Skip to content

redtimmy/Richsploit

master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
bin
 
 
src
 
 
 
 
 
 
 
 

Richsploit

Richsploit: Exploitation toolkit for RichFaces.

Overview

Richsploit can be used to exploit JSF endpoints using RichFaces. All versions from 3.1.0 and higher are vulnerable.

usage: Richsploit
 -e,--exploit    0: CVE-2013-2165
                 1: CVE-2015-0279
                 2: CVE-2018-12532
                 3: CVE-2018-12533
                 4: CVE-2018-14667
 -p,--payload    The file containing serialized object
                 (CVE-2013-2165), or
                 Shell command to execute (all other CVE's)
 -u,--url        URL of richfaces application, i.e.
                 http://example.com/app for RF4.x and
                 http://example.com/app/a4j/g/3_3_3.Final for RF3.x
 -v,--version    Richfaces branch, either 3 or 4

For more information about how to use the tool, please see this blog post.

About

Exploitation toolkit for RichFaces

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages