PoC-in-GitHub/2020/CVE-2020-9484.json

407 lines
14 KiB
JSON
Raw Normal View History

2020-12-30 22:09:58 +01:00
[
2021-04-05 05:11:01 +02:00
{
"id": 265151514,
"name": "tomcat-cluster-session-sync-exp",
"full_name": "threedr3am\/tomcat-cluster-session-sync-exp",
"owner": {
"login": "threedr3am",
"id": 19884279,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19884279?v=4",
"html_url": "https:\/\/github.com\/threedr3am"
},
"html_url": "https:\/\/github.com\/threedr3am\/tomcat-cluster-session-sync-exp",
"description": "tomcat使用了自带session同步功能时不安全的配置没有使用EncryptInterceptor导致存在的反序列化漏洞通过精心构造的数据包 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-94849484是session持久化的洞这个是session集群同步的洞",
"fork": false,
"created_at": "2020-05-19T05:12:53Z",
2022-06-22 20:19:07 +02:00
"updated_at": "2022-06-22T14:31:23Z",
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-05-19T05:13:19Z",
2022-06-22 20:19:07 +02:00
"stargazers_count": 213,
"watchers_count": 213,
2021-12-13 07:13:24 +01:00
"forks_count": 38,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2021-12-13 07:13:24 +01:00
"forks": 38,
2022-06-22 20:19:07 +02:00
"watchers": 213,
2021-04-05 05:11:01 +02:00
"score": 0
},
{
"id": 265717610,
"name": "CVE-2020-9484",
"full_name": "masahiro331\/CVE-2020-9484",
"owner": {
"login": "masahiro331",
"id": 20438853,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20438853?v=4",
"html_url": "https:\/\/github.com\/masahiro331"
},
"html_url": "https:\/\/github.com\/masahiro331\/CVE-2020-9484",
"description": null,
"fork": false,
"created_at": "2020-05-21T00:41:06Z",
2022-07-31 14:15:57 +02:00
"updated_at": "2022-07-31T09:17:50Z",
2021-10-28 05:12:48 +02:00
"pushed_at": "2021-10-28T02:31:04Z",
2022-07-31 14:15:57 +02:00
"stargazers_count": 125,
"watchers_count": 125,
2022-05-29 20:15:19 +02:00
"forks_count": 32,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-05-29 20:15:19 +02:00
"forks": 32,
2022-07-31 14:15:57 +02:00
"watchers": 125,
2021-04-05 05:11:01 +02:00
"score": 0
},
2022-03-23 13:15:41 +01:00
{
"id": 265741960,
"name": "CVE-2020-9484",
"full_name": "seanachao\/CVE-2020-9484",
"owner": {
"login": "seanachao",
"id": 30539692,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30539692?v=4",
"html_url": "https:\/\/github.com\/seanachao"
},
"html_url": "https:\/\/github.com\/seanachao\/CVE-2020-9484",
"description": "利用ceye批量检测CVE-2020-9484",
"fork": false,
"created_at": "2020-05-21T03:07:24Z",
"updated_at": "2022-03-23T08:03:58Z",
"pushed_at": "2020-05-21T02:30:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2022-03-23 13:15:41 +01:00
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0
},
2021-04-05 05:11:01 +02:00
{
"id": 265870392,
"name": "CVE-2020-9484",
"full_name": "IdealDreamLast\/CVE-2020-9484",
"owner": {
"login": "IdealDreamLast",
"id": 33090510,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33090510?v=4",
"html_url": "https:\/\/github.com\/IdealDreamLast"
},
"html_url": "https:\/\/github.com\/IdealDreamLast\/CVE-2020-9484",
"description": "用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞",
"fork": false,
"created_at": "2020-05-21T14:30:46Z",
2022-06-25 08:16:26 +02:00
"updated_at": "2022-06-25T03:46:52Z",
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-05-21T15:13:22Z",
2022-06-25 08:16:26 +02:00
"stargazers_count": 51,
"watchers_count": 51,
2022-01-20 13:14:25 +01:00
"forks_count": 21,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-01-20 13:14:25 +01:00
"forks": 21,
2022-06-25 08:16:26 +02:00
"watchers": 51,
2021-04-05 05:11:01 +02:00
"score": 0
},
{
"id": 269379345,
"name": "CVE-2020-9484",
"full_name": "qerogram\/CVE-2020-9484",
"owner": {
"login": "qerogram",
"id": 29586629,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29586629?v=4",
"html_url": "https:\/\/github.com\/qerogram"
},
"html_url": "https:\/\/github.com\/qerogram\/CVE-2020-9484",
"description": "for Ubuntu 18.04, improve functions.",
"fork": false,
"created_at": "2020-06-04T14:19:12Z",
2022-02-23 13:15:23 +01:00
"updated_at": "2022-02-23T07:05:46Z",
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-06-04T18:12:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"forks_count": 0,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2021-04-05 05:11:01 +02:00
"forks": 0,
"watchers": 1,
"score": 0
},
{
"id": 269770630,
"name": "CVE-2020-9484-Mass-Scan",
"full_name": "osamahamad\/CVE-2020-9484-Mass-Scan",
"owner": {
"login": "osamahamad",
"id": 59566963,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59566963?v=4",
"html_url": "https:\/\/github.com\/osamahamad"
},
"html_url": "https:\/\/github.com\/osamahamad\/CVE-2020-9484-Mass-Scan",
"description": "CVE-2020-9484 Mass Scanner, Scan a list of urls for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE ",
"fork": false,
"created_at": "2020-06-05T20:40:28Z",
2022-05-05 20:15:37 +02:00
"updated_at": "2022-05-05T16:50:12Z",
2021-04-05 05:11:01 +02:00
"pushed_at": "2020-06-05T21:04:43Z",
2022-05-05 20:15:37 +02:00
"stargazers_count": 32,
"watchers_count": 32,
2022-05-09 08:20:15 +02:00
"forks_count": 14,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-05-09 08:20:15 +02:00
"forks": 14,
2022-05-05 20:15:37 +02:00
"watchers": 32,
2021-04-05 05:11:01 +02:00
"score": 0
},
2021-08-30 05:12:48 +02:00
{
"id": 293086175,
"name": "CVE-2020-9484-exploit",
"full_name": "anjai94\/CVE-2020-9484-exploit",
"owner": {
"login": "anjai94",
"id": 30573192,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30573192?v=4",
"html_url": "https:\/\/github.com\/anjai94"
},
"html_url": "https:\/\/github.com\/anjai94\/CVE-2020-9484-exploit",
"description": null,
"fork": false,
"created_at": "2020-09-05T13:56:51Z",
2022-07-23 14:17:48 +02:00
"updated_at": "2022-07-23T07:58:00Z",
2021-08-30 05:12:48 +02:00
"pushed_at": "2020-09-05T14:08:52Z",
2022-07-23 14:17:48 +02:00
"stargazers_count": 5,
"watchers_count": 5,
2022-05-13 14:15:30 +02:00
"forks_count": 3,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-05-13 14:15:30 +02:00
"forks": 3,
2022-07-23 14:17:48 +02:00
"watchers": 5,
2021-08-30 05:12:48 +02:00
"score": 0
},
2021-01-01 04:09:27 +01:00
{
"id": 325878746,
"name": "CVE-2020-9484",
"full_name": "PenTestical\/CVE-2020-9484",
"owner": {
"login": "PenTestical",
"id": 57206134,
2021-01-21 16:10:20 +01:00
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57206134?v=4",
2021-01-01 04:09:27 +01:00
"html_url": "https:\/\/github.com\/PenTestical"
},
"html_url": "https:\/\/github.com\/PenTestical\/CVE-2020-9484",
"description": null,
"fork": false,
"created_at": "2020-12-31T21:54:50Z",
2022-07-21 08:17:21 +02:00
"updated_at": "2022-07-21T04:34:02Z",
2022-04-16 20:14:54 +02:00
"pushed_at": "2022-04-16T14:22:27Z",
2022-07-21 08:17:21 +02:00
"stargazers_count": 14,
"watchers_count": 14,
2022-06-14 14:16:50 +02:00
"forks_count": 7,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-06-14 14:16:50 +02:00
"forks": 7,
2022-07-21 08:17:21 +02:00
"watchers": 14,
2021-01-01 04:09:27 +01:00
"score": 0
2021-01-15 22:10:01 +01:00
},
2022-07-20 08:16:46 +02:00
{
"id": 329004194,
"name": "CVE-2020-9484-Scanner",
"full_name": "DanQMoo\/CVE-2020-9484-Scanner",
"owner": {
"login": "DanQMoo",
"id": 29651956,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29651956?v=4",
"html_url": "https:\/\/github.com\/DanQMoo"
},
"html_url": "https:\/\/github.com\/DanQMoo\/CVE-2020-9484-Scanner",
"description": "A smol bash script I threw together pretty quickly to scan for vulnerable versions of the Apache Tomcat RCE. I'll give it some love when I have the time. ",
"fork": false,
"created_at": "2021-01-12T14:00:00Z",
"updated_at": "2022-04-17T09:09:57Z",
"pushed_at": "2020-06-10T07:08:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0
},
2021-01-27 04:09:54 +01:00
{
"id": 333238894,
"name": "CVE-2020-9484",
"full_name": "AssassinUKG\/CVE-2020-9484",
"owner": {
"login": "AssassinUKG",
"id": 5285547,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5285547?v=4",
"html_url": "https:\/\/github.com\/AssassinUKG"
},
"html_url": "https:\/\/github.com\/AssassinUKG\/CVE-2020-9484",
"description": null,
"fork": false,
"created_at": "2021-01-26T22:51:30Z",
2022-02-16 19:14:16 +01:00
"updated_at": "2022-02-16T18:02:45Z",
2021-02-10 04:09:29 +01:00
"pushed_at": "2021-02-10T00:01:45Z",
2022-02-16 19:14:16 +01:00
"stargazers_count": 3,
"watchers_count": 3,
2022-07-28 14:27:58 +02:00
"forks_count": 3,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-07-28 14:27:58 +02:00
"forks": 3,
2022-02-16 19:14:16 +01:00
"watchers": 3,
2021-01-27 04:09:54 +01:00
"score": 0
2021-02-10 22:09:30 +01:00
},
{
"id": 337782636,
"name": "CVE-2020-9484",
"full_name": "VICXOR\/CVE-2020-9484",
"owner": {
"login": "VICXOR",
"id": 43370621,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43370621?v=4",
"html_url": "https:\/\/github.com\/VICXOR"
},
"html_url": "https:\/\/github.com\/VICXOR\/CVE-2020-9484",
"description": "POC for CVE-2020-9484",
"fork": false,
"created_at": "2021-02-10T16:27:07Z",
2022-07-20 14:24:08 +02:00
"updated_at": "2022-07-20T09:00:16Z",
2021-02-10 22:09:30 +01:00
"pushed_at": "2021-02-10T16:55:37Z",
2022-07-20 14:24:08 +02:00
"stargazers_count": 4,
"watchers_count": 4,
2021-02-10 22:09:30 +01:00
"forks_count": 0,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [
"apache",
"exploit",
"rce",
"tomcat"
],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2021-02-10 22:09:30 +01:00
"forks": 0,
2022-07-20 14:24:08 +02:00
"watchers": 4,
2021-02-10 22:09:30 +01:00
"score": 0
2021-03-01 16:09:23 +01:00
},
{
"id": 343388829,
"name": "CVE-2020-9484",
"full_name": "DXY0411\/CVE-2020-9484",
"owner": {
"login": "DXY0411",
"id": 42259364,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42259364?v=4",
"html_url": "https:\/\/github.com\/DXY0411"
},
"html_url": "https:\/\/github.com\/DXY0411\/CVE-2020-9484",
"description": null,
"fork": false,
"created_at": "2021-03-01T11:16:04Z",
2021-03-08 16:09:26 +01:00
"updated_at": "2021-03-08T10:02:52Z",
"pushed_at": "2021-03-08T10:02:50Z",
2021-03-01 16:09:23 +01:00
"stargazers_count": 0,
"watchers_count": 0,
"forks_count": 0,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2021-03-01 16:09:23 +01:00
"forks": 0,
"watchers": 0,
"score": 0
2021-05-18 17:11:56 +02:00
},
{
"id": 368539603,
"name": "CVE-2020-9484",
"full_name": "RepublicR0K\/CVE-2020-9484",
"owner": {
"login": "RepublicR0K",
"id": 73670332,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73670332?v=4",
"html_url": "https:\/\/github.com\/RepublicR0K"
},
"html_url": "https:\/\/github.com\/RepublicR0K\/CVE-2020-9484",
"description": "Apache Tomcat RCE (CVE-2020-9484)",
"fork": false,
"created_at": "2021-05-18T13:26:18Z",
2021-09-19 23:12:36 +02:00
"updated_at": "2021-09-19T19:11:16Z",
2021-05-18 17:11:56 +02:00
"pushed_at": "2021-05-18T13:27:11Z",
2021-09-19 23:12:36 +02:00
"stargazers_count": 5,
"watchers_count": 5,
2022-06-14 20:16:10 +02:00
"forks_count": 2,
2021-09-13 23:12:57 +02:00
"allow_forking": true,
2021-10-06 23:13:51 +02:00
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2021-10-06 23:13:51 +02:00
"topics": [],
2021-10-01 23:13:10 +02:00
"visibility": "public",
2022-06-14 20:16:10 +02:00
"forks": 2,
2021-09-19 23:12:36 +02:00
"watchers": 5,
2021-05-18 17:11:56 +02:00
"score": 0
2022-02-11 19:14:11 +01:00
},
{
"id": 458246235,
"name": "CVE-2020-9484",
"full_name": "ColdFusionX\/CVE-2020-9484",
"owner": {
"login": "ColdFusionX",
"id": 8522240,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8522240?v=4",
"html_url": "https:\/\/github.com\/ColdFusionX"
},
"html_url": "https:\/\/github.com\/ColdFusionX\/CVE-2020-9484",
"description": "POC - Apache Tomcat Deserialization Vulnerability (CVE-2020-9484)",
"fork": false,
"created_at": "2022-02-11T15:45:10Z",
2022-06-19 02:18:08 +02:00
"updated_at": "2022-06-18T23:40:35Z",
2022-02-11 19:14:11 +01:00
"pushed_at": "2022-02-11T18:02:52Z",
2022-06-19 02:18:08 +02:00
"stargazers_count": 1,
"watchers_count": 1,
"forks_count": 2,
2022-02-11 19:14:11 +01:00
"allow_forking": true,
"is_template": false,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required": false,
2022-02-11 19:14:11 +01:00
"topics": [
"cve-2020-9484",
"deserialization",
"docker",
"exploit",
"rce",
"serialization",
"tomcat"
],
"visibility": "public",
2022-06-19 02:18:08 +02:00
"forks": 2,
"watchers": 1,
2022-02-11 19:14:11 +01:00
"score": 0
2020-12-30 22:09:58 +01:00
}
]