Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
☆106Apr 5, 2022Updated 4 years ago
Alternatives and similar repositories for springcore-0day-en
Users that are interested in springcore-0day-en are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228) and the possible Spring RCE vulnerability.☆34Mar 31, 2022Updated 4 years ago
- TLD records archive. Revisiting the original TLDR project by mandatoryprogrammer, on the hunt for more root nameserver changes.☆11Dec 4, 2022Updated 3 years ago
- SpringCore0day from https://share.vx-underground.org/ & some additional links☆398Mar 31, 2022Updated 4 years ago
- Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965☆375Nov 9, 2022Updated 3 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆57Oct 10, 2022Updated 3 years ago
- ☆23Jun 1, 2022Updated 3 years ago
- This Log4j RCE exploit originated from https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce☆10Dec 16, 2021Updated 4 years ago
- Scripts for OWASP-ZAP☆13Oct 7, 2025Updated 7 months ago
- Protect domains from malicious browser extensions☆17Apr 16, 2025Updated last year
- Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit☆325Aug 4, 2022Updated 3 years ago
- 简单版的PE加载器☆13Aug 11, 2020Updated 5 years ago
- Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773☆113Mar 12, 2022Updated 4 years ago
- (kinda) Malicious Outlook Reader☆138Mar 3, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆33Feb 26, 2022Updated 4 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆53Apr 10, 2022Updated 4 years ago
- Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, an…☆142Jun 1, 2023Updated 2 years ago
- ☆10Nov 24, 2018Updated 7 years ago
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Jun 12, 2022Updated 3 years ago
- Files related to works published in Black Mass☆11Sep 16, 2023Updated 2 years ago
- SQL, IIS, Oh My...☆21Feb 24, 2025Updated last year
- Display Languages Volatile Environment LPE☆12Jun 28, 2025Updated 10 months ago
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆20Sep 22, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- POC for CVE-2020-9484☆13Feb 10, 2021Updated 5 years ago
- Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.☆16Jul 30, 2020Updated 5 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 3 years ago
- USENIX 2023 Artifacts☆11Nov 25, 2022Updated 3 years ago
- 要你命三千，集多种渗透工具于一身的终极武器霸王。☆19Aug 11, 2022Updated 3 years ago
- scripts and configs from .conf2016 talk on Hunting the Known Unknowns PowerShell Edition☆15Oct 25, 2016Updated 9 years ago
- [Moved to Codeberg] Simple local scanner for applications containing vulnerable Spring libraries☆125Aug 1, 2022Updated 3 years ago
- Inject code into .net applications☆13Nov 7, 2018Updated 7 years ago
- Starting Code for my How to Write Malware 101 Class. This is a Proof of Concept of a C# RAT (Remote Access Trojan) made by Sean Pierce (@…☆21May 29, 2018Updated 7 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- automates exploits using ROP chains, using ntdll-scraper☆16May 26, 2022Updated 3 years ago
- Create a lnk shortcut file for Windows☆25Apr 1, 2026Updated last month
- A collection of various tools for red-teaming exercises. A mix of C#, Powershell, & Python☆107Jul 26, 2024Updated last year
- Enter Product Key Volatile Environment LPE☆13Jun 28, 2025Updated 10 months ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,386Oct 27, 2023Updated 2 years ago
- A python tool to generate an Excel file linking the list of cracked accounts and their LDAP attributes.☆12Jan 31, 2025Updated last year
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆24Mar 13, 2023Updated 3 years ago