A collection of pentest tools and resources targeting Hadoop environments
☆264Sep 9, 2021Updated 5 years ago
Alternatives and similar repositories for hadoop-attack-library
Users that are interested in hadoop-attack-library are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of curated Java Deserialization Exploits☆592May 16, 2021Updated 5 years ago
- ntlm relay attack to Exchange Web Services☆331Jan 15, 2018Updated 8 years ago
- Java RMI enumeration and attack tool.☆749Sep 28, 2017Updated 9 years ago
- Powershell module to assist in attacking Exchange/Outlook Web Access☆181Sep 22, 2016Updated 10 years ago
- Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java☆56Jul 21, 2016Updated 10 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A weaponized version of CVE-2018-9206☆62Oct 30, 2018Updated 7 years ago
- Java Message Exploitation Tool☆507Jul 6, 2022Updated 4 years ago
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- 做过的实验，踩过的坑☆39Jun 7, 2018Updated 8 years ago
- Automates credential skimming from service accounts in Windows Registry☆78Sep 29, 2020Updated 6 years ago
- CVE-2018-8581☆367Oct 21, 2022Updated 3 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆581Sep 7, 2021Updated 5 years ago
- JNDI Attacking Tool☆243Jul 11, 2022Updated 4 years ago
- Some scripts and exploits☆147Jul 9, 2018Updated 8 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Java serialization brute force attack tool.☆125Aug 18, 2017Updated 9 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆288Aug 7, 2020Updated 6 years ago
- 参考《利用分块传输吊打所有WAF》修改的requests的Adapter☆98Jan 31, 2019Updated 7 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- Mogwai Java Management Extensions (JMX) Exploitation Toolkit☆173Jul 21, 2016Updated 10 years ago
- fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java☆402Dec 16, 2022Updated 3 years ago
- CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability☆330Dec 30, 2018Updated 7 years ago
- Red Team Tips as posted by @vysecurity on Twitter☆1,114Apr 26, 2020Updated 6 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆501Aug 7, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PoC for CVE-2018-0802 And CVE-2017-11882☆166Jan 12, 2018Updated 8 years ago
- Will to be a niubility scan-framework☆517Jul 1, 2025Updated last year
- All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities☆804Nov 7, 2021Updated 4 years ago
- Powershell C2 Server and Implants☆574Nov 11, 2019Updated 6 years ago
- Port of eternal blue exploits to powershell☆151Jun 3, 2017Updated 9 years ago
- Run remote system commands from Oracle connection - oracle exec command perl☆12Jun 6, 2015Updated 11 years ago
- Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords☆50Oct 24, 2017Updated 8 years ago
- Implementing Kerberoast attack fully in python☆71Sep 29, 2018Updated 8 years ago
- PoC for CVE-2018-15133 (Laravel unserialize vulnerability)☆258Mar 10, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- 基于 Docker 的真实应用测试环境☆260Aug 14, 2023Updated 3 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Mar 27, 2017Updated 9 years ago
- Encode powershell payload into bat files☆154Feb 1, 2018Updated 8 years ago
- Learn how to get a reverse shell from JIRA application server☆23Dec 2, 2018Updated 7 years ago
- TCP tunneling over HTTP/HTTPS for web application servers☆742Aug 12, 2016Updated 10 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆172Jun 8, 2017Updated 9 years ago