siberas JMX exploitation toolkit
☆133Mar 13, 2023Updated 3 years ago
Alternatives and similar repositories for sjet
Users that are interested in sjet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mogwai Java Management Extensions (JMX) Exploitation Toolkit☆173Jul 21, 2016Updated 10 years ago
- Java RMI enumeration and attack tool.☆750Sep 28, 2017Updated 9 years ago
- JRE8u20_RCE_Gadget☆254Jul 1, 2016Updated 10 years ago
- MOGWAI LABS JMX exploitation toolkit☆204Mar 13, 2023Updated 3 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆619Mar 4, 2021Updated 5 years ago
- Advanced Netstat Using Python For Windows☆45Aug 21, 2017Updated 9 years ago
- RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities☆447Sep 7, 2022Updated 4 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,189May 26, 2023Updated 3 years ago
- WhiteBox CMS analysis☆68May 22, 2023Updated 3 years ago
- JMX enumeration and attacking tool.☆517Jun 26, 2025Updated last year
- Java Message Exploitation Tool☆506Jul 6, 2022Updated 4 years ago
- CVE-2020-11651: Proof of Concept☆40Jul 7, 2021Updated 5 years ago
- JNDI Attacking Tool☆243Jul 11, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).☆518Mar 11, 2022Updated 4 years ago
- A static byte code analyzer for Java deserialization gadget research☆252Apr 17, 2017Updated 9 years ago
- A shellcode testing harness.☆69Jul 10, 2024Updated 2 years ago
- ntlm relay attack to Exchange Web Services☆331Jan 15, 2018Updated 8 years ago
- A PoC Java Stager which can download, compile, and execute a Java file in memory.☆107Aug 6, 2018Updated 8 years ago
- RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl☆208Mar 10, 2019Updated 7 years ago
- Outlook addin Back Door☆11Dec 2, 2015Updated 10 years ago
- Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…☆316Apr 1, 2019Updated 7 years ago
- Forward local or remote tcp ports through SMB pipes.☆295Mar 7, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.☆176Dec 1, 2022Updated 3 years ago
- Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!☆296Jun 10, 2019Updated 7 years ago
- HP printer security research code☆91Nov 20, 2017Updated 8 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆75Feb 18, 2023Updated 3 years ago
- A collection of curated Java Deserialization Exploits☆592May 16, 2021Updated 5 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆501Aug 7, 2020Updated 6 years ago
- Automated script to search in SMB protocol for availables pipe names☆23Apr 19, 2018Updated 8 years ago
- Test CVE-2018-0296 and extract usernames☆106Dec 9, 2018Updated 7 years ago
- Extreme Vulnerable Node Application☆95Nov 12, 2018Updated 7 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- CVE-2020-10199 CVE-2020-10204 Python POC☆19Apr 7, 2020Updated 6 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,094Jun 15, 2021Updated 5 years ago
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆804Nov 7, 2021Updated 4 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- SharpAddDomainMachine☆69Oct 12, 2021Updated 5 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago