-
Notifications
You must be signed in to change notification settings - Fork 0
Description
Very nice exploit,
However, as I have avoided touching Java since the beginning of time, I have no idea how to create an executable Jar file, as my knowledge of Java is script kiddie level. I did check out the source code briefly to see if I could port the exploit easily to Python, PHP or Perl, but alas it's using the ysoserial class and I'm running out of time on a pentest.
It would be nice, if there was some sort of pointer besides that I probably have to create a Jar file first. Obviously I opened Eclipse but rage quit. I also tried jar cfe exploit.jar exploit * in the root of the directory, but as I didn't have a manifest file or something, it failed.
The main reason for opening this ticket, is not because I couldn't figure out how to do this, but mainly because I don't have the time to do it during a pentest with an extremely short testing window.