rmi-deserialization
by mogwailabs
Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
AI summary
RMI vulnerability demo
Demonstrating vulnerabilities in Java RMI services
- stars
- 101
- forks
- 6
- watching
- 4
Similar projects
Found by comparing what the projects do, not just their names.
RMI vulnerability scanner
A tool used to identify and exploit security vulnerabilities in Java RMI endpoints
Deserialization vulnerability lab
A lab project providing code samples and tools to understand deserialization vulnerabilities in Java applications.
Deserialization exploit
Reproducing and analyzing the CVE-2021-29505 vulnerability in Java's XStream deserialization process
Deserialization scanner
Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities
Deserialization scanner
A plugin for detecting and exploiting vulnerabilities in Java deserialization
RMI Exploit Tool
A tool designed to exploit vulnerabilities in the Java RMI system using various techniques such as deserialization and socket-based attacks.
RCE vulnerability demonstration
A proof of concept project demonstrating a remote code execution vulnerability in Apache Solr via deserialization of untrusted data
Deserialization Tool
A Burp extension that enables Java Deserialization Attacks using a payload generator tool
Linked Data Generator
A Java library that generates high-quality Linked Data from multiple semi-structured data sources using RML rules.
RMI scanner
An enumeration and attack tool for insecure RMI services
Vulnerability scanner
A Burp Suite Extender to identify Java Deserialization vulnerabilities in client requests and server responses.
Deserialization tester
A tool to detect and exploit deserialization vulnerabilities in Java and .NET applications.
Vulnerability scanner
An active Java deserialization vulnerability identifier and exploiter
Vulnerability simulator
An Android app designed to demonstrate common web application vulnerabilities and provide training in secure coding practices.
Java deserialization guide
A cheat sheet providing guidance on deserialization vulnerabilities in Java applications
