Ecosyste.ms: Repos

An open API service providing repository metadata for many open source software ecosystems.

GitHub topics: jndi

Repositories

X1r0z/JNDIMap

JNDI 注入利用工具, 支持 RMI 和 LDAP 协议, 包含多种高版本 JDK 绕过方式 | A JNDI injection exploit tool that supports RMI and LDAP protocols, including a variety of methods to bypass higher-version JDK

Language: Java - Size: 544 KB - Last synced: 1 day ago - Pushed: 1 day ago - Stars: 173 - Forks: 15

cherkavi/java-web

skeletons for java web server

Language: Java - Size: 2.26 MB - Last synced: 5 days ago - Pushed: over 1 year ago - Stars: 1 - Forks: 0

Whoopsunix/JavaRce

实战场景较通用的 Java Rce 相关漏洞的利用方式 | Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios

Language: Java - Size: 504 KB - Last synced: 8 days ago - Pushed: 8 days ago - Stars: 290 - Forks: 35

qi4L/JYso

It can be either a JNDIExploit or a ysoserial.

Language: Java - Size: 264 MB - Last synced: 8 days ago - Pushed: 12 days ago - Stars: 1,192 - Forks: 153

future-client/CVE-2021-44228

Abuse Log4J CVE-2021-44228 to patch CVE-2021-44228 in vulnerable Minecraft game sessions to prevent exploitation in the session :)

Language: Java - Size: 3.91 KB - Last synced: 10 days ago - Pushed: over 2 years ago - Stars: 68 - Forks: 3

jcallinan/log4j-powershell-checker Fork of crypt0jan/log4j-powershell-checker

log4j PowerShell Checker - looking for CVE 2021 44228 log4j LDAP JNDI exploit

Language: PowerShell - Size: 47.9 KB - Last synced: 19 days ago - Pushed: over 2 years ago - Stars: 0 - Forks: 0

topicusonderwijs/naming-kubernetes

Java naming context (JNDI) for WildFly using Kubernetes as backend.

Language: Java - Size: 249 KB - Last synced: 19 days ago - Pushed: 19 days ago - Stars: 1 - Forks: 1

stefan-matcovici/Java-Technologies--Labs

Implementation of Java Technologies Master Course Laboratories

Language: Java - Size: 307 KB - Last synced: 28 days ago - Pushed: about 5 years ago - Stars: 0 - Forks: 2

For-ACGN/Log4Shell

Check, exploit, generate class, obfuscate, TLS, ACME about log4j2 vulnerability in one Go program.

Language: Go - Size: 4.6 MB - Last synced: 25 days ago - Pushed: over 2 years ago - Stars: 57 - Forks: 19

PointBlueTechnology/JNDITrustManager

A simple Trust Manager to allow JNDI connections to trust any certificate

Language: Java - Size: 22.5 KB - Last synced: about 2 months ago - Pushed: over 6 years ago - Stars: 1 - Forks: 1

aman-1998/Full_Stack_Java_Development_Part_I

This is a tutorial to learn full stack development using Java, JSP, Servlets, JNDI, JDBC, Hibernate, JavaScript and CSS. The IDE used is Eclipse.

Language: CSS - Size: 37.2 MB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 0 - Forks: 0

cckuailong/JNDI-Injection-Exploit-Plus

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

Language: Java - Size: 85.2 MB - Last synced: 2 months ago - Pushed: 2 months ago - Stars: 541 - Forks: 74

pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550, CommonsBeanutils1 no cc, JRMPClient, high version JDK Bypass, Fake MySQL for JDBC attack

Language: Python - Size: 39.1 KB - Last synced: 8 days ago - Pushed: over 1 year ago - Stars: 47 - Forks: 3

alexbakker/log4shell-tools

Tool that runs a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046

Language: Go - Size: 91.8 KB - Last synced: 5 days ago - Pushed: about 1 month ago - Stars: 84 - Forks: 14

HackJava/JNDI

《JNDI-深入理解Java万恶之源》

Size: 389 MB - Last synced: 3 months ago - Pushed: 6 months ago - Stars: 30 - Forks: 12

r00tSe7en/JNDIMonitor

一个LDAP请求监听器，摆脱dnslog平台

Language: Java - Size: 139 KB - Last synced: 3 months ago - Pushed: about 1 year ago - Stars: 269 - Forks: 61

wuba/Antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

Language: JavaScript - Size: 4.99 MB - Last synced: 3 months ago - Pushed: 11 months ago - Stars: 706 - Forks: 77

viniduminsara/JavaEE_POS_Backend

This JavaEE-based Point of Sale (POS) System API provides a simple and efficient way to manage customers, items, orders, and order details. It is designed for ease of use in building POS applications.

Language: Java - Size: 4.93 MB - Last synced: 4 months ago - Pushed: 4 months ago - Stars: 0 - Forks: 0

im-happy-coder/docker-devland-application

docker devland web application

Language: Java - Size: 71.3 KB - Last synced: 4 months ago - Pushed: over 1 year ago - Stars: 0 - Forks: 0

parkgang/helloworld-tomcat-jndi-encryption

JNDI를 암호화하고 복호화 해주는 코드

Language: Java - Size: 138 KB - Last synced: 15 days ago - Pushed: almost 2 years ago - Stars: 0 - Forks: 0

rndinfosecguy/yal4ss

yet another log4shell scanner

Language: Python - Size: 6.84 KB - Last synced: 6 months ago - Pushed: over 2 years ago - Stars: 6 - Forks: 0

0x727/JNDIExploit

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

Language: Java - Size: 81.2 MB - Last synced: 6 months ago - Pushed: over 1 year ago - Stars: 189 - Forks: 18

SanjinKurelic/UpdaterJavaFX

Program developed for college, do not use it in production nor as example of good SOLID code.

Language: Java - Size: 196 KB - Last synced: 7 months ago - Pushed: over 6 years ago - Stars: 0 - Forks: 0

mzlogin/CVE-2021-44228-Demo

Apache Log4j2 CVE-2021-44228 RCE Demo with RMI and LDAP

Language: Java - Size: 36 MB - Last synced: 2 months ago - Pushed: over 2 years ago - Stars: 3 - Forks: 3

twelvesec/RogueLDAP

A lightweight rogue LDAP server which is a modified version of the JNDIExploit-1

Language: Java - Size: 126 MB - Last synced: 3 months ago - Pushed: over 1 year ago - Stars: 5 - Forks: 4

MrAbdelaziz/RMI-SERVER 📦

Language: Java - Size: 11.7 KB - Last synced: 9 months ago - Pushed: over 3 years ago - Stars: 0 - Forks: 0

MrAbdelaziz/RMI-CLIENT 📦

Language: Java - Size: 8.79 KB - Last synced: 9 months ago - Pushed: over 3 years ago - Stars: 0 - Forks: 0

LoliKingdom/NukeJndiLookupFromLog4j

Selection of ways to remove JndiLookup in now obsolete Minecraft versions, or versions that still have log4j < 2.10 and is unable to use `-Dlog4j2.formatMsgNoLookups=true`

Language: Java - Size: 143 KB - Last synced: 9 months ago - Pushed: over 2 years ago - Stars: 11 - Forks: 1

cokeBeer/logi

Logi is a LDAP/MySQL server focusing on pingback deserialize recon and exploit.

Language: Go - Size: 341 KB - Last synced: 9 months ago - Pushed: over 1 year ago - Stars: 5 - Forks: 0

kwakutwumasi/Quakearts-Webtools

My Utility, Servlet 3.0, JAX-RS, CDI, JTA, JSF Tag Libraries and JCA classes for web application development

Language: Java - Size: 191 MB - Last synced: 10 months ago - Pushed: 10 months ago - Stars: 3 - Forks: 0

juliojsb/jboss-cli-snippets-compilation

A repository of Jboss CLI snippets

Size: 10.7 KB - Last synced: 10 months ago - Pushed: almost 5 years ago - Stars: 24 - Forks: 4

CrisCorreaS/api-almacen-dbcp2-database-connection

Proyecto maven de desarrollo y conexión a una base de datos en phpMyAdmin, utilizando un MariaDB JDBC Driver

Language: Java - Size: 830 KB - Last synced: 5 months ago - Pushed: 5 months ago - Stars: 0 - Forks: 0

Dhinesh-Se/JNDI-CRUD-

JNDI Crud using spring tool suite in springMVC

Language: Java - Size: 30.3 KB - Last synced: 11 months ago - Pushed: 11 months ago - Stars: 0 - Forks: 0

ncredinburgh/secure-tomcat-datasourcefactory

A drop in replacement for the standard Tomcat DataSourceFactory that allows the database connection password to be encrypted using a symmetric key for the purposes of security.

Language: Java - Size: 33.2 KB - Last synced: 9 months ago - Pushed: over 4 years ago - Stars: 15 - Forks: 11

Avento/Apache_Druid_JNDI_Vuln

Apache Druid JNDI Vulnerable

Language: Python - Size: 14.6 KB - Last synced: about 1 year ago - Pushed: about 1 year ago - Stars: 0 - Forks: 0

ChloePrime/fix4log4j

Language: Java - Size: 83 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 21 - Forks: 2

dattack/standalone-jndi

A JNDI implementation to use with your standalone applications.

Language: Java - Size: 187 KB - Last synced: 9 months ago - Pushed: 10 months ago - Stars: 1 - Forks: 2

nil-malh/JNDI-Exploit

JNDI-Exploit is an exploit on Java Naming and Directory Interface (JNDI) from the deleted project fromthe user feihong on GitHub.

Language: Java - Size: 94.7 KB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 5 - Forks: 8

Al1ex/CVE-2021-2109

CVE-2021-2109 && Weblogic Server RCE via JNDI

Language: Java - Size: 46.4 MB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 30 - Forks: 9

marschall/policy-registration-factory 📦

A JNDI ObjectFactory for a PolicyRegistration.

Language: Java - Size: 14.6 KB - Last synced: 10 months ago - Pushed: over 6 years ago - Stars: 0 - Forks: 0

zhzyker/logmap

Log4j jndi injection fuzz tool

Language: Python - Size: 28.3 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 68 - Forks: 21

mohyehia/spring-boot-multiple-jndi-datasources

Spring boot application that connects to multiple databases using multiple JNDI dataSources configured on apache tomcat server.

Language: Java - Size: 57.6 KB - Last synced: about 1 year ago - Pushed: over 4 years ago - Stars: 4 - Forks: 5

rakutentech/jndi-ldap-test-server

A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.

Language: Go - Size: 15.6 KB - Last synced: 28 days ago - Pushed: over 2 years ago - Stars: 10 - Forks: 4

Jatinder-Singh1064/java-jms-queue-demo

This is a small application to demonstrate the Java Messaging Service (JMS) API with using MessageQueue to send/receive the messages. The Glassfish Server is used to create the JMS Connection Factories and Destination Resource.

Language: Java - Size: 4.88 KB - Last synced: about 1 year ago - Pushed: almost 2 years ago - Stars: 0 - Forks: 0

Chakib-DAII/jms-spring-tibco-sample

Demo project for Jms using JNDI in point to point and pub/sub and using Spring Boot and Jms template with tibco message broker

Language: Java - Size: 129 KB - Last synced: about 1 year ago - Pushed: about 2 years ago - Stars: 1 - Forks: 1

lenisha/spring-jndi-appservice

Example using Azure MSI library from Spring/JNDI application https://github.com/lenisha/msi-mssql-jdbc article:

Language: Java - Size: 3.89 MB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 3 - Forks: 5

zrquan/jndi-deceiver

Malicious servers for JNDI injection attacks

Language: Kotlin - Size: 137 KB - Last synced: about 1 year ago - Pushed: almost 2 years ago - Stars: 1 - Forks: 0

erickrr-bd/TekiumLog4jApp

Java application vulnerable to CVE-2021-44228

Language: Java - Size: 35.1 MB - Last synced: about 1 year ago - Pushed: about 2 years ago - Stars: 0 - Forks: 0

LeakIX/l9fuzz

Help fuzz various protocols and waits for ping backs Integrates LDAP server and JNDI payload

Language: Go - Size: 22.5 KB - Last synced: 3 months ago - Pushed: over 2 years ago - Stars: 11 - Forks: 3

NicorDesigns/SpringJDBCGettingStarted

Getting started with JDBC and Spring using MariaDB and Intellij

Language: Java - Size: 83 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 0 - Forks: 0

streamlined2/JEE5PetProject

Pet project to practice JEE skills

Language: Java - Size: 186 KB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 1 - Forks: 0

Sudarshan-Gowda/Spring-Mvc-Quartz-Scheduler

Sending free Email from Gmail based on Scheduler

Language: Java - Size: 6.89 MB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 2 - Forks: 1

jitwxs/geekbang-lessons Fork of mercyblitz/geekbang-lessons

【极客时间】小马哥的Java项目实战营

Language: Java - Size: 8.1 MB - Last synced: about 1 year ago - Pushed: about 3 years ago - Stars: 0 - Forks: 0

Related Keywords

jndi 65 java 21 ldap 15 jdbc 10 log4j 9 rmi 9 exploit 8 cve-2021-44228 7 log4j2 7 servlet 5 security 5 tomcat 5 mysql 5 log4shell 4 datasource 4 jpa 4 spring 4 jsf 3 serialization 3 gadget 3 wildfly 3 jndi-lookups 3 rce 3 jsp 3 spring-mvc 3 python 3 password 3 cve-2021-45046 2 jms 2 minecraft 2 injection 2 standalone 2 maven 2 poc 2 cdi 2 docker 2 ejb3 2 java-8 2 spring-boot 2 primefaces 2 jax-rs 2 encryption 2 ysoserial 2 deserialize 2 hibernate 2 jsf2 2 jta 2 ejb 2 jboss 2 xml 2 kafka 1 0day 1 fix 1 minecraft-mod 1 java8 1 standalone-applications 1 cve-2021-2109 1 weblogic 1 jndi-objectfactory 1 fuzz-testing 1 spring-boot-2 1 jaas 1 spring-data-jpa 1 vulnerability-detection 1 cdi2 1 connectionfactory 1 middleware-echo 1 mariadb-database 1 eclipse-ide 1 dbcp2 1 database-design 1 crud-operations 1 snippets 1 phpmyadmin 1 redhat 1 juliojsb 1 springtoolsuite 1 cli 1 application-server 1 resteasy 1 microservices 1 maven-archetype 1 jce 1 jca 1 cve-2023-25194 1 jboss-resteasy 1 oracle-10g 1 oracle-toplink 1 weblogic-11g 1 scheduler 1 microprofile-config 1 spi 1 pojo 1 javaee 1 postgresql 1 web-app 1 springboot2 1 console 1 glassfish 1 jee 1