awesome-repositories.com
Blog
awesome-repositories.com

Entdecke die besten Open-Source-Repositories mit KI-gestützter Suche.

EntdeckenKuratierte SuchenOpen-Source-AlternativenSelf-hosted SoftwareBlogSitemap
ProjektÜber unsRanking-MethodikPresseMCP-Server
RechtlichesDatenschutzAGB
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
LandGrey avatar

LandGrey/SpringBootVulExploit

0
View on GitHub↗
6,136 Stars·1,318 Forks·Java·3 Aufrufe

SpringBootVulExploit

SpringBootVulExploit ist eine Sammlung von Scan- und Audit-Tools, die darauf ausgelegt sind, Schwachstellen, Informationslecks und Ausführungsvektoren innerhalb von Java-basierten Anwendungs-Frameworks zu identifizieren, wobei der Fokus speziell auf Spring Boot-Anwendungen liegt. Es bietet eine Suite von Exploit-Techniken, Payloads und Sicherheits-Checklisten für die Durchführung von Schwachstellenanalysen.

Das Projekt bietet Funktionen zum Auslösen von Remote Code Execution (RCE) durch Injektionsvektoren, Deserialisierungs-Payloads und bösartige Konfigurationsdateien. Es enthält einen Scanner zur Erkennung exponierter Umgebungsvariablen und interner Routing-Details, die durch falsch konfigurierte Endpunkte verursacht werden, sowie Methoden zum Extrahieren sensibler Daten und Klartext-Secrets mittels Heap-Dump-Analyse.

Das Toolset unterstützt Black-Box-Sicherheitsbewertungen und Framework-Schwachstellenanalysen, einschließlich des Mappings von Abhängigkeitsversionen, um potenzielle Schwachstellenfenster zu identifizieren.

Features

  • Spring Boot Security Testing - Offers a comprehensive suite of exploitation techniques and checklists specifically for testing Spring Boot applications.
  • Information Leakage - Identifies hidden system details and sensitive information by targeting misconfigured routing paths and administrative interfaces.
  • Java Security Research Frameworks - Provides a structured framework and checklist for performing security audits and dependency mapping on Java frameworks.
  • Deserialization Payloads - Implements techniques to trigger remote execution by sending maliciously crafted serialized objects.

KI-Suche

Entdecke weitere awesome Repositories

Beschreibe in einfachen Worten, was du brauchst — die KI bewertet tausende kuratierte Open-Source-Projekte nach Relevanz.

Start searching with AI
  • Remote Code Execution Testing - Provides methods to trigger unauthorized code execution on a server via injection vectors or malicious configuration.
  • Spring Boot Vulnerability Collections - Collects exploit techniques, payloads, and security checklists for identifying vulnerabilities in Spring Boot applications.
  • Vulnerability Analysis - Analyzes framework dependency versions and probing points to identify security flaws and vulnerability windows.
  • Injection Payloads - Provides a collection of crafted input strings designed to trigger unintended code execution via injection vulnerabilities.
  • Vulnerability Window Mapping - Determines compatible version relationships between releases to identify potential security vulnerability windows.
  • Sensitive Data Extraction - Extracts plaintext passwords and secrets by inspecting the raw memory state of a running Java virtual machine.
  • Credential Leak Detection - Detects exposed routing information and environment variables that may leak sensitive credentials via misconfigured endpoints.
  • Sensitive Data Extraction Tools - Retrieves plaintext passwords and secrets from system memory via heap dump analysis and request interception.
  • Black Box Security Scanning - Provides structured checklists and probes for security assessments of applications without requiring source code access.
  • Vulnerability Labs - Learning resources and exploits for Spring Boot vulnerabilities.
  • Vulnerability Exploitation - Exploitation framework for Java microservice framework vulnerabilities.

    • Star-Verlauf

    Star-Verlauf für landgrey/springbootvulexploitStar-Verlauf für landgrey/springbootvulexploit

    Häufig gestellte Fragen

    Was macht landgrey/springbootvulexploit?

    SpringBootVulExploit ist eine Sammlung von Scan- und Audit-Tools, die darauf ausgelegt sind, Schwachstellen, Informationslecks und Ausführungsvektoren innerhalb von Java-basierten Anwendungs-Frameworks zu identifizieren, wobei der Fokus speziell auf Spring Boot-Anwendungen liegt. Es bietet eine Suite von Exploit-Techniken, Payloads und Sicherheits-Checklisten für die Durchführung von Schwachstellenanalysen.

    Was sind die Hauptfunktionen von landgrey/springbootvulexploit?

    Die Hauptfunktionen von landgrey/springbootvulexploit sind: Spring Boot Security Testing, Information Leakage, Java Security Research Frameworks, Deserialization Payloads, Remote Code Execution Testing, Spring Boot Vulnerability Collections, Vulnerability Analysis, Injection Payloads.

    Welche Open-Source-Alternativen gibt es zu landgrey/springbootvulexploit?

    Open-Source-Alternativen zu landgrey/springbootvulexploit sind unter anderem: mbechler/marshalsec — Marshalsec is a toolkit designed for generating malicious serialized Java objects to achieve remote code execution… pwntester/ysoserial.net — ysoserial.net is a payload generator for .NET deserialization, designed to create malicious serialized objects and… voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… 0x727/shuize_0x727 — ShuiZe_0x727 is an open-source intelligence gathering framework and attack surface management tool. It functions as an… zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… lijiejie/swagger-exp — A Swagger API Exploit.

    Open-Source-Alternativen zu SpringBootVulExploit

    Ähnliche Open-Source-Projekte, sortiert nach der Anzahl der gemeinsamen Funktionen mit SpringBootVulExploit.
    • mbechler/marshalsecAvatar von mbechler

      mbechler/marshalsec

      3,691Auf GitHub ansehen↗

      Marshalsec is a toolkit designed for generating malicious serialized Java objects to achieve remote code execution during the unmarshalling process. It functions as a Java deserialization exploit tool and a framework for triggering Java Naming and Directory Interface lookups to remote servers. The project provides a JNDI redirector service that intercepts lookups and points targets toward a remote codebase. It includes utilities for crafting payloads that force Java applications to download and execute arbitrary classes from a remote URL. The toolset covers security analysis activities inclu

      Java
      Auf GitHub ansehen↗3,691
    • voorivex/pentest-guideAvatar von Voorivex

      Voorivex/pentest-guide

      2,761Auf GitHub ansehen↗

      This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part

      bugbountybypassowasp-tests
      Auf GitHub ansehen↗2,761
    • pwntester/ysoserial.netAvatar von pwntester

      pwntester/ysoserial.net

      3,735Auf GitHub ansehen↗

      ysoserial.net is a payload generator for .NET deserialization, designed to create malicious serialized objects and structured gadget chains. It serves as a tool for generating command execution strings and security testing suites used to assess vulnerabilities in .NET formatters. The tool enables the creation of sequences of object calls that trigger remote code execution during the reconstruction of serialized data. It produces specialized payloads for executing system commands, loading remote libraries, and accessing local file systems. The project includes capabilities for optimizing payl

      C#
      Auf GitHub ansehen↗3,735
  • 0x727/shuize_0x727Avatar von 0x727

    0x727/ShuiZe_0x727

    4,014Auf GitHub ansehen↗

    ShuiZe_0x727 is an open-source intelligence gathering framework and attack surface management tool. It functions as an asset discovery engine and cyber intelligence aggregator designed to identify internet-facing assets, map network infrastructure, and visualize total network exposure. The project integrates vulnerability scanning and sensitive data leak detection to identify security weaknesses and unauthorized access points. It employs a combination of network space API queries, certificate log analysis, and public repository scanning to extract leaked credentials, API keys, and internal ad

    Python
    Auf GitHub ansehen↗4,014
    • Alle 30 Alternativen zu SpringBootVulExploit anzeigen→