From what it is to how to successfully exploit it.
  ☆50Nov 30, 2018Updated 7 years ago
• matthiaskaiser / jmet

  View on GitHub
  Java Message Exploitation Tool
  ☆506Jul 6, 2022Updated 4 years ago
• 5up3rc / weblogic_cmd

  View on GitHub
  weblogic t3 deserialization rce
  ☆268Jul 13, 2017Updated 9 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆139Aug 9, 2026Updated 2 months ago
• novysodope / AMF_JRMP

  View on GitHub
  改造一个基于jrmp的AMF反序列化利用工具
  ☆15Jul 7, 2022Updated 4 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆173Jul 21, 2016Updated 10 years ago
• neargle / Go-Get-RCE-CVE-2018-6574-POC

  View on GitHub
  CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
  ☆24Jan 14, 2022Updated 4 years ago
• blazeinfosec / CVE-2017-10366_peoplesoft

  View on GitHub
  CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
  ☆25Sep 4, 2018Updated 8 years ago
• NickstaDB / BaRMIe

  View on GitHub
  Java RMI enumeration and attack tool.
  ☆750Sep 28, 2017Updated 9 years ago
• securifera / CVE-2018-6546-Exploit

  View on GitHub
  CVE-2018-6546-Exploit
  ☆41Apr 15, 2018Updated 8 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆254Jul 1, 2016Updated 10 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆104Dec 3, 2018Updated 7 years ago
• irsl / jackson-rce-via-spel

  View on GitHub
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Jan 9, 2018Updated 8 years ago
• ab1gale / phpcms-2008-CVE-2018-19127

  View on GitHub
  ☆41Nov 9, 2018Updated 7 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• exp-db / CommonServiceDefaultPort

  View on GitHub
  常用系统服务默认端口列表
  ☆13Apr 25, 2017Updated 9 years ago
• brianwrf / S2-053-CVE-2017-12611

  View on GitHub
  A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
  ☆37Sep 8, 2017Updated 9 years ago
• mbechler / serjs

  View on GitHub
  A Java serializer in JavaScript
  ☆80May 21, 2018Updated 8 years ago
• brianwrf / CVE-2017-4878-Samples

  View on GitHub
  CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html
  ☆17Feb 5, 2018Updated 8 years ago
• QAX-A-Team / SerialWriter

  View on GitHub
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Feb 28, 2018Updated 8 years ago
• mackleadmire / CVE-2018-3191-Rce-Exploit

  View on GitHub
  ☆17Oct 25, 2018Updated 8 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆486Dec 9, 2020Updated 5 years ago
• pyn3rd / CVE-2018-3245

  View on GitHub
  CVE-2018-3245-PoC
  ☆172Jul 13, 2021Updated 5 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆454Mar 24, 2022Updated 4 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• matt- / CVE-2018-15685

  View on GitHub
  POC for CVE-2018-15685
  ☆42Aug 24, 2018Updated 8 years ago
• tdy218 / ysoserial-cve-2018-2628

  View on GitHub
  Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
  ☆114May 21, 2018Updated 8 years ago
• Tycx2ry / docker_api_vul

  View on GitHub
  docker 未授权访问漏洞利用脚本
  ☆140May 18, 2016Updated 10 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆271Mar 4, 2022Updated 4 years ago
• kingkaki / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆102Mar 10, 2020Updated 6 years ago
• k8gege / ZimbraExploit

  View on GitHub
  Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
  ☆78Feb 22, 2023Updated 3 years ago
• grayddq / PublicSecScan

  View on GitHub
  针对大量WEB资产进行分布式WEB安全扫描，发现web环境下常规的一些安全漏洞
  ☆98Apr 19, 2019Updated 7 years ago
• xiecat / prad

  View on GitHub
  Web directory and file discovery.
  ☆18Oct 31, 2022Updated 4 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆432May 8, 2023Updated 3 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• airman604 / jdbc-backdoor

  View on GitHub
  A fake JDBC driver that allows OS command execution.
  ☆124Oct 2, 2022Updated 4 years ago
• NickstaDB / SerialBrute

  View on GitHub
  Java serialization brute force attack tool.
  ☆125Aug 18, 2017Updated 9 years ago
• skelsec / windows_ad_dos_poc

  View on GitHub
  PoC code for crashing windows active directory
  ☆34Sep 19, 2018Updated 8 years ago
• threedr3am / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆210Jan 17, 2022Updated 4 years ago
• petercunha / jenkins-rce

  View on GitHub
  Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!
  ☆297Jun 10, 2019Updated 7 years ago
• hayasec / couchdb_exp

  View on GitHub
  couchdb remote command exec.
  ☆14Mar 27, 2018Updated 8 years ago
• quentinhardy / jndiat

  View on GitHub
  JNDI Attacking Tool
  ☆243Jul 11, 2022Updated 4 years ago