Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2015-5377 — Java deserialization exploit targeting Elasticsearch 1.5.2 transport protocol (port 9300) using Groovy MethodClosure chain for remote code execution via CVE-2015-5377. | Kitploit
Tools/GitHubGitHub/fi3ro/cve-2015-5377
Vulnerability AnalysisExploitationWeb Application ExploitationRemote Access ToolPayload Development
GitHubfi3ro/cve-2015-5377

CVE-2015-5377

Java deserialization exploit targeting Elasticsearch 1.5.2 transport protocol (port 9300) using Groovy MethodClosure chain for remote code execution via CVE-2015-5377.

View Repository
3604 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2015-5377

Elasticsearch 1.5.2 is vulnerable to RCE through insecure java deserialization.

The exploit attack the transport protocol on port 9300. The deserialization is based on Groovy MethodClosure chain to achive RCE.

Download Tool