Repositories list

• java-chains

  Public
  vulhub 专用 Java Payload 综合生成平台 | The web version of Java Payload generation and utilization tool provides Payload generation such as Java deserialization and Hessian 1/2 deserialization, as well as JNDI, Fake MySQL, JRMPListener, etc

  javavulnerabilitypayload+ 8deserialization-vulnerabilityredteamvulhubjavasecuritylog4j-rcejndi-exploitjava-vulnerability+ 1

  Dockerfile

  •85•1.1k•1•0•Updated Feb 27, 2025Feb 27, 2025

• vulhub

  Public
  Pre-Built Vulnerable Environments Based on Docker-Compose

  dockerfilevulnerability-environmentvulhub+ 2dockerdocker-compose

  Dockerfile

  •

  MIT License

  •4.5k•18k•22•24•Updated Feb 24, 2025Feb 24, 2025

• rocketmq-attack

  Public
  A command-line tool for testing RocketMQ vulnerabilities.

  kotlinexploit

  Kotlin

  •

  MIT License

  •0•8•0•0•Updated Feb 7, 2025Feb 7, 2025

• evil-ipp-server

  Public
  A evil IPP server to reproduce CVE-2024-47177

  Python

  •

  BSD 2-Clause "Simplified" License

  •30•6•0•1•Updated Sep 28, 2024Sep 28, 2024

• vulhub-org

  Public
  Vulhub's homepage

  JavaScript

  •10•28•1•8•Updated Jan 25, 2024Jan 25, 2024

• metersphere-plugin-Backdoor

  Public
  This is a backdoor project for MeterSphere, do not use it in production environment!!! Forking from </~https://github.com/metersphere/metersphere-plugin-DebugSampler>

  Java

  •0•7•0•0•Updated Aug 18, 2023Aug 18, 2023

• openfire-fastpath-plugin

  Public
  This is a evil openfire plugin, do not install it if you don't know what it is

  JavaScript

  •12•0•0•0•Updated Jun 18, 2023Jun 18, 2023

• JNDIExploit

  Public
  A malicious LDAP server for JNDI injection attacks

  Java

  •383•51•0•0•Updated Apr 29, 2023Apr 29, 2023

• java

  Public
  Java every minor versions.

  Dockerfile

  •35•68•0•2•Updated Apr 19, 2023Apr 19, 2023

• cve-2022-0778

  Public
  Go

  •5•0•0•0•Updated Apr 7, 2022Apr 7, 2022

• vulhub-ui

  Public
  [WIP] a simple UI for Vulhub

  Python

  •4•16•0•2•Updated Jun 10, 2021Jun 10, 2021

• MetaDockers

  Public
  Responsible for visualization the vulhub and docker

  visualizationdockerdocker-api+ 1vulhub

  Python

  •34•128•1•2•Updated Jun 10, 2021Jun 10, 2021

• discuz7

  Public
  互联网考古，Discuz 7.x

  PHP

  •1•3•0•0•Updated Aug 12, 2020Aug 12, 2020

• Dockertools

  Public
  Some tools based on docker

  Dockerfile

  •11•24•0•0•Updated Jul 28, 2020Jul 28, 2020

• Apereo-CAS-Attack

  Public
  WIP: Demo for Attacking Apereo CAS

  Java

  •9•89•0•0•Updated Jul 17, 2020Jul 17, 2020

• CVE-2017-1000353

  Public
  jenkins CVE-2017-1000353 POC

  Java

  •64•55•0•1•Updated Jun 11, 2020Jun 11, 2020

• redis-rogue-getshell

  Public
  redis 4.x/5.x master/slave getshell module

  C

  •

  Apache License 2.0

  •51•358•3•0•Updated Feb 3, 2020Feb 3, 2020

• goahead

  Public
  GoAhead Web Server

  C

  •

  Other

  •153•0•0•0•Updated Nov 22, 2019Nov 22, 2019

• thinkphp-2.1

  Public
  互联网考古，ThinkPHP2.1带示例和文档完整包

  PHP

  •1•10•0•0•Updated Sep 24, 2019Sep 24, 2019

• mirrors

  Public
  mirrorsfile

  0•0•0•0•Updated Dec 6, 2018Dec 6, 2018

• appweb7

  Public
  C

  •

  Other

  •4•0•0•0•Updated May 4, 2018May 4, 2018

• fckeditor

  Public
  FCKEditor 2.4.3

  JavaScript

  •

  GNU General Public License v2.0

  •7•0•0•0•Updated May 18, 2016May 18, 2016