hillu / local-spring-vuln-scanner
Simple local scanner for applications containing vulnerable Spring libraries
☆125Updated 2 years ago
Related projects: ⓘ
- ☆80Updated 2 years ago
- A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.☆126Updated 2 years ago
- Scans and catches callbacks of systems that are impacted by Log4J Log4Shell vulnerability across specific headers.☆60Updated 2 years ago
- ☆104Updated last year
- Nmap NSE scripts to check against log4shell or LogJam vulnerabilities (CVE-2021-44228)☆347Updated 2 years ago
- A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.☆382Updated 4 months ago
- Simple local scanner for vulnerable log4j instances☆378Updated 2 years ago
- Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)☆101Updated 2 years ago
- An All-In-One Pure Python PoC for CVE-2021-44228☆174Updated 2 years ago
- This could have been a bash one-liner but guess what. It's a small Go tool that lists the trending CVEs from cvetrends.com☆105Updated 2 years ago
- CVE-2022-22963 PoC☆115Updated 2 years ago
- Exploit for CVE-2021-4034☆94Updated 2 years ago
- Nginx 18.1 04/09/22 zero-day repo☆367Updated 2 years ago
- Hashes for vulnerable LOG4J versions☆154Updated 2 years ago
- PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs☆293Updated 2 years ago
- A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell☆68Updated last year
- Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and m…☆105Updated 2 years ago
- Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)☆234Updated 3 years ago
- Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965☆357Updated last year
- Tools to assess DNS security.☆146Updated 6 months ago
- Collect information of Windows PC when doing incident response☆242Updated last year
- ☆113Updated this week
- a smart DNS response-guided subdomain fuzzer☆146Updated last year
- Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading☆194Updated 2 years ago
- Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228☆147Updated 2 years ago
- ☆121Updated last year
- Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889.☆33Updated last year
- Citrix Scanner for CVE-2023-3519☆47Updated last year
- ☆168Updated 2 years ago
- Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt☆184Updated 2 years ago