evil-rmi-server

evil-rmi-server 任意のコマンドを起動できる悪意のあるRMIサーバー。ローカル権限昇格のシナリオでCVE-2021-44228に役立つ可能性があります。 ビルド ./gradlew bootJar 実行 Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil RMI Server to help construct and run an arbitrary command. The Command to run. Wrap in quotes if there are spaces...

Exploit for CVE-2021-22006

It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is CVE-2021-22006. The target product/service is Java-based applications, specifically those using JNDI services. The vulnerability class/vector is RCE Remote Code Execution, and the probable entry points are...