JNDIExp is a Java-based tool designed to exploit vulnerabilities using Java Naming and Directory Interface (JNDI). The primary objective is to facilitate remote code execution (RCE) by leveraging JNDI lookups to instantiate and execute malicious objects. The tool addresses the challenge of exploiting JNDI vulnerabilities in various Java applications. It primarily utilizes java.naming.factory.factory.url.URLFactory and java.security.AccessController classes for exploitation.
This project stands out due to its comprehensive approach to JNDI exploitation, incorporating multiple exploit chains, fuzzing capabilities, and bypass mechanisms. The inclusion of a DNS-based fuzzing module allows for efficient identification of exploitable JNDI chains. The integration of both basic and sophisticated exploit methods caters to a wide range of scenarios, including both older and more recent Java versions. The use of a clear, structured approach to presenting the various modules and techniques is noteworthy.
- Exploit Chains: Supports various JNDI exploit chains targeting common vulnerabilities like Log4j, Fastjson, and others, including basic, basic2, and bypass exploits.
- Fuzzing: Includes a DNS-based fuzzing module to efficiently identify potential JNDI vulnerabilities and bypass techniques.
- Bypass Mechanisms: Provides functionalities to bypass common JNDI security measures using techniques like DNS-based fuzzing and exploiting specific class loading behaviors.
- User-Friendly Interface: Offers a clear and well-documented command-line interface for ease of use and configuration.
- Multiple Exploitation Techniques: Supports various payload types and strategies including object deserialization, basic JNDI lookups, and DNS-based exploits.
The project appears to be actively maintained, with recent commits and a comprehensive README. The extensive documentation, including step-by-step instructions and example usage, indicates a level of maturity and usability. The inclusion of various exploit chains and fuzzing techniques suggests continuous development and improvement. However, the project relies on specific environment configurations (e.g., Burp Suite Intruder, ceye) which may impact accessibility.
JNDIExp is valuable for security researchers and penetration testers aiming to identify and exploit JNDI vulnerabilities in Java applications. It provides a practical toolkit for conducting vulnerability assessments, particularly those involving older Java versions. The inclusion of fuzzing and bypass capabilities expands its utility beyond simple exploit execution. The tool requires careful configuration and understanding of JNDI concepts for effective use. It is well-suited for manual testing and automated vulnerability scanning workflows.