CVE-2023-34040

This repository contains a proof-of-concept exploit for CVE-2023-34040, demonstrating both Denial of Service (DoS) and Remote Code Execution (RCE) via Spring Kafka deserialization vulnerabilities. The exploit leverages a modified DeserializationException class to bypass Spring-Kafka's deserialization protections.

This repository contains a proof-of-concept exploit for CVE-2023-34040, a Spring Kafka deserialization vulnerability. It includes a malicious serialization payload designed to trigger remote code execution via deserialization exceptions.

This repository contains functional exploit code for multiple CVEs, including deserialization and RCE vulnerabilities in Java-based software. The PoCs are well-structured and include examples for vulnerabilities like Log4j, Fastjson, and Dubbo.

This repository contains a proof-of-concept exploit for CVE-2023-34040, demonstrating a Spring Kafka deserialization vulnerability that leads to remote code execution. The exploit includes a malicious payload that triggers arbitrary command execution via a crafted Kafka message.

This repository contains a proof-of-concept exploit for CVE-2023-34040, demonstrating a deserialization vulnerability in Spring Kafka. The exploit leverages a malicious `ProcBuilder` class to execute arbitrary commands during deserialization.