zerothoughts/spring-jndi external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

zerothoughts/spring-jndi

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/zerothoughts/spring-jndi)

Close

zerothoughts / spring-jndiView on GitHubMore

• External links
• Readme badge

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

☆116May 17, 2019Updated 6 years ago

Alternatives and similar repositories for spring-jndi

Users that are interested in spring-jndi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• zerothoughts / jndipoc

  View on GitHub
  Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
  ☆42Jan 22, 2016Updated 10 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆403Dec 16, 2022Updated 3 years ago
• jvazquez-r7 / ht_win32k_info_leak

  View on GitHub
  ☆10Aug 13, 2015Updated 10 years ago
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆174Jul 21, 2016Updated 9 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 3 years ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆387Apr 16, 2022Updated 3 years ago
• shengqi158 / Jackson-databind-RCE-PoC

  View on GitHub
  ☆83Jan 11, 2018Updated 8 years ago
• ikkisoft / SerialKiller

  View on GitHub
  Look-Ahead Java Deserialization Library
  ☆424Jan 7, 2020Updated 6 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE

  View on GitHub
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆67Nov 20, 2019Updated 6 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆255Jul 1, 2016Updated 9 years ago
• GrrrDog / ZeroNights-HackQuest-2016

  View on GitHub
  2 web tasks from ZeroNights HackQuest 2016
  ☆50Mar 24, 2017Updated 9 years ago
• NickstaDB / BaRMIe

  View on GitHub
  Java RMI enumeration and attack tool.
  ☆742Sep 28, 2017Updated 8 years ago
• QAX-A-Team / SerialWriter

  View on GitHub
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆105Feb 28, 2018Updated 8 years ago
• mbechler / serianalyzer

  View on GitHub
  A static byte code analyzer for Java deserialization gadget research
  ☆252Apr 17, 2017Updated 8 years ago
• Serverless GPU API endpoints on Runpod - Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• federicodotta / Java-Deserialization-Scanner

  View on GitHub
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆803Nov 7, 2021Updated 4 years ago
• shadow-horse / CVE-2019-17571

  View on GitHub
  Apache Log4j 1.2.X存在反序列化远程代码执行漏洞
  ☆78Dec 25, 2019Updated 6 years ago
• adamyordan / cve-2019-1003000-jenkins-rce-poc

  View on GitHub
  Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…
  ☆315Apr 1, 2019Updated 7 years ago
• veracode-research / spring-view-manipulation

  View on GitHub
  When MVC magic turns black
  ☆297Sep 4, 2020Updated 5 years ago
• LinkedInAttic / sometime

  View on GitHub
  A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities
  ☆60Apr 18, 2017Updated 8 years ago
• pwntester / JVMDeserialization

  View on GitHub
  PoC for Scala and Groovy
  ☆14Apr 4, 2016Updated 10 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆210Mar 10, 2019Updated 7 years ago
• SZFsir / laravel_POP_RCE

  View on GitHub
  laravel 5.8 rce pop chain
  ☆26Oct 27, 2019Updated 6 years ago
• talos-vulndev / advisories

  View on GitHub
  ☆25Apr 8, 2016Updated 10 years ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆836Jun 7, 2022Updated 3 years ago
• lightless233 / Java-Unserialization-Study

  View on GitHub
  QAQ Just study unserialize vulnerabilities in Java :)
  ☆196Aug 22, 2018Updated 7 years ago
• schierlm / JavaPayload

  View on GitHub
  JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfiguratio…
  ☆126Jan 20, 2025Updated last year
• Ruil1n / after-deserialization-attack

  View on GitHub
  Java After-Deserialization Attack
  ☆78Apr 26, 2021Updated 4 years ago
• angelwhu / java_unserialize

  View on GitHub
  java unserialize vulnerability payload
  ☆21Apr 20, 2019Updated 6 years ago
• SecureSkyTechnology / study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

  View on GitHub
  Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
  ☆107Dec 13, 2017Updated 8 years ago
• hengyunabc / dubbo-apache-commons-collections-bug

  View on GitHub
  演示dubbo rpc Apache commons collections 的Java序列化漏洞
  ☆42Nov 13, 2015Updated 10 years ago
• mbechler / marshalsec

  View on GitHub
  ☆3,670Jan 9, 2025Updated last year
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆581Jan 28, 2020Updated 6 years ago
• Bare Metal GPUs on DigitalOcean Gradient AI • Ad
  Purpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
• rebeyond / memShell

  View on GitHub
  a webshell resides in the memory of java web server
  ☆701Jun 26, 2018Updated 7 years ago
• vulhub / java

  View on GitHub
  Java every minor versions.
  ☆75Apr 19, 2023Updated 2 years ago
• Cryin / JavaID

  View on GitHub
  java source code static code analysis and danger function identify prog
  ☆536Feb 18, 2019Updated 7 years ago
• airman604 / jdbc-backdoor

  View on GitHub
  A fake JDBC driver that allows OS command execution.
  ☆126Oct 2, 2022Updated 3 years ago
• l1nk3rlin / CVE-2019-2890

  View on GitHub
  ☆85Dec 6, 2019Updated 6 years ago
• pwntester / XStreamPOC

  View on GitHub
  POC for XStream RCE
  ☆13Dec 23, 2013Updated 12 years ago
• kxcode / JNDI-Exploit-Bypass-Demo

  View on GitHub
  Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>
  ☆268Jun 17, 2022Updated 3 years ago