Test Java apps for JNDI injection weaknesses.
What it does
Guides testing of Java applications for JNDI injection and selection of exploitation techniques based on JDK version.
When to use it
Use when Java applications perform JNDI lookups with attacker-controlled names, including through Log4j2, Spring, or InitialContext.lookup().
How to use it
Give it a suspected JNDI injection point; it guides confirmation and version-dependent exploitation tests.
What you provide
- a suspected JNDI injection point
Latest review
What you need · 0
No setup requirements listed.
Access · 3
This skill
Java applications
Write
Sends JNDI test payloads
TOKEN.collab.net
Write
Sends Java version through DNS
marshalsec
Execute
Starts an LDAP reference server