Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
☆109Jan 26, 2020Updated 6 years ago
Alternatives and similar repositories for spring-boot-actuator-h2-rce
Users that are interested in spring-boot-actuator-h2-rce are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Redis RCE 的几种方法☆90Jun 5, 2024Updated 2 years ago
- Spring Boot Actuator (jolokia) XXE/RCE☆328Jun 16, 2020Updated 6 years ago
- jolokia-exploitation-toolkit☆318Dec 19, 2024Updated last year
- Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.☆67Apr 25, 2025Updated last year
- A wrapper around jq, to help you parse jq output!☆30Aug 23, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit☆157Jan 24, 2021Updated 5 years ago
- ☆420Jan 5, 2022Updated 4 years ago
- -☆11Nov 21, 2020Updated 5 years ago
- SQL Server Reporting Services(CVE-2020-0618)中的RCE☆195Feb 15, 2020Updated 6 years ago
- Read Navicat 12 Password☆19Jun 7, 2020Updated 6 years ago
- List of special metadata IPs used in cloud services☆11Aug 9, 2019Updated 7 years ago
- websocket-connection-smuggler☆70Jan 22, 2020Updated 6 years ago
- SSRF to TCP Port Scanning, Banner and Private IP Disclosure by abusing the FTP protocol/clients☆72Jul 29, 2021Updated 5 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆619Mar 4, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Jul 7, 2019Updated 7 years ago
- Keep track of changes in website with WEBSY☆35May 22, 2023Updated 3 years ago
- Apache Solr Injection Research☆580Jan 28, 2020Updated 6 years ago
- Weblogic RCE with IIOP☆79Jan 18, 2020Updated 6 years ago
- There is no pre-auth RCE in Jenkins since May 2017, but this is the one!☆608May 17, 2019Updated 7 years ago
- Some payloads of JNDI Injection in JDK 1.8.0_191+☆486Dec 9, 2020Updated 5 years ago
- JRE8u20_RCE_Gadget☆254Jul 1, 2016Updated 10 years ago
- A vulnerable application exposing Spring Boot Actuators☆123Feb 25, 2019Updated 7 years ago
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆691Jan 28, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 跟.net相关的学习☆88Jun 24, 2024Updated 2 years ago
- ☆13Oct 3, 2023Updated 3 years ago
- tetctf2020_amf_writeups☆20Jan 3, 2021Updated 5 years ago
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆274Feb 11, 2021Updated 5 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- A permutation generation tool written in golang☆213Jul 15, 2019Updated 7 years ago
- woodpecker框架专用bcel库☆12Apr 30, 2021Updated 5 years ago
- Burp Suite extension for parsing Swagger web service definition files☆20Jul 15, 2025Updated last year
- services-names-wordlist☆88Oct 31, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 泛微ecology OA系统接口存在数据库配置信息泄露漏洞☆50Jul 13, 2020Updated 6 years ago
- ☆13Feb 9, 2022Updated 4 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,093Jun 15, 2021Updated 5 years ago
- ☆72Nov 20, 2017Updated 8 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Jun 20, 2020Updated 6 years ago
- Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.☆41Dec 27, 2019Updated 6 years ago
- RAS(RAndom Subdomain) Fuzzer☆43Jan 22, 2020Updated 6 years ago