https://github.com/coalfire-research/java-deserialization-exploits

A collection of curated Java Deserialization Exploits
https://github.com/coalfire-research/java-deserialization-exploits

cve deserialization-rce exploits java

Last synced: 3 months ago
JSON representation

A collection of curated Java Deserialization Exploits

• Host: GitHub
• URL: https://github.com/coalfire-research/java-deserialization-exploits
• Owner: Coalfire-Research
• Created: 2016-05-31T16:23:08.000Z (over 8 years ago)
• Default Branch: main
• Last Pushed: 2021-05-16T23:10:49.000Z (over 3 years ago)
• Last Synced: 2024-07-31T13:15:43.194Z (3 months ago)
• Topics: cve, deserialization-rce, exploits, java
• Language: Python
• Homepage:
• Size: 51.5 MB
• Stars: 591
• Watchers: 43
• Forks: 219
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-security-collection - **465**星

README

        
# Java Deserialization Exploits

A collection of curated Java Deserialization Exploits

Currently this repo contains exploits for the following vulnerabilities:

- Cisco Prime Infrastructure Java Deserialization RCE (CVE-2016-1291)

- IBM WebSphere Java Object Deserialization RCE (CVE-2015-7450)

- OpenNMS Java Object Deserialization RCE (No CVE ?)

- Jenkins CLI RMI Java Deserialization RCE (CVE-2015-8103)

- Jenkins Groovy XML RCE (CVE-2016-0792)

- Oracle WebLogic Server Java Object Deserialization RCE (CVE-2016-3510)

- JBoss Java Deserialization RCE (CVE-2015-7501)