Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228) and the possible Spring RCE vulnerability.
☆34Mar 31, 2022Updated 4 years ago
Alternatives and similar repositories for spring-rce-vulnerable-app
Users that are interested in spring-rce-vulnerable-app are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Spring4Shell - Spring Core RCE - CVE-2022-22965☆130Apr 4, 2022Updated 4 years ago
- ☆87Mar 31, 2022Updated 4 years ago
- Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and m…☆105Apr 5, 2022Updated 4 years ago
- Serpico-NG https://github.com/LUTECH-TMS-CERT/EHAT-NG☆12Dec 6, 2017Updated 8 years ago
- Various components we use in labs☆10Oct 30, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core"☆15May 15, 2024Updated 2 years ago
- Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit☆326Aug 4, 2022Updated 4 years ago
- Defensive research PoC: a benign open model + a LoRA that exfiltrates proprietary data on a semantic trigger. Companion to the Origin pos…☆11Jun 18, 2026Updated 4 months ago
- Out-of-band management device scanner☆79Updated this week
- Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.☆52Mar 24, 2021Updated 5 years ago
- try to determine if a host is vulnerable to SpringShell CVE‐2022‐22965 and CVE‐2022‐22963☆23Jun 30, 2026Updated 4 months ago
- Tools for Deep Scanning Archives and Repositories☆12Oct 9, 2026Updated 3 weeks ago
- [Moved to Codeberg] Simple local scanner for applications containing vulnerable Spring libraries☆125Aug 1, 2022Updated 4 years ago
- multiduplicut : optimize wordlists-based password cracking methods chaining☆17Feb 25, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- An analysis of the user password hashing algorithm used by Citrix NetScaler☆15Sep 23, 2025Updated last year
- RDP POC☆19Jun 1, 2019Updated 7 years ago
- Ryanair Boarding Pass Liberation☆14Jan 11, 2026Updated 9 months ago
- Plattform to develop and experiment with existing java web attacks.☆32Jan 8, 2018Updated 8 years ago
- Python implementation of a Bugcrowd api client.☆11Jun 18, 2026Updated 4 months ago
- sslxray is an SSL/TLS scanning tool designed to detect a wide range of issues☆30Aug 9, 2018Updated 8 years ago
- Repo with content from the sessions streamed on https://www.twitch.tv/viernesdecrypto☆15Feb 4, 2022Updated 4 years ago
- bindings for using tree-sitter-stack-graphs from python☆10May 5, 2025Updated last year
- ☆22Dec 22, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A dotnet executable to get an Entra token in an authenticated runtime☆17Oct 30, 2024Updated 2 years ago
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆21Mar 22, 2024Updated 2 years ago
- Burp Suite AMF Extension☆49Sep 24, 2018Updated 8 years ago
- Static, read-only macOS attack-surface mapper: ranks every launchd service by privilege, XPC exposure and entitlements — with the evidenc…☆24Oct 4, 2026Updated last month
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆10Mar 29, 2021Updated 5 years ago
- ☆16Nov 24, 2020Updated 5 years ago
- Scanner for Zyxel products which are potentially vulnerable due to an undocumented user account (CVE-2020-29583)☆16Jan 4, 2021Updated 5 years ago
- Moovbox Mismanagement Utilities☆14Mar 21, 2015Updated 11 years ago
- Now witness my Final ORM! Node ORM for ArangoDB. Moved: https://gitlab.com/NoahGray/final-orm☆11Dec 6, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability☆22Oct 2, 2021Updated 5 years ago
- CVE-2021-40444 Sample☆11Sep 10, 2021Updated 5 years ago
- Modified bfdecrypt to automate signing and ease of use.☆17Jul 16, 2018Updated 8 years ago
- Top hashpwn rules☆21Dec 12, 2025Updated 10 months ago
- Step-by-step documentation on how to decrypt SCCM database secrets offline☆50Oct 20, 2025Updated last year
- This extension provide a Python panel for writing custom proxy script.☆16Aug 26, 2019Updated 7 years ago