skills.rest
langbyyi
langbyyiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

jndi-injection

Test JNDI injection vulnerabilities in Java applications with JDK-specific exploit strategies.

96|1|Updated Jun 4, 2026
Search Tags:#penetration-testing#rce#vulnerability-assessment#log4shell#jndi-injection#java-security#jdk-bypass
One-click install
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill jndi-injection-langbyyi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: jndi-injection
Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/jndi-injection
Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill jndi-injection-langbyyi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill solves the challenge of identifying and exploiting hard-to-detect JNDI injection vulnerabilities in Java applications, which can enable unauthenticated remote code execution and are often missed by automated vulnerability scanners.

Core Features & Use Cases

  • Comprehensive Attack Coverage: Includes guidance for RMI and LDAP attack vectors, JDK version-specific restriction bypasses (including post-8u191 serialized gadget and BeanFactory EL injection paths), and Log4Shell (CVE-2021-44228) specific exploitation.
  • Tooling & Payload Guidance: Provides setup instructions for marshalsec, ysoserial, and Rogue JNDI, plus WAF-obfuscated Log4j payload variants and detection probes for common sinks in Log4j2, Spring, Solr, and Fastjson.
  • Structured Testing Methodology: Offers a step-by-step workflow for confirming JNDI injection, determining target JDK versions, selecting appropriate exploit strategies, and avoiding common detection pitfalls. Use case: A security tester can use this Skill to confirm a Log4Shell vulnerability in a Java-based web application, bypass WAF filters using obfuscated payloads, and achieve remote code execution on the target server during an authorized engagement.

Quick Start

Use the jndi-injection skill to test a suspected JNDI injection point in a Java application by first sending a DNS-only probe to confirm the vulnerability, then select the appropriate exploit strategy based on the target JDK version and available gadget chains.

Frequently Asked Questions about jndi-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit JNDI injection vulnerabilities in Java applications?▼

Test JNDI injection by sending a DNS-only probe to confirm the vulnerability, then determine the target JDK version to select the appropriate exploit strategy and gadget chain for remote code execution.

What is a Log4Shell WAF bypass payload?▼

Log4Shell WAF bypass payloads are obfuscated variations of CVE-2021-44228 exploit strings designed to evade web application firewall filters while successfully triggering JNDI lookups in Log4j2 for remote code execution.

How do I bypass JDK restrictions for JNDI injection after version 8u191?▼

Bypass JDK restrictions post-8u191 by utilizing serialized gadget chains and the BeanFactory EL injection path. These strategies circumvent the default trust restrictions on remote class loading to achieve remote code execution.

Can I use marshalsec and ysoserial for JNDI injection testing?▼

Yes, you can use marshalsec and ysoserial for JNDI injection testing. The Skill provides setup instructions and tooling guidance for these frameworks to facilitate the exploitation of vulnerable Java enterprise applications.

What Java frameworks are vulnerable to JNDI injection attacks?▼

Java frameworks vulnerable to JNDI injection attacks include Log4j2, Spring, Apache Solr, and Fastjson. These enterprise frameworks often contain common sinks where untrusted input reaches vulnerable InitialContext.lookup() methods.

Why does automated vulnerability scanning miss JNDI injection flaws?▼

Automated vulnerability scanners often miss JNDI injection flaws because they require complex context-specific payloads and version-dependent bypass strategies that automated testing tools cannot easily generate or dynamically confirm.

Related Skills

Explore More Software Engineering Skills→
ok-helloworldok-helloworld
241

jndi-injection

Detect Java JNDI injection sinks and map feasible RMI, LDAP, or DNS vectors.

Community
Advanced
uphiagouphiago
1.1k

hunt-deserialization

Detect and exploit insecure deserialization vulnerabilities across Java, PHP, Python, .NET, Ruby, and JNDI/Log4Shell stacks.

Community
Intermediate
Prohao42Prohao42
120

jndi-injection

Detect and exploit JNDI injection in Java applications via RMI and LDAP.

Community
Advanced
utsavthakurutsavthakur

jndi-injection

Identify JNDI injection vulnerabilities in Java applications via RMI, LDAP, and DNS patterns.

Community
Advanced