fastjson-RCE

JSON parser exploit

This project demonstrates a remote code execution vulnerability in a popular JSON parsing library using a crafted input to exploit the RMI protocol.

fastjson-1.2.47

GitHub

66 stars
0 watching
18 forks
last commit: over 5 years ago

Related projects:

Repository Description Stars
jas502n/jackson-cve-2020-8840 A project that details and demonstrates the impact of a remote code execution vulnerability in a popular Java library used for JSON data binding. 73
jas502n/cve-2019-12384 A proof-of-concept project demonstrating a Jackson RCE vulnerability in Ruby that allows an attacker to execute arbitrary commands on the system. 97
eddelbuettel/rcppsimdjson A set of C++ bindings for a fast JSON parsing library 118
nschaffner/fastjson A Java library for converting objects to and from JSON with high performance and support for complex objects 1
bigsizeme/fastjson-check A tool for detecting and generating payload vulnerabilities in JSON data 369
erikonbike/parse-next-json-value A parser for extracting valid JSON values from strings with extraneous characters 1
recp/json A lightweight JSON parsing library that creates a DOM-like data structure 24
authorizon/fastapi_websocket_rpc Provides a robust and production-ready bidirectional JSON RPC channel over Websockets. 7
python-rapidjson/python-rapidjson A fast C++ JSON parser and serialization library wrapped in a Python 3 extension. 508
rudolph-miller/jonathan A JSON encoder and decoder implemented in Common Lisp. 164
kunalsin9h/livejq An alternative to jq with continuous parsing support and filtering capabilities for handling invalid JSON without crashing. 15
dmitrii-eremin/jfes A minimalistic JSON parser for embedded systems 70
tktech/pysimdjson Fast JSON parsing for Python, using SIMD instructions when available 648
y4er/cve-2020-2883 Exploits a remote code execution vulnerability in WebLogic Coherence using Java 178
jsonapi-serializer/jsonapi-serializer A fast JSON serialization library for Ruby objects 1,410