The purpose of this project is to demonstrate the Log4Shell exploit with Log4J vulnerabilities using PDF as delivery channel
☆203Dec 15, 2021Updated 4 years ago
Alternatives and similar repositories for log4jshell-pdf
Users that are interested in log4jshell-pdf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks☆952Jan 15, 2022Updated 4 years ago
- Remote Code Injection In Log4j☆470Jan 18, 2022Updated 4 years ago
- RCE 0-day for GhostScript 9.50 - Payload generator☆543Sep 8, 2021Updated 5 years ago
- Django QuerySet.annotate(), aggregate(), extra() SQL 注入☆24May 31, 2022Updated 4 years ago
- XSTREAM<=1.4.17漏洞复现（CVE-2021-39141、CVE-2021-39144、CVE-2021-39150）☆62Aug 25, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆888Jun 24, 2024Updated 2 years ago
- ☆14Feb 7, 2024Updated 2 years ago
- 记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。☆118Dec 30, 2021Updated 4 years ago
- POC for VMWARE CVE-2022-22954☆279Apr 13, 2022Updated 4 years ago
- RPC远程主机信息匿名扫描工具☆318Sep 30, 2022Updated 4 years ago
- 域信息收集工具☆11Jun 5, 2023Updated 3 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆775Jan 26, 2022Updated 4 years ago
- CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.☆1,417Dec 16, 2021Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆45Jul 13, 2021Updated 5 years ago
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆15Jun 16, 2023Updated 3 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆996Dec 31, 2021Updated 4 years ago
- ☆36Dec 1, 2020Updated 5 years ago
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆319Feb 1, 2024Updated 2 years ago
- Nmap script to guess* a GitLab version.☆256Oct 22, 2026Updated last week
- SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE☆47Oct 23, 2021Updated 5 years ago
- RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.☆1,575Aug 20, 2024Updated 2 years ago
- VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS☆216Dec 1, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆1,203Sep 2, 2022Updated 4 years ago
- This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager☆46Oct 3, 2023Updated 3 years ago
- FOFAX是一个基于fofa.info的API命令行查询工具☆841Mar 6, 2026Updated 7 months ago
- Webmin <=1.984, CVE-2022-0824 Post-Auth Reverse Shell PoC☆112Mar 6, 2022Updated 4 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计☆288Mar 19, 2022Updated 4 years ago
- Log4j jndi injects the Payload generator☆488Dec 13, 2021Updated 4 years ago
- JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP S…☆946Sep 2, 2025Updated last year
- Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)☆233Sep 16, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 冰蝎Java WebShell自动化免杀生成☆775Mar 15, 2022Updated 4 years ago
- 可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。☆263Nov 25, 2022Updated 3 years ago
- Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.☆146May 11, 2022Updated 4 years ago
- JetBrains系列产品.idea钓鱼反制红队☆326Jan 27, 2026Updated 9 months ago
- Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user☆1,070Jul 10, 2022Updated 4 years ago
- dump lsass进程工具☆555Jul 20, 2023Updated 3 years ago
- Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …☆741Aug 18, 2023Updated 3 years ago