Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
☆105Apr 5, 2022Updated 4 years ago
Alternatives and similar repositories for springcore-0day-en
Users that are interested in springcore-0day-en are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- TLD records archive. Revisiting the original TLDR project by mandatoryprogrammer, on the hunt for more root nameserver changes.☆11Dec 4, 2022Updated 3 years ago
- ☆87Mar 31, 2022Updated 4 years ago
- Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228) and the possible Spring RCE vulnerability.☆34Mar 31, 2022Updated 4 years ago
- Generates statistics based on output from CrackMapExec. Ideal for enumeration of host-based controls.☆13Oct 23, 2026Updated last week
- SpringCore0day from https://share.vx-underground.org/ & some additional links☆396Mar 31, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit☆326Aug 4, 2022Updated 4 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- 通过公司名称，在fofa上搜索可能存在通用产品的公司；如果想挖掘cnvd证书，可在AI企查等平台上导出注册资金大于5000w的公司到这个脚本中进行通用系统收集。☆11Nov 3, 2022Updated 3 years ago
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆57Oct 10, 2022Updated 4 years ago
- ☆23Jun 1, 2022Updated 4 years ago
- Protect domains from malicious browser extensions☆18Apr 16, 2025Updated last year
- A Dumb Windows App With A Sweet Theme Song for Inspecting Bad Clipboard Content☆12Apr 25, 2025Updated last year
- 简单版的PE加载器☆13Aug 11, 2020Updated 6 years ago
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Jun 12, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- (kinda) Malicious Outlook Reader☆137Mar 3, 2021Updated 5 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Apr 10, 2022Updated 4 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- ☆10Nov 24, 2018Updated 7 years ago
- Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, an…☆142Jun 1, 2023Updated 3 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- ☆15Feb 9, 2022Updated 4 years ago
- Files related to works published in Black Mass☆10Sep 16, 2023Updated 3 years ago
- ☆12Sep 14, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.☆17Jul 30, 2020Updated 6 years ago
- Documentation of main privilege escalation vulnerabilities affecting Active Directory.☆18Mar 4, 2026Updated 7 months ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆33Feb 7, 2022Updated 4 years ago
- Court platform vulnerability disclosure(s).☆14May 18, 2024Updated 2 years ago
- Remote Assistance Volatile Environment LPE☆15Jun 28, 2025Updated last year
- 要你命三千，集多种渗透工具于一身的终极武器霸王。☆19Aug 11, 2022Updated 4 years ago
- Some private tools i decided to release for public.☆49Mar 14, 2024Updated 2 years ago
- USENIX 2023 Artifacts☆12Nov 25, 2022Updated 3 years ago
- scripts and configs from .conf2016 talk on Hunting the Known Unknowns PowerShell Edition☆15Oct 25, 2016Updated 10 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A collection of various tools for red-teaming exercises. A mix of C#, Powershell, & Python☆106Jul 26, 2024Updated 2 years ago
- Java 代码审计-存在风险的函数汇总。方便我们日常代码审计过程中快速定位漏洞点，配合静态代码分析工具做到事半功倍。Java code audit - summary of risky functions. It is convenient for us to quickl…☆30Jul 16, 2024Updated 2 years ago
- automates exploits using ROP chains, using ntdll-scraper☆16May 26, 2022Updated 4 years ago
- dbling: The Chrome OS Forensic Toolset☆13Oct 27, 2020Updated 6 years ago
- asynchronous SSH client in Python☆11Jul 1, 2026Updated 4 months ago
- Source Code of MSIL Ransom☆13Feb 11, 2023Updated 3 years ago
- Exploit script for Apache Struts2 REST Plugin XStream RCE (CVE-2017-9805)☆15Nov 26, 2020Updated 5 years ago