René's URL Explorer Experiment

Title: Commits · avrah/java-deserialization-exploits · GitHub

Open Graph Title: Commits · avrah/java-deserialization-exploits

X Title: Commits · avrah/java-deserialization-exploits

Description: A collection of curated Java Deserialization Exploits - Commits · avrah/java-deserialization-exploits

Open Graph Description: A collection of curated Java Deserialization Exploits - Commits · avrah/java-deserialization-exploits

X Description: A collection of curated Java Deserialization Exploits - Commits · avrah/java-deserialization-exploits

Opengraph URL: https://github.com/avrah/java-deserialization-exploits

X: @github

direct link

Domain: github.com

route-pattern	/:user_id/:repository/commits(/*name)
route-controller	commits
route-action	show
fetch-nonce	v2:38072ba8-0c66-4309-e295-ec279a75067a
current-catalog-service-hash	f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id	A282:2CAFF1:2D6B982:3C57638:6A651D39
html-safe-nonce	130182174ebe4b8b6ec5b50df275fc61d4004dd0962ab0255017140fdff2cd36
visitor-payload	eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMjgyOjJDQUZGMToyRDZCOTgyOjNDNTc2Mzg6NkE2NTFEMzkiLCJ2aXNpdG9yX2lkIjoiOTA3MTU5NDAyMzMxNzQ3ODcxMyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac	b97e5c7540af328e34fa7407ffe13a2483de3bf1c1b9f2e9a364028c66b1a38f
hovercard-subject-tag	repository:453653759
github-keyboard-shortcuts	repository,commit-list,copilot
google-site-verification	Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-url	https://collector.github.com/github/collect
analytics-location	///commits/show
fb:app_id	1401488693436528
apple-itunes-app	app-id=1477376905, app-argument=https://github.com/avrah/java-deserialization-exploits/commits/main
twitter:image	https://opengraph.githubassets.com/4f6ce08b7469c6602467414350b2913f7e2477a786a47903ac8be02fe086c689/avrah/java-deserialization-exploits
twitter:card	summary_large_image
og:image	https://opengraph.githubassets.com/4f6ce08b7469c6602467414350b2913f7e2477a786a47903ac8be02fe086c689/avrah/java-deserialization-exploits
og:image:alt	A collection of curated Java Deserialization Exploits - Commits · avrah/java-deserialization-exploits
og:image:width	1200
og:image:height	600
og:site_name	GitHub
og:type	object
hostname	github.com
expected-hostname	github.com
None	52c76df668885aaff23b50bdca1fa1ea44ac9c1553e888ebc70ff1e4daa4625b
turbo-cache-control	no-cache
go-import	github.com/avrah/java-deserialization-exploits git https://github.com/avrah/java-deserialization-exploits.git
octolytics-dimension-user_id	42899698
octolytics-dimension-user_login	avrah
octolytics-dimension-repository_id	453653759
octolytics-dimension-repository_nwo	avrah/java-deserialization-exploits
octolytics-dimension-repository_public	true
octolytics-dimension-repository_is_fork	true
octolytics-dimension-repository_parent_id	60105475
octolytics-dimension-repository_parent_nwo	Coalfire-Research/java-deserialization-exploits
octolytics-dimension-repository_network_root_id	60105475
octolytics-dimension-repository_network_root_nwo	Coalfire-Research/java-deserialization-exploits
turbo-body-classes	logged-out env-production page-responsive
disable-turbo	false
browser-stats-url	https://api.github.com/_private/browser/stats
browser-errors-url	https://api.github.com/_private/browser/errors
release	309153364422b3c499922d1a2a6404910a58ed8e
ui-target	full
theme-color	#1e2327
color-scheme	light dark

Links:

Skip to content	https://github.com/avrah/java-deserialization-exploits/commits/main/#start-of-content
	https://github.com/
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Favrah%2Fjava-deserialization-exploits%2Fcommits%2Fmain%2F
GitHub CopilotWrite better code with AI	https://github.com/features/copilot
GitHub Copilot appDirect agents from issue to merge	https://github.com/features/ai/github-app
MCP RegistryNewIntegrate external tools	https://github.com/mcp
ActionsAutomate any workflow	https://github.com/features/actions
CodespacesInstant dev environments	https://github.com/features/codespaces
IssuesPlan and track work	https://github.com/features/issues
Code ReviewManage code changes	https://github.com/features/code-review
Code QualityEnforce quality at merge	https://github.com/features/code-quality
GitHub Advanced SecurityFind and fix vulnerabilities	https://github.com/security/advanced-security
Code securitySecure your code as you build	https://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they start	https://github.com/security/advanced-security/secret-protection
Why GitHub	https://github.com/why-github
Documentation	https://docs.github.com
Blog	https://github.blog
Changelog	https://github.blog/changelog
Marketplace	https://github.com/marketplace
View all features	https://github.com/features
Enterprises	https://github.com/enterprise
Small and medium teams	https://github.com/team
Startups	https://github.com/enterprise/startups
Nonprofits	https://github.com/solutions/industry/nonprofits
App Modernization	https://github.com/solutions/use-case/app-modernization
DevSecOps	https://github.com/solutions/use-case/devsecops
DevOps	https://github.com/solutions/use-case/devops
CI/CD	https://github.com/solutions/use-case/ci-cd
View all use cases	https://github.com/solutions/use-case
Healthcare	https://github.com/solutions/industry/healthcare
Financial services	https://github.com/solutions/industry/financial-services
Manufacturing	https://github.com/solutions/industry/manufacturing
Government	https://github.com/solutions/industry/government
View all industries	https://github.com/solutions/industry
View all solutions	https://github.com/solutions
AI	https://github.com/resources/articles?topic=ai
Software Development	https://github.com/resources/articles?topic=software-development
DevOps	https://github.com/resources/articles?topic=devops
Security	https://github.com/resources/articles?topic=security
View all topics	https://github.com/resources/articles
Customer stories	https://github.com/customer-stories
Events & webinars	https://github.com/resources/events
Ebooks & reports	https://github.com/resources/whitepapers
Business insights	https://github.com/solutions/executive-insights
GitHub Skills	https://skills.github.com
Documentation	https://docs.github.com
Customer support	https://support.github.com
Community forum	https://github.com/orgs/community/discussions
Trust center	https://github.com/trust-center
Partners	https://github.com/partners
View all resources	https://github.com/resources
GitHub SponsorsFund open source developers	https://github.com/open-source/sponsors
Security Lab	https://securitylab.github.com
Maintainer Community	https://maintainers.github.com
Accelerator	https://github.com/open-source/accelerator
GitHub Stars	https://stars.github.com
Archive Program	https://archiveprogram.github.com
Topics	https://github.com/topics
Trending	https://github.com/trending
Collections	https://github.com/collections
Enterprise platformAI-powered developer platform	https://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security features	https://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI features	https://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 support	https://github.com/enterprise/premium-support
Pricing	https://github.com/pricing
Search syntax tips	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentation	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in	https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Favrah%2Fjava-deserialization-exploits%2Fcommits%2Fmain%2F
Sign up	https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fcommits%2Fshow&source=header-repo&source_repo=avrah%2Fjava-deserialization-exploits
Reload	https://github.com/avrah/java-deserialization-exploits/commits/main/
Reload	https://github.com/avrah/java-deserialization-exploits/commits/main/
Reload	https://github.com/avrah/java-deserialization-exploits/commits/main/
avrah	https://github.com/avrah
java-deserialization-exploits	https://github.com/avrah/java-deserialization-exploits
Coalfire-Research/java-deserialization-exploits	https://github.com/Coalfire-Research/java-deserialization-exploits
Notifications	https://github.com/login?return_to=%2Favrah%2Fjava-deserialization-exploits
Fork 0	https://github.com/login?return_to=%2Favrah%2Fjava-deserialization-exploits
Star 0	https://github.com/login?return_to=%2Favrah%2Fjava-deserialization-exploits
Code	https://github.com/avrah/java-deserialization-exploits
Pull requests 0	https://github.com/avrah/java-deserialization-exploits/pulls
Actions	https://github.com/avrah/java-deserialization-exploits/actions
Projects	https://github.com/avrah/java-deserialization-exploits/projects
Security and quality 0	https://github.com/avrah/java-deserialization-exploits/security
Insights	https://github.com/avrah/java-deserialization-exploits/pulse
Code	https://github.com/avrah/java-deserialization-exploits
Pull requests	https://github.com/avrah/java-deserialization-exploits/pulls
Actions	https://github.com/avrah/java-deserialization-exploits/actions
Projects	https://github.com/avrah/java-deserialization-exploits/projects
Security and quality	https://github.com/avrah/java-deserialization-exploits/security
Insights	https://github.com/avrah/java-deserialization-exploits/pulse
Merge pull request #7 from JRodriguez556/patch-1	https://github.com/avrah/java-deserialization-exploits/commit/cfe7080b397c47e032e3c2c6a2df916dc8e719a3
	https://github.com/byt3bl33d3r
byt3bl33d3r	https://github.com/avrah/java-deserialization-exploits/commits?author=byt3bl33d3r
cfe7080	https://github.com/avrah/java-deserialization-exploits/commit/cfe7080b397c47e032e3c2c6a2df916dc8e719a3
	https://github.com/avrah/java-deserialization-exploits/tree/cfe7080b397c47e032e3c2c6a2df916dc8e719a3
Update cisco_prime_rce.py	https://github.com/avrah/java-deserialization-exploits/commit/54d738fd7fd7669d2816ce22b52402ef911c0d7e
	https://github.com/JRodriguez556
JRodriguez556	https://github.com/avrah/java-deserialization-exploits/commits?author=JRodriguez556
54d738f	https://github.com/avrah/java-deserialization-exploits/commit/54d738fd7fd7669d2816ce22b52402ef911c0d7e
	https://github.com/avrah/java-deserialization-exploits/tree/54d738fd7fd7669d2816ce22b52402ef911c0d7e
Added JBoss RCE exploit (CVE-2015-7501)	https://github.com/avrah/java-deserialization-exploits/commit/3390f2fe5c574b64fa65c6759f6d0f5b21d5795e
	https://github.com/byt3bl33d3r
byt3bl33d3r	https://github.com/avrah/java-deserialization-exploits/commits?author=byt3bl33d3r
3390f2f	https://github.com/avrah/java-deserialization-exploits/commit/3390f2fe5c574b64fa65c6759f6d0f5b21d5795e
	https://github.com/avrah/java-deserialization-exploits/tree/3390f2fe5c574b64fa65c6759f6d0f5b21d5795e
Fixed Markdown in README files	https://github.com/avrah/java-deserialization-exploits/commit/c57412931a7b30153935ade295b2860306d8e14b
c574129	https://github.com/avrah/java-deserialization-exploits/commit/c57412931a7b30153935ade295b2860306d8e14b
	https://github.com/avrah/java-deserialization-exploits/tree/c57412931a7b30153935ade295b2860306d8e14b
Merge pull request #5 from n00py/master	https://github.com/avrah/java-deserialization-exploits/commit/f8cf1a169a9d4e67cce49140e4d89e4d6f7c7629
	https://github.com/DanMcInerney
DanMcInerney	https://github.com/avrah/java-deserialization-exploits/commits?author=DanMcInerney
f8cf1a1	https://github.com/avrah/java-deserialization-exploits/commit/f8cf1a169a9d4e67cce49140e4d89e4d6f7c7629
	https://github.com/avrah/java-deserialization-exploits/tree/f8cf1a169a9d4e67cce49140e4d89e4d6f7c7629
Update cisco_prime_rce.py	https://github.com/avrah/java-deserialization-exploits/commit/69f0f72742bf44e051c2345ac0d21f44a98e13db
	https://github.com/n00py
n00py	https://github.com/avrah/java-deserialization-exploits/commits?author=n00py
69f0f72	https://github.com/avrah/java-deserialization-exploits/commit/69f0f72742bf44e051c2345ac0d21f44a98e13db
	https://github.com/avrah/java-deserialization-exploits/tree/69f0f72742bf44e051c2345ac0d21f44a98e13db
Commit adds the Jenkins Groovy XML RCE (CVE-2016-0792)	https://github.com/avrah/java-deserialization-exploits/commit/1881ba1aab296dd25522f8b90d73a4cb8c0c56a2
1881ba1	https://github.com/avrah/java-deserialization-exploits/commit/1881ba1aab296dd25522f8b90d73a4cb8c0c56a2
	https://github.com/avrah/java-deserialization-exploits/tree/1881ba1aab296dd25522f8b90d73a4cb8c0c56a2
renamed folder	https://github.com/avrah/java-deserialization-exploits/commit/d27dd9ae9d6d0294d68659a8eb1558e36b15988f
d27dd9a	https://github.com/avrah/java-deserialization-exploits/commit/d27dd9ae9d6d0294d68659a8eb1558e36b15988f
	https://github.com/avrah/java-deserialization-exploits/tree/d27dd9ae9d6d0294d68659a8eb1558e36b15988f
typo	https://github.com/avrah/java-deserialization-exploits/commit/a6f668b67e0e53c193f4ac768287499ce0e02939
a6f668b	https://github.com/avrah/java-deserialization-exploits/commit/a6f668b67e0e53c193f4ac768287499ce0e02939
	https://github.com/avrah/java-deserialization-exploits/tree/a6f668b67e0e53c193f4ac768287499ce0e02939
Updated README.md	https://github.com/avrah/java-deserialization-exploits/commit/f76b3e9a458a54448dbc177da363afc9f7da0dbd
f76b3e9	https://github.com/avrah/java-deserialization-exploits/commit/f76b3e9a458a54448dbc177da363afc9f7da0dbd
	https://github.com/avrah/java-deserialization-exploits/tree/f76b3e9a458a54448dbc177da363afc9f7da0dbd
moar bugfixes	https://github.com/avrah/java-deserialization-exploits/commit/2750e7d145a69f1b36fdca389f9d351142e22341
2750e7d	https://github.com/avrah/java-deserialization-exploits/commit/2750e7d145a69f1b36fdca389f9d351142e22341
	https://github.com/avrah/java-deserialization-exploits/tree/2750e7d145a69f1b36fdca389f9d351142e22341
fixed bugs in weblogic exploit	https://github.com/avrah/java-deserialization-exploits/commit/b75ba54b05aa1939cd6dcbfbd849bbbb0961d67a
b75ba54	https://github.com/avrah/java-deserialization-exploits/commit/b75ba54b05aa1939cd6dcbfbd849bbbb0961d67a
	https://github.com/avrah/java-deserialization-exploits/tree/b75ba54b05aa1939cd6dcbfbd849bbbb0961d67a
minor OCD fixes	https://github.com/avrah/java-deserialization-exploits/commit/acb65143c936b2525c3aebe44c2305e264a57f40
acb6514	https://github.com/avrah/java-deserialization-exploits/commit/acb65143c936b2525c3aebe44c2305e264a57f40
	https://github.com/avrah/java-deserialization-exploits/tree/acb65143c936b2525c3aebe44c2305e264a57f40
Initial commit for the Oracle WebLogic exploit	https://github.com/avrah/java-deserialization-exploits/commit/d163486197b4b4fc263bef46615d7dfb94d43e4a
d163486	https://github.com/avrah/java-deserialization-exploits/commit/d163486197b4b4fc263bef46615d7dfb94d43e4a
	https://github.com/avrah/java-deserialization-exploits/tree/d163486197b4b4fc263bef46615d7dfb94d43e4a
some fixes	https://github.com/avrah/java-deserialization-exploits/commit/8aa7a4148054b5bcee923ab2f7daf0f1237511ff
8aa7a41	https://github.com/avrah/java-deserialization-exploits/commit/8aa7a4148054b5bcee923ab2f7daf0f1237511ff
	https://github.com/avrah/java-deserialization-exploits/tree/8aa7a4148054b5bcee923ab2f7daf0f1237511ff
specified target and port in url	https://github.com/avrah/java-deserialization-exploits/commit/f08565d4552e31e55330d5b8686fb339c1ba2968
f08565d	https://github.com/avrah/java-deserialization-exploits/commit/f08565d4552e31e55330d5b8686fb339c1ba2968
	https://github.com/avrah/java-deserialization-exploits/tree/f08565d4552e31e55330d5b8686fb339c1ba2968
changed http to https	https://github.com/avrah/java-deserialization-exploits/commit/7c9f36bb789e0986a895b5100f90d688f9de56c1
7c9f36b	https://github.com/avrah/java-deserialization-exploits/commit/7c9f36bb789e0986a895b5100f90d688f9de56c1
	https://github.com/avrah/java-deserialization-exploits/tree/7c9f36bb789e0986a895b5100f90d688f9de56c1
derp	https://github.com/avrah/java-deserialization-exploits/commit/c433fb8eeb88065149f8977cd4393813025510c5
c433fb8	https://github.com/avrah/java-deserialization-exploits/commit/c433fb8eeb88065149f8977cd4393813025510c5
	https://github.com/avrah/java-deserialization-exploits/tree/c433fb8eeb88065149f8977cd4393813025510c5
Initial PoC commit for JBoss exploit	https://github.com/avrah/java-deserialization-exploits/commit/1ae664fd980a11b682907a7e7426e097da1ff4a6
1ae664f	https://github.com/avrah/java-deserialization-exploits/commit/1ae664fd980a11b682907a7e7426e097da1ff4a6
	https://github.com/avrah/java-deserialization-exploits/tree/1ae664fd980a11b682907a7e7426e097da1ff4a6
chmoded the opennms exploit	https://github.com/avrah/java-deserialization-exploits/commit/2a2cc23dc5f9b22529a3af9be545cced38f639df
2a2cc23	https://github.com/avrah/java-deserialization-exploits/commit/2a2cc23dc5f9b22529a3af9be545cced38f639df
	https://github.com/avrah/java-deserialization-exploits/tree/2a2cc23dc5f9b22529a3af9be545cced38f639df
Seems that the second CLI response from Jenkins sometimes is sent with the first response (This is what was making the FoxGlove PoC unreliable)	https://github.com/avrah/java-deserialization-exploits/commit/5d2c6950bcb206beb60bd1dff0eedb72ff9e25b2
5d2c695	https://github.com/avrah/java-deserialization-exploits/commit/5d2c6950bcb206beb60bd1dff0eedb72ff9e25b2
	https://github.com/avrah/java-deserialization-exploits/tree/5d2c6950bcb206beb60bd1dff0eedb72ff9e25b2
fixed moar formatting errors	https://github.com/avrah/java-deserialization-exploits/commit/3ba17a7fe984496be8c6bc96a998707e01aae02d
3ba17a7	https://github.com/avrah/java-deserialization-exploits/commit/3ba17a7fe984496be8c6bc96a998707e01aae02d
	https://github.com/avrah/java-deserialization-exploits/tree/3ba17a7fe984496be8c6bc96a998707e01aae02d
fixed formatting errors	https://github.com/avrah/java-deserialization-exploits/commit/12924f582d3e02af0683f08682693f9f1f7c5c96
12924f5	https://github.com/avrah/java-deserialization-exploits/commit/12924f582d3e02af0683f08682693f9f1f7c5c96
	https://github.com/avrah/java-deserialization-exploits/tree/12924f582d3e02af0683f08682693f9f1f7c5c96
Added exploit for CVE-2015-8103 (Jenkins RCE)	https://github.com/avrah/java-deserialization-exploits/commit/3fab53e21cc25ddf60bf871df36482298bd6f226
3fab53e	https://github.com/avrah/java-deserialization-exploits/commit/3fab53e21cc25ddf60bf871df36482298bd6f226
	https://github.com/avrah/java-deserialization-exploits/tree/3fab53e21cc25ddf60bf871df36482298bd6f226
Initial commit for the OpenNMS exploit	https://github.com/avrah/java-deserialization-exploits/commit/5920cf1502234fc52311d5cd1cccfd0127c53275
5920cf1	https://github.com/avrah/java-deserialization-exploits/commit/5920cf1502234fc52311d5cd1cccfd0127c53275
	https://github.com/avrah/java-deserialization-exploits/tree/5920cf1502234fc52311d5cd1cccfd0127c53275
Fixed README	https://github.com/avrah/java-deserialization-exploits/commit/6fcf2f7d4ec6c385a67be4f3c892faae0626c711
6fcf2f7	https://github.com/avrah/java-deserialization-exploits/commit/6fcf2f7d4ec6c385a67be4f3c892faae0626c711
	https://github.com/avrah/java-deserialization-exploits/tree/6fcf2f7d4ec6c385a67be4f3c892faae0626c711
Initial commit of exploits for CVE-2015-7450, CVE-2016-1291	https://github.com/avrah/java-deserialization-exploits/commit/24f01fea150c3c0958efc4fcae18f9458af07213
24f01fe	https://github.com/avrah/java-deserialization-exploits/commit/24f01fea150c3c0958efc4fcae18f9458af07213
	https://github.com/avrah/java-deserialization-exploits/tree/24f01fea150c3c0958efc4fcae18f9458af07213
Initial commit	https://github.com/avrah/java-deserialization-exploits/commit/2b96110b4d5fed634d501d2c9e6ac36fdb0b88e3
	https://github.com/kravlin
kravlin	https://github.com/avrah/java-deserialization-exploits/commits?author=kravlin
2b96110	https://github.com/avrah/java-deserialization-exploits/commit/2b96110b4d5fed634d501d2c9e6ac36fdb0b88e3
	https://github.com/avrah/java-deserialization-exploits/tree/2b96110b4d5fed634d501d2c9e6ac36fdb0b88e3
	https://github.com
Terms	https://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacy	https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Security	https://github.com/security
Status	https://www.githubstatus.com/
Community	https://github.community/
Docs	https://docs.github.com/
Contact	https://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.