jndi

There are 0 repository under jndi topic.

• qi4L / JYso

  It can be either a JNDIExploit or a ysoserial.

  javaattackjndi-injectionweb-securitymem-shellmiddleware-echojndildaprmigadgetysoserial
  Language:Java 1179

• wuba / Antenna

  Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

  oastantennaftphttpjsonpldapmysqlrmixssdjangopythoncybersecuritydnslogvulnerability-scannersdns-rebindingjndi
  Language:JavaScript 711

• cckuailong / JNDI-Injection-Exploit-Plus

  80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

  exploitinjectionjavajndiysoserial
  Language:Java 579

• Whoopsunix / JavaRce

  实战场景较通用的 Java Rce 相关漏洞的利用方式 | Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios

  commandexpressionjdbcmemshellrceechoserializationjavainjectsecjndi
  Language:Java 288

• r00tSe7en / JNDIMonitor

  一个LDAP请求监听器，摆脱dnslog平台

  jndildaplog4j2
  Language:Java 274

• 0x727 / JNDIExploit

  一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

  jndiexpexploitjndiexploit
  Language:Java 222

• X1r0z / JNDIMap

  JNDI 注入利用工具, 支持 RMI 和 LDAP 协议, 包含多种高版本 JDK 绕过方式

  javajndildaprmibypassdeserializejdbc
  Language:Java 145

• alexbakker / log4shell-tools

  Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046

  cve-2021-44228cve-2021-45046dnsjndildaplog4jlog4shell
  Language:Go 84

• zhzyker / logmap

  Log4j jndi injection fuzz tool

  fuzz-testinglog4j2injectionjndicve-2021-44228log4shellcve-2021-45046
  Language:Python 72

• future-client / CVE-2021-44228

  Abuse Log4J CVE-2021-44228 to patch CVE-2021-44228 in vulnerable Minecraft game sessions to prevent exploitation in the session :)

  cve-2021-44228log4jminecraftexploitrceldapjndi
  Language:Java 67

• For-ACGN / Log4Shell

  Check, exploit, generate class, obfuscate, TLS, ACME about log4j2 vulnerability in one Go program.

  log4j2exploitspoclog4shellcve-2021-44228obfuscateacmelog4j2-expjndildapjava
  Language:Go 57

• cokeBeer / pyyso

  pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550, CommonsBeanutils1 no cc, JRMPClient, high version JDK Bypass, Fake MySQL for JDBC attack

  javajndipythonrmiserializationexploitgadgetpocshirojrmpldapjdk7u21jdk8u20jdbcmysql
  Language:Python 47

• HackJava / JNDI

  《JNDI-深入理解Java万恶之源》

  hackjava0e0wjndi
  32

• Al1ex / CVE-2021-2109

  CVE-2021-2109 && Weblogic Server RCE via JNDI

  cve-2021-2109weblogicrcejndi
  Language:Java 31

• juliojsb / jboss-cli-snippets-compilation

  A repository of Jboss CLI snippets

  jbossclidatasourcejndisnippetswildflyjavajuliojsbredhatapplication-server
  24

• ChloePrime / fix4log4j

  log4j0dayfixminecraft-modjndildap
  Language:Java 20

• ncredinburgh / secure-tomcat-datasourcefactory

  A drop in replacement for the standard Tomcat DataSourceFactory that allows the database connection password to be encrypted using a symmetric key for the purposes of security.

  tomcatsecurityencryptionjndipassworddatasource
  Language:Java 14

• LeakIX / l9fuzz

  Help fuzz various protocols and waits for ping backs Integrates LDAP server and JNDI payload

  log4jjndifuzzertcp
  Language:Go 11

• LoliKingdom / NukeJndiLookupFromLog4j

  Selection of ways to remove JndiLookup in now obsolete Minecraft versions, or versions that still have log4j < 2.10 and is unable to use `-Dlog4j2.formatMsgNoLookups=true`

  exploitjavajndijndi-lookupslog4jlog4j2minecraftrcesecurity
  Language:Java 11

• rakutentech / jndi-ldap-test-server

  A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.

  jndildapvulnerability-detectionlog4jlog4j2
  Language:Go 10

• ZhangZiSheng001 / dbcp-demo

  源码详解系列(四) ------ DBCP2的使用和分析（包括JNDI和JTA支持）

  dbcpjndijtadatasources
  Language:Java 8

• nil-malh / JNDI-Exploit

  JNDI-Exploit is an exploit on Java Naming and Directory Interface (JNDI) from the deleted project fromthe user feihong on GitHub.

  jndi
  Language:Java 6

• rndinfosecguy / yal4ss

  yet another log4shell scanner

  log4jlog4j2log4shellpythonpentestpentestingpentesting-toolspentesting-tooljndijndi-lookupslog4j-rce
  Language:Python 6

• cokeBeer / logi

  Logi is a LDAP/MySQL server focusing on pingback deserialize recon and exploit.

  javacustomdeserializeexploitgadgetgoldapprobeserverwordlistcommons-beanutilsjndilog4jcve-2020-14644jdbcmysql
  Language:Go 5

• mohyehia / spring-boot-multiple-jndi-datasources

  Spring boot application that connects to multiple databases using multiple JNDI dataSources configured on apache tomcat server.

  spring-boot-2spring-data-jpamysqlhibernatejndimaven
  Language:Java 5

• twelvesec / RogueLDAP

  A lightweight rogue LDAP server which is a modified version of the JNDIExploit-1

  ldapjndiexploitrogue
  Language:Java 5

• ZhangZiSheng001 / c3p0-demo

  源码详解系列(五) ------ C3P0的使用和分析（包括JNDI）

  datasourcec3p0jndi
  Language:Java 5

• Avento / Apache_Druid_JNDI_Vuln

  Apache Druid JNDI Vulnerable

  jndikafkacve-2023-25194
  Language:Python 4

• kwakutwumasi / Quakearts-Webtools

  My Utility, Servlet 3.0, JAX-RS, CDI, JTA, JSF Tag Libraries and JCA classes for web application development

  cdicdi2java8java-8jsfjsf2bootstrap3jndijcajtaservletjaasresteasyjcehibernatejpamaven-archetypejax-rsjboss-resteasymicroservices
  Language:Java 3

• lenisha / spring-jndi-appservice

  Example using Azure MSI library from Spring/JNDI application https://github.com/lenisha/msi-mssql-jdbc article:

  azure-app-servicemsimanaged-service-identityazuretomcatspringjndiapplication-insights
  Language:Java 3

• mzlogin / CVE-2021-44228-Demo

  Apache Log4j2 CVE-2021-44228 RCE Demo with RMI and LDAP

  cve-2021-44228jndildaprmi
  Language:Java 3

• lsac / nifi-jms-jndi

  nifijmsjndisolace
  Language:Java 2

• Sudarshan-Gowda / Spring-Mvc-Quartz-Scheduler

  Sending free Email from Gmail based on Scheduler

  schedulerspring-mvcjndidatasource
  Language:Java 2

• Chakib-DAII / jms-spring-tibco-sample

  Demo project for Jms using JNDI in point to point and pub/sub and using Spring Boot and Jms template with tibco message broker

  javaspringspring-bootjmsjndimessage-brokermessagingpoint-to-pointpublish-subscribequeuetibcotopic
  Language:Java 1

• NicorDesigns / SpringJDBCGettingStarted

  Getting started with JDBC and Spring using MariaDB and Intellij

  jdbcjndispring
  Language:Java 1

• zrquan / jndi-deceiver

  Malicious servers for JNDI injection attacks

  jndisecurity
  Language:Kotlin 1