Description
攻击者利用 jdwp 协议，通过精心构造的 payload 可以实现远程代码执行。
Java Debug 远程调试接口远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/language/JDWP-%E8%B0%83%E8%AF%95%E6%8E%A5%E5%8F%A3-RCE-%E6%BC%8F%E6%B4%9E.md
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/JDWP/JDWP%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://comate.baidu.com/zh/page/b1vtvdpetny
https://blog.csdn.net/htjl575896870/article/details/142882157
https://developer.aliyun.com/article/1160271
https://security.tencent.com/index.php/blog/msg/137
https://www.cnblogs.com/flashine/articles/14366118.html
https://qkl.seebug.org/vuldb/ssvid-89216
https://qsli.github.io/2018/08/12/jdwp/
https://zhuanlan.zhihu.com/p/147315596
https://www.acunetix.com/vulnerabilities/web/java-debug-wire-protocol-remote-code-execution/
https://www.invicti.com/web-application-vulnerabilities/java-debug-wire-protocol-remote-code-execution
https://www.wiz.io/blog/exposed-jdwp-exploited-in-the-wild
https://www.exploit-db.com/exploits/46501
https://blog.spoock.com/2019/04/20/jdwp-rce/