Java JMX 存在远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/muphy1112/JMXMBeanShell
• https://www.anquanke.com/post/id/194126
• https://www.cnblogs.com/0x28/p/15685164.html
• https://cloud.tencent.com/developer/article/2479721
• https://zhuanlan.zhihu.com/p/578508105
• https://m.freebuf.com/articles/vuls/406400.html
• https://nosec.org/m/share/2544.html
• https://forum.90sec.com/t/topic/644
• https://www.liuhaihua.cn/archives/669228.html
• https://blog.0kami.cn/blog/2020/java-jmx-rmi-20200310/
• https://www.anquanke.com/post/id/200682
• https://y4er.com/posts/from-jmx-to-rce/
• https://mogwailabs.de/en/blog/2019/04/attacking-rmi-based-jmx-services/
• https://www.rapid7.com/db/modules/exploit/multi/misc/java_jmx_server/
• https://code-white.com/blog/2023-03-jmx-exploitation-revisited/

Related Vulnerabilities

• Java JMX 存在未授权访问漏洞