CVE-2021-29505
by MyBlackManba
对CVE-2021-29505进行复现,并分析学了下Xstream反序列化过程
AI summary
Deserialization exploit
Reproducing and analyzing the CVE-2021-29505 vulnerability in Java's XStream deserialization process
- stars
- 5
- forks
- 2
- watching
- 2
Similar projects
Found by comparing what the projects do, not just their names.
Exploit code
An exploit for a Java vulnerability
SMB exploit
An exploit tool for a Windows SMBv3 vulnerability
RCE exploit
Exploits a remote code execution vulnerability in WebLogic Coherence using Java
Vulnerability exploit
An exploit for a Java-based LDAP vulnerability
Exploit
An exploit demonstrating a Kubernetes validation admission webhook bypass vulnerability
Deserialization scanner
Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities
Browser exploit
Exploits a vulnerability in outdated Shockwave Flash player to gain control of Internet Explorer and execute malicious code.
Deserialization vulnerability lab
A lab project providing code samples and tools to understand deserialization vulnerabilities in Java applications.
Remote code execution vulnerability
A project that details and demonstrates the impact of a remote code execution vulnerability in a popular Java library used for JSON data binding.
Denial-of-Service exploit
Exploits a heap buffer overflow vulnerability in the XNU operating system kernel to cause a denial-of-service attack on iOS and macOS devices.
Deserialization tester
A tool to detect and exploit deserialization vulnerabilities in Java and .NET applications.
RCE exploit
A proof-of-concept project demonstrating a Jackson RCE vulnerability in Ruby that allows an attacker to execute arbitrary commands on the system.
SMBGhost Exploit
Exploits a vulnerability in SMBv3 compression to achieve privilege escalation and process manipulation.
RMI vulnerability demo
Demonstrating vulnerabilities in Java RMI services
Vulnerability scanner
A Burp Suite Extender to identify Java Deserialization vulnerabilities in client requests and server responses.