New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Missing packet capture for RMI exploit #5

Open

SeanPesce opened this issue Dec 22, 2021 · 0 comments

SeanPesce commented Dec 22, 2021 •

edited

Loading

I noticed you didn't have an example packet capture of a successful RMI exploit, so I've attached one to this issue.

The relevant data is:

TCP stream 0: HTTP request with malicious lookup string in the user agent header
TCP stream 1: RMI initialization (?)
TCP stream 2: Malicious serialized Java object
TCP stream 3: Reverse shell communication

rmi_exploit.pcap.zip

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment