BaRMIe

BaRMIe BaRMIe 是一款用于枚举和攻击 Java RMI（远程方法调用）服务的工具。 RMI 服务常常在缺乏适当安全控制的情况下暴露危险功能，然而由于缺乏有效的测试工具，RMI 服务在安全评估中往往被忽视。2008 年，Adam Boulton 在 AppSec USA 上发表了演讲（YouTube）并发布了一些 RMI 攻击工具，但这些工具很快消失了。不过，即使有了这些工具，成功的零知识攻击仍需通过网络进行大规模暴力破解（约 64 位/90 亿亿种可能性）。 BaRMIe 的目标是让安全专业人员能够识别、攻击和保护不安全的 RMI 服务。通过利用现有软件中的部分 RMI...

Apache James Deserialization RCE(CVE-2017-12628)

Analysis of CVE-2017-12628 This morning I spotted a tweet mentioning an “Apache James 3.0.1 JMX Server Deserialization” vulnerability, CVE-2017-12628, which caught my eye because I wrote a generic JMX deserialization exploit which is included in my RMI attack tool BaRMIe. A quick search for more...

Java RMI Enumeration & Attack Tool: BaRMIe

BaRMIe is a tool for enumerating and attacking Java RMI Remote Method Invocation services. RMI services often expose dangerous functionality without adequate security controls, however RMI services tend to pass under the radar during security assessments due to the lack of effective testing tools...