Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
☆105Apr 5, 2022Updated 4 years ago
Alternatives and similar repositories for springcore-0day-en
Users that are interested in springcore-0day-en are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228) and the possible Spring RCE vulnerability.☆34Mar 31, 2022Updated 4 years ago
- TLD records archive. Revisiting the original TLDR project by mandatoryprogrammer, on the hunt for more root nameserver changes.☆11Dec 4, 2022Updated 3 years ago
- ☆86Mar 31, 2022Updated 4 years ago
- SpringCore0day from https://share.vx-underground.org/ & some additional links☆396Mar 31, 2022Updated 4 years ago
- Scan systems and docker images for potential spring4shell vulnerabilities. Will detect in-depth (layered archives jar/zip/tar/war and sca…☆11Apr 2, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965☆376Nov 9, 2022Updated 3 years ago
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆56Oct 10, 2022Updated 4 years ago
- This Log4j RCE exploit originated from https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce☆10Dec 16, 2021Updated 4 years ago
- ☆23Jun 1, 2022Updated 4 years ago
- Protect domains from malicious browser extensions☆18Apr 16, 2025Updated last year
- Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit☆325Aug 4, 2022Updated 4 years ago
- 简单版的PE加载器☆13Aug 11, 2020Updated 6 years ago
- Python3写的一个大规模查询权重查询，目前支持单次和大规模站点权重查询和一些企业信息。可以帮助提交漏洞者的主要快速知道是否有无权重以及网站信息来快速提交漏洞。☆17Sep 14, 2021Updated 5 years ago
- ☆15Feb 9, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 通过公司名称，在fofa上搜索可能存在通用产品的公司；如果想挖掘cnvd证书，可在AI企查等平台上导出注册资金大于5000w的公司到这个脚本中进行通用系统收集。☆11Nov 3, 2022Updated 3 years ago
- (kinda) Malicious Outlook Reader☆137Mar 3, 2021Updated 5 years ago
- Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.☆17Jul 30, 2020Updated 6 years ago
- ☆32Feb 26, 2022Updated 4 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Apr 10, 2022Updated 4 years ago
- Display Languages Volatile Environment LPE☆12Jun 28, 2025Updated last year
- ☆10Nov 24, 2018Updated 7 years ago
- Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, an…☆142Jun 1, 2023Updated 3 years ago
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Jun 12, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆12Sep 14, 2022Updated 4 years ago
- Files related to works published in Black Mass☆10Sep 16, 2023Updated 3 years ago
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆20Sep 22, 2021Updated 5 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software.☆13Oct 27, 2024Updated last year
- 要你命三千，集多种渗透工具于一身的终极武器霸王。☆19Aug 11, 2022Updated 4 years ago
- POC for CVE-2020-9484☆13Feb 10, 2021Updated 5 years ago
- USENIX 2023 Artifacts☆12Nov 25, 2022Updated 3 years ago
- Some private tools i decided to release for public.☆49Mar 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- [Moved to Codeberg] Simple local scanner for applications containing vulnerable Spring libraries☆124Aug 1, 2022Updated 4 years ago
- Java 代码审计-存在风险的函数汇总。方便我们日常代码审计过程中快速定位漏洞点，配合静态代码分析工具做到事半功倍。Java code audit - summary of risky functions. It is convenient for us to quickl…☆30Jul 16, 2024Updated 2 years ago
- ☆16May 20, 2022Updated 4 years ago
- Starting Code for my How to Write Malware 101 Class. This is a Proof of Concept of a C# RAT (Remote Access Trojan) made by Sean Pierce (@…☆21May 29, 2018Updated 8 years ago
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- A collection of various tools for red-teaming exercises. A mix of C#, Powershell, & Python☆106Jul 26, 2024Updated 2 years ago
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆23Mar 13, 2023Updated 3 years ago