CVE-2018-1297 PoC — Apache JMeter 安全漏洞

Source

https://github.com/Al1ex/CVE-2018-1297

Associated Vulnerability

Title: Apache JMeter 安全漏洞 (CVE-2018-1297)
Description:When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

Description

EXP for CVE-2018-1297

Readme

# CVE-2018-1297
EXP for CVE-2018-1297

PS:you need download ysoserial by yourself!!!
https://github.com/Al1ex/ysoserial-0.0.6-SNAPSHOT-all/releases

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →