Skip to content

ReadMe contains insufficient information #1

@Varbaek

Description

@Varbaek

Very nice exploit,

However, as I have avoided touching Java since the beginning of time, I have no idea how to create an executable Jar file, as my knowledge of Java is script kiddie level. I did check out the source code briefly to see if I could port the exploit easily to Python, PHP or Perl, but alas it's using the ysoserial class and I'm running out of time on a pentest.

It would be nice, if there was some sort of pointer besides that I probably have to create a Jar file first. Obviously I opened Eclipse but rage quit. I also tried jar cfe exploit.jar exploit * in the root of the directory, but as I didn't have a manifest file or something, it failed.

The main reason for opening this ticket, is not because I couldn't figure out how to do this, but mainly because I don't have the time to do it during a pentest with an extremely short testing window.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions