A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Updated 2024-02-08 14:34:04 -10:00
Updated 2024-01-30 13:45:09 -10:00
An intentionally-vulnerable GWT-based web application to test tooling and techniques
Updated 2023-12-18 07:13:16 -10:00
Kafka Connect Store Partitioner by custom fields and time; also removing topic from s3 file path
Updated 2023-09-18 07:05:29 -09:00
Data-driven automation platform
Updated 2023-06-13 13:54:09 -09:00
Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
Updated 2021-02-19 08:47:05 -10:00
RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
Updated 2020-12-08 02:51:04 -10:00
Proactively-secure Accumulo with Cryptographic Enforcement (PACE) adds client-side encryption and signatures to Accumulo.
Updated 2017-06-05 10:06:09 -09:00