Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-7501 PoC — 多款Red Hat产品代码问题漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/JBoss%20JMXInvokerServlet%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%20CVE-2015-7501.md
Associated Vulnerability
Title:多款Red Hat产品代码问题漏洞 (CVE-2015-7501)
Description:Red Hat JBoss A-MQ等都是美国红帽（Red Hat）公司的产品。Red Hat JBoss A-MQ是美国红帽（Red Hat）公司的一套开源的消息传递平台。BPM Suite（BPMS）是一套集合了JBoss BRMS所有功能的业务流程管理平台。 多款Red Hat产品存在安全漏洞。远程攻击者可借助特制的序列化Java对象利用该漏洞执行任意命令。以下产品和版本受到影响：Red Hat JBoss A-MQ 6.x版本；BPM Suite (BPMS) 6.x版本；BRMS 6.x版本和5
File Snapshot

 # JBoss JMXInvokerServlet 反序列化漏洞 CVE-2015-7501

## 漏洞描述

这是经典的JBoss反序列化漏洞，JBoss在`/invoker/JMXInvoker

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.