Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2
☆38Aug 26, 2026Updated last month
Alternatives and similar repositories for log4j2-rce
Users that are interested in log4j2-rce are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆28Aug 26, 2026Updated last month
- ☆46Updated this week
- POC pre-auth RCE on Exchange☆187Aug 22, 2026Updated last month
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 3 months ago
- IP筛选工具，可快速检索IP并查询威胁情报，可自行对接防火墙等设备进行IP封禁☆18Aug 22, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- CVE-2026-75604 Next.js Windows RCE poc☆105Aug 28, 2026Updated last month
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆82Updated this week
- ☆21Aug 5, 2020Updated 6 years ago
- Next.js RCE☆53Sep 29, 2026Updated 2 weeks ago
- ☆97Updated this week
- ☆19Oct 2, 2022Updated 4 years ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆39Sep 22, 2026Updated 3 weeks ago
- CTFD Custom Theme☆28Oct 14, 2023Updated 3 years ago
- ☆16Nov 23, 2019Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Simple C++ PoC of SeDebugPrivilege Privesc☆37Feb 12, 2024Updated 2 years ago
- Full source of velocity.cat, source code hvh/legit cheat☆131Jul 31, 2026Updated 2 months ago
- Proof-of-Concept for Authorization Bypass in Next.js Middleware☆20Mar 23, 2025Updated last year
- WorkBuddy 多账号自动签到、状态与积分查询脚本（Python 标准库）☆24Sep 2, 2026Updated last month
- Whitepaper☆16Dec 1, 2025Updated 10 months ago
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- Off-grid, telemetry based group tracking app utilizing MeshCore. Focused on Hunting and backcountry applications.☆21Updated this week
- CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC☆33Aug 12, 2026Updated 2 months ago
- Certighost POC☆335Jul 28, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆32Mar 6, 2025Updated last year
- DioProcess — Advanced Windows Internals, Evasion, Rootkit, Hypervisor, SMM & Bootkit Research Framework☆41Jul 6, 2026Updated 3 months ago
- Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances.☆57Aug 22, 2026Updated last month
- 简洁而不失优雅的桌面课程表 使用☆10Jul 8, 2024Updated 2 years ago
- Faster passive subdomain enumeration tool.☆259Oct 12, 2026Updated last week
- The Undocumented Public API For The Hack The Box Platform☆18Jul 4, 2026Updated 3 months ago
- ☆14Aug 24, 2021Updated 5 years ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- 一键绕过CDN获取真实IP☆164Jul 23, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- **CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.☆120Sep 6, 2026Updated last month
- A great tool for solving SVG type captchas using python☆15Mar 29, 2024Updated 2 years ago
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆31Oct 23, 2025Updated 11 months ago
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 9 months ago
- CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP☆22Feb 23, 2025Updated last year
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆59Updated this week
- ☆12Aug 22, 2022Updated 4 years ago