fullhunt / spring4shell-scan
A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities
☆659Updated 2 years ago
Alternatives and similar repositories for spring4shell-scan:
Users that are interested in spring4shell-scan are comparing it to the libraries listed below
- Burpsuite extension for log4j2rce☆28Updated 3 years ago
- Log4Shell scanner for Burp Suite☆483Updated last year
- Log4j jndi injects the Payload generator☆487Updated 3 years ago
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆928Updated last month
- WSO2 RCE (CVE-2022-29464) exploit and writeup.☆369Updated 2 years ago
- Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user☆1,003Updated 2 years ago
- Nuclei plugin for BurpSuite☆1,215Updated 5 months ago
- The most powerful CRLF injection (HTTP Response Splitting) scanner.☆574Updated last year
- A python script to scan for Apache Tomcat server vulnerabilities.☆816Updated this week
- Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965☆361Updated 2 years ago
- Log4j2 RCE Passive Scanner plugin for BurpSuite☆786Updated last year
- Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit☆310Updated 2 years ago
- ☆516Updated last year
- A malicious LDAP server for JNDI injection attacks☆1,028Updated last year
- Nginx 18.1 04/09/22 zero-day repo☆370Updated 2 years ago
- SSRF plugin for burp Automates SSRF Detection in all of the Request☆566Updated 4 years ago
- CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.☆1,359Updated 3 years ago
- Java RMI Vulnerability Scanner☆851Updated 7 months ago
- 🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks☆934Updated 3 years ago
- HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite☆722Updated 3 years ago
- a lightweight, flexible and novel open source poc verification framework☆233Updated 2 years ago
- A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.☆398Updated 2 months ago
- A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…☆360Updated 4 months ago
- Remote Code Injection In Log4j☆463Updated 3 years ago
- Authenticated Remote Command Execution in Gitlab via GitHub import☆223Updated 2 years ago
- SpringCore0day from https://share.vx-underground.org/ & some additional links☆394Updated 2 years ago
- Confluence Server Webwork OGNL injection☆307Updated last week
- Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading☆197Updated 3 years ago
- Tool to help exploit XXE vulnerabilities☆553Updated 2 years ago
- Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.☆391Updated 2 years ago