veracode-research/actuator-testbed external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

veracode-research/actuator-testbed

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/veracode-research/actuator-testbed)

Close

veracode-research / actuator-testbedView on GitHubMore

• External links
• Readme badge

A vulnerable application exposing Spring Boot Actuators

☆123Feb 25, 2019Updated 7 years ago

Alternatives and similar repositories for actuator-testbed

Users that are interested in actuator-testbed are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• b1ngz / spring-boot-actuator-cloud-vul

  View on GitHub
  Spring Boot Actuator + Spring Cloud Vul Env
  ☆19Dec 25, 2019Updated 6 years ago
• mpgn / Spring-Boot-Actuator-Exploit

  View on GitHub
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆328Jun 16, 2020Updated 6 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆254Jul 1, 2016Updated 10 years ago
• iSafeBlue / redis-rce

  View on GitHub
  Redis RCE 的几种方法
  ☆90Jun 5, 2024Updated 2 years ago
• kxcode / JNDI-Exploit-Bypass-Demo

  View on GitHub
  Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>
  ☆265Jun 17, 2022Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆486Dec 9, 2020Updated 5 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 7 years ago
• JackOfMostTrades / gadgetinspector

  View on GitHub
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,093Jun 15, 2021Updated 5 years ago
• GrrrDog / ZeroNights-HackQuest-2016

  View on GitHub
  2 web tasks from ZeroNights HackQuest 2016
  ☆49Mar 24, 2017Updated 9 years ago
• SecCoder-Security-Lab / jdbc-sqlxml-xxe

  View on GitHub
  h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.
  ☆54Dec 12, 2021Updated 4 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆454Mar 24, 2022Updated 4 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆843Jun 7, 2022Updated 4 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆259Oct 14, 2020Updated 6 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,008Oct 15, 2020Updated 6 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆432May 8, 2023Updated 3 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 7 years ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆579Jan 28, 2020Updated 6 years ago
• matthiaskaiser / jmet

  View on GitHub
  Java Message Exploitation Tool
  ☆506Jul 6, 2022Updated 4 years ago
• Y4er / fastjson-bypass-autotype-1.2.68

  View on GitHub
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆228Oct 12, 2022Updated 4 years ago
• SummerSec / LookupInterface

  View on GitHub
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆166Apr 10, 2022Updated 4 years ago
• lightless233 / Java-Unserialization-Study

  View on GitHub
  QAQ Just study unserialize vulnerabilities in Java :)
  ☆195Aug 22, 2018Updated 8 years ago
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆390Apr 16, 2022Updated 4 years ago
• threedr3am / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆210Jan 17, 2022Updated 4 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆173Jul 21, 2016Updated 10 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆271Mar 4, 2022Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• Ivan1ee / NET-Deserialize

  View on GitHub
  总结了20+.Net反序列化文章，持续更新
  ☆744Apr 3, 2024Updated 2 years ago
• QAX-A-Team / SerialWriter

  View on GitHub
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Feb 28, 2018Updated 8 years ago
• 5up3rc / weblogic_cmd

  View on GitHub
  weblogic t3 deserialization rce
  ☆268Jul 13, 2017Updated 9 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,246Feb 17, 2025Updated last year
• Y4er / CVE-2020-2551

  View on GitHub
  Weblogic IIOP CVE-2020-2551
  ☆337Apr 7, 2020Updated 6 years ago
• motikan2010 / CVE-2020-5398

  View on GitHub
  CVE-2020-5398 - RFD(Reflected File Download) Attack for Spring MVC
  ☆84Dec 15, 2022Updated 3 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• orangetw / awesome-jenkins-rce-2019

  View on GitHub
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆608May 17, 2019Updated 7 years ago
• LuckyC4t / shiro-urldns

  View on GitHub
  shiro反序列化检测(只是个玩具23333)
  ☆10Jan 16, 2024Updated 2 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• Cryin / JavaID

  View on GitHub
  java source code static code analysis and danger function identify prog
  ☆533Feb 18, 2019Updated 7 years ago
• NickstaDB / BaRMIe

  View on GitHub
  Java RMI enumeration and attack tool.
  ☆750Sep 28, 2017Updated 9 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆310Jun 17, 2022Updated 4 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆208Mar 10, 2019Updated 7 years ago