jndi_tool is a utility designed for probing and exploiting JNDI (Java Naming and Directory Interface) vulnerabilities. It enables remote code execution (RCE) through RMI and LDAP protocols, leveraging various payloads like fastjson and log4j. The tool offers convenient command-line interfaces for testing common attack vectors and identifying vulnerable systems.
This tool provides a comprehensive suite of JNDI exploitation capabilities in a single package. It supports multiple exploit techniques including RMI, LDAP, fastjson, and log4j, simplifying the process of testing and exploiting relevant vulnerabilities. The clear command-line interface and example usage make it accessible for security assessments. It facilitates targeted attacks with precise payload control.
- RMI Exploitation: Provides capabilities to initiate RMI attacks, execute payloads, and inspect target vulnerabilities.
- LDAP Exploitation: Offers functionality to launch LDAP attacks with various payloads, including detection and execution.
- Fastjson Exploitation: Enables exploitation of Fastjson vulnerabilities through JNDI, facilitating remote code execution.
- Log4j Exploitation: Supports Log4j exploitation using JNDI, allowing injection of malicious payloads.
- Payload Management: Allows specifying and using different payloads (e.g.,
curl,bash,groovy) for exploitation. - Configurable Parameters: Supports various parameters such as host, port, and payload settings.
- User-Friendly Interface: Features a command-line interface with clear instructions and examples for ease of use.
The project appears to be actively maintained, as indicated by recent commits. Comprehensive command-line options and examples suggest a functional and relatively mature tool. The documentation, while concise, is sufficient for basic usage. Its simplicity indicates it is likely focused on practical exploitation.
jndi_tool is valuable for security professionals engaged in penetration testing and vulnerability assessment. It allows for efficient probing and exploitation of JNDI-based vulnerabilities, helping to identify potential security weaknesses in target systems. It provides a convenient way to test a wide range of common JNDI exploits with minimal setup, making it ideal for rapid security evaluations.