jackson-rce-via-spel
by irsl
An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
AI summary
Exploitation demo
A proof-of-concept project demonstrating exploitation of a vulnerability in Jackson-databind via Spring application contexts and expressions.
- stars
- 121
- forks
- 63
- watching
- 5
Similar projects
Found by comparing what the projects do, not just their names.
RCE exploit
A proof-of-concept project demonstrating a Jackson RCE vulnerability in Ruby that allows an attacker to execute arbitrary commands on the system.
Remote code execution vulnerability
A project that details and demonstrates the impact of a remote code execution vulnerability in a popular Java library used for JSON data binding.
RCE vulnerability demonstration
A proof of concept project demonstrating a remote code execution vulnerability in Apache Solr via deserialization of untrusted data
Exploit samples
A repository of remote code execution exploit samples and proof-of-concepts for Windows.
XML exploit demo
A proof-of-concept web application demonstrating an XML External Entity vulnerability
Exploit demo
An exploit demonstrating code execution vulnerabilities in macOS Sierra using Safari and WindowServer
rosehgal/binexp1.3K
Binary Exploitation Tutorials
A tutorial project on exploiting binary files and writing payloads to manipulate program behavior
Kubernetes exploit demo
Demonstrates an escape vulnerability in Kubernetes allowing privileged access to a pod through symlinks
Exploits
A collection of Proof Of Concept exploits and demonstrations
Vulnerability demo
An example C program demonstrating common types of vulnerabilities, designed to be fuzzed using various tools.
JSON parser exploit
This project demonstrates a remote code execution vulnerability in a popular JSON parsing library using a crafted input to exploit the RMI protocol.
RCE exploit
Exploits a remote code execution vulnerability in WebLogic Coherence using Java
jesalg/radd124
API demo
A Rails and AngularJS application demonstrating authentication and RESTful API architecture
Vulnerability testing demo
A demo project to integrate the SecTester JS SDK framework into unit tests and CI pipelines for vulnerability testing
Exploitation tool
A tool that exploits vulnerabilities in web servers to execute arbitrary code
