Explotación CVE-2017-1000486

Pipelines | bugbounty | hacking | redteaming | blueteaming | soc | noc | tricks

Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)

JavaScript Python

本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。

appsec awesome awesome-list exp hacking hacking-tools langchain llm llm-agent metasploit owasp penetration-testing pentesting poc scanner security vulnerabilities vulnerability web-hacking web-security

😛 Primefaces 5.X EL Injection Exploit (CVE-2017-1000486)

cve exploit primefaces redteam cve-2017-1000486 elinjection golang linux

Dockerfile Go

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

cisa-kev vulnerability 0day cisa exploits

None

Python Perl

None

HTML Java

Automatic monitor github cve using Github Actions

Python

essential templates for kenzer [DEPRECATED]

kenzer vulnerabilities kenzer-templates arpsyndicate

Python Shell Ruby

A collection of exploits created or modified by me

Python

cve-2017-1000486

Dockerfile

Proof of Concept Exploit for PrimeFaces 5.x EL Injection (CVE-2017-1000486)

Python JavaScript

Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit

Dockerfile Python

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

Java HTML