Repositories list

• rogue-jndi-ng

  Public
  A modern fork of Rogue JNDI

  Java

  •

  MIT License

  •221•2•0•0•Updated Dec 20, 2024Dec 20, 2024

• contalks

  Public
  Slides for public conference talks

  0•1•0•0•Updated Dec 10, 2024Dec 10, 2024

• DNSrebinder

  Public
  A python based minimal DNS server to test/verify DNS rebinding attacks

  dnsrebinding

  Python

  •5•37•1•2•Updated May 15, 2023May 15, 2023

• mjet

  Public archive
  MOGWAI LABS JMX exploitation toolkit

  Python

  •

  MIT License

  •87•198•0•0•Updated Mar 13, 2023Mar 13, 2023

• jarjarbigs

  Public
  A python script to merge multiple jar files for easier debugging via JD-Eclipse

  Python

  •12•61•1•0•Updated Jan 13, 2023Jan 13, 2023

• CVE-2017-1000486

  Public
  Proof of Concept Exploit for PrimeFaces 5.x EL Injection (CVE-2017-1000486)

  Python

  •2•9•0•0•Updated Sep 9, 2022Sep 9, 2022

• Laravel-Queue-Exploit-Environment

  Public
  Environment which demonstrates exploitation of Laravel Queues

  PHP

  •4•4•0•0•Updated Aug 9, 2022Aug 9, 2022

• Blue-team-app-Office-365-and-Azure-1

  Public
  10•0•0•0•Updated May 10, 2022May 10, 2022

• rmi-deserialization

  Public
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"

  Java

  •6•101•1•0•Updated Sep 20, 2019Sep 20, 2019

• deserialization-filter-blacklists

  Public
  Native Java serialization filter blacklist for common gadgets

  3•20•0•0•Updated Sep 12, 2019Sep 12, 2019

• canape-workshop2018

  Public
  Material from our CANAPE workshop

  Python

  •2•32•0•0•Updated Nov 26, 2018Nov 26, 2018

• dotCMSTokenGenerator

  Public
  PoC JWT Token Generator, written by Timo Müller

  Java

  •0•3•0•0•Updated Jul 4, 2018Jul 4, 2018

• dotCMSSigningKeyGenerator

  Public
  Generates a new random signing key for dotCMS 4.3.3 installations. Written by Timo Müller

  Java

  •0•1•0•0•Updated Jul 4, 2018Jul 4, 2018