Merge pull request #41 from qtc-de/develop

Prepare v4.4.0 Release
qtc-de · Jan 19, 2023 · 133cd98 · 133cd98
2 parents 2cc574c + 2a2c3c3
commit 133cd98
Show file tree

Hide file tree

Showing 75 changed files with 2,355 additions and 3,872 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,16 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [4.4.0] - Jan 19, 2023
+
+### Changed
+
+* Add support for non default `serialVersionUID` values
+* Refactored test configurations
+* Update dependencies
+* Make *rmg* Java16+ compatible
+
+
 ## [4.3.1] - Sep 19, 2022
 
 ### Changed

diff --git a/README.md b/README.md
@@ -4,7 +4,7 @@
 
 [![](https://github.com/qtc-de/remote-method-guesser/workflows/master%20maven%20CI/badge.svg?branch=master)](https://github.com/qtc-de/remote-method-guesser/actions/workflows/master.yml)
 [![](https://github.com/qtc-de/remote-method-guesser/workflows/develop%20maven%20CI/badge.svg?branch=develop)](https://github.com/qtc-de/remote-method-guesser/actions/workflows/develop.yml)
-[![](https://img.shields.io/badge/version-4.3.1-blue)](https://github.com/qtc-de/remote-method-guesser/releases)
+[![](https://img.shields.io/badge/version-4.4.0-blue)](https://github.com/qtc-de/remote-method-guesser/releases)
 [![](https://img.shields.io/badge/build%20system-maven-blue)](https://maven.apache.org/)
 ![](https://img.shields.io/badge/java-8%2b-blue)
 [![](https://img.shields.io/badge/license-GPL%20v3.0-blue)](https://github.com/qtc-de/remote-method-guesser/blob/master/LICENSE)
@@ -140,13 +140,13 @@ bind operations. When using the ``bind`` or ``rebind`` action *remote-method-gue
 [+]
 [+] 	- plain-server2
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:39153 ObjID: [-af587e6:17d6f7bb318:-7ff7, 9040809218460289711]
+[+] 		    Endpoint: iinsecure.example:39153 ObjID: [-af587e6:17d6f7bb318:-7ff7, 9040809218460289711]
 [+] 	- legacy-service
 [+] 		--> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub (unknown class)
-[+] 		    Endpoint: iinsecure.dev:39153 ObjID: [-af587e6:17d6f7bb318:-7ffc, 4854919471498518309]
+[+] 		    Endpoint: iinsecure.example:39153 ObjID: [-af587e6:17d6f7bb318:-7ffc, 4854919471498518309]
 [+] 	- plain-server
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:39153 ObjID: [-af587e6:17d6f7bb318:-7ff8, 6721714394791464813]
+[+] 		    Endpoint: iinsecure.example:39153 ObjID: [-af587e6:17d6f7bb318:-7ff8, 6721714394791464813]
 
 [qtc@devbox ~]$ rmg bind 172.17.0.2 9010 127.0.0.1:4444 my-object --localhost-bypass 
 [+] Binding name my-object to javax.management.remote.rmi.RMIServerImpl_Stub
@@ -159,16 +159,16 @@ bind operations. When using the ``bind`` or ``rebind`` action *remote-method-gue
 [+]
 [+] 	- plain-server2
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:39153 ObjID: [-af587e6:17d6f7bb318:-7ff7, 9040809218460289711]
+[+] 		    Endpoint: iinsecure.example:39153 ObjID: [-af587e6:17d6f7bb318:-7ff7, 9040809218460289711]
 [+] 	- my-object
 [+] 		--> javax.management.remote.rmi.RMIServerImpl_Stub (known class: JMX Server)
 [+] 		    Endpoint: 127.0.0.1:4444 ObjID: [6633018:17cb5d1bb57:-7ff8, -8114172517417646722]
 [+] 	- legacy-service
 [+] 		--> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub (unknown class)
-[+] 		    Endpoint: iinsecure.dev:39153 ObjID: [-af587e6:17d6f7bb318:-7ffc, 4854919471498518309]
+[+] 		    Endpoint: iinsecure.example:39153 ObjID: [-af587e6:17d6f7bb318:-7ffc, 4854919471498518309]
 [+] 	- plain-server
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:39153 ObjID: [-af587e6:17d6f7bb318:-7ff8, 6721714394791464813]
+[+] 		    Endpoint: iinsecure.example:39153 ObjID: [-af587e6:17d6f7bb318:-7ff8, 6721714394791464813]
 ```
 
 By using *remote-method-guesser's Plugin System*, it is also possible to bind custom objects to the *RMI registry*. To learn more about
@@ -302,17 +302,17 @@ page](./docs/rmg/actions.md#enum).
 [+]
 [+]   - plain-server2
 [+]     --> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+]         Endpoint: iinsecure.dev:42273 ObjID: [-49c48e31:17d6f8692ae:-7ff7, -3079588349672331489]
+[+]         Endpoint: iinsecure.example:42273 ObjID: [-49c48e31:17d6f8692ae:-7ff7, -3079588349672331489]
 [+]   - legacy-service
 [+]     --> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub (unknown class)
-[+]         Endpoint: iinsecure.dev:42273 ObjID: [-49c48e31:17d6f8692ae:-7ffc, -2969569395601583761]
+[+]         Endpoint: iinsecure.example:42273 ObjID: [-49c48e31:17d6f8692ae:-7ffc, -2969569395601583761]
 [+]   - plain-server
 [+]     --> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+]         Endpoint: iinsecure.dev:42273 ObjID: [-49c48e31:17d6f8692ae:-7ff8, 1319708214331962145]
+[+]         Endpoint: iinsecure.example:42273 ObjID: [-49c48e31:17d6f8692ae:-7ff8, 1319708214331962145]
 [+]
 [+] RMI server codebase enumeration:
 [+]
-[+]   - http://iinsecure.dev/well-hidden-development-folder/
+[+]   - http://iinsecure.example/well-hidden-development-folder/
 [+]     --> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub
 [+]     --> de.qtc.rmg.server.interfaces.IPlainServer
 [+]
@@ -412,7 +412,7 @@ a general description and possible vulnerabilities:
 [+]
 [+] 	- jmxrmi
 [+] 		--> javax.management.remote.rmi.RMIServerImpl_Stub (known class: JMX Server)
-[+] 		    Endpoint: iinsecure.dev:41991 ObjID: [6633018:17cb5d1bb57:-7ff8, -8114172517417646722]
+[+] 		    Endpoint: iinsecure.example:41991 ObjID: [6633018:17cb5d1bb57:-7ff8, -8114172517417646722]
 
 [qtc@devbox ~]$ rmg known javax.management.remote.rmi.RMIServerImpl_Stub
 [+] Name:
@@ -500,13 +500,13 @@ for each *bound name* and *remote-method-guesser* displays them during the ``enu
 [+]
 [+] 	- plain-server2
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40393 ObjID: [-2bc5d969:17d6f8cf44c:-7ff7, 1096154566158180646]
+[+] 		    Endpoint: iinsecure.example:40393 ObjID: [-2bc5d969:17d6f8cf44c:-7ff7, 1096154566158180646]
 [+] 	- legacy-service
 [+] 		--> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40393 ObjID: [-2bc5d969:17d6f8cf44c:-7ffc, 625759208507801754]
+[+] 		    Endpoint: iinsecure.example:40393 ObjID: [-2bc5d969:17d6f8cf44c:-7ffc, 625759208507801754]
 [+] 	- plain-server
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40393 ObjID: [-2bc5d969:17d6f8cf44c:-7ff8, -6355415622579283910]
+[+] 		    Endpoint: iinsecure.example:40393 ObjID: [-2bc5d969:17d6f8cf44c:-7ff8, -6355415622579283910]
 ```
 
 ``ObjID`` values consist out of different components. These components are displayed in human readable form when

diff --git a/docker/example-server/CHANGELOG.md b/docker/example-server/CHANGELOG.md
@@ -6,6 +6,19 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [4.0] - Jan 19, 2023
+
+### Added
+
+* Add build script for containers
+* Add build script for certificate store
+
+### Changed
+
+* Change RMI hostname from `iinsecure.dev` to `iinsecure.example`
+* Change server certificate
+
+
 ## [3.3] - May 08, 2022
 
 ### Changed

diff --git a/docker/example-server/Dockerfile-jdk11 b/docker/example-server/Dockerfile-jdk11
@@ -1,7 +1,7 @@
 ###########################################
 ###            Build Stage 1            ###
 ###########################################
-FROM maven:3.8.2-openjdk-8 AS maven-builder
+FROM maven:3.8.6-openjdk-8-slim AS maven-builder
 COPY ./resources/server /usr/src/app
 WORKDIR /usr/src/app
 RUN mvn clean package
@@ -31,13 +31,13 @@ RUN set -ex \
     && ln -s /usr/lib/jvm/java-11-openjdk/bin/java /usr/bin/java \
     && chmod +x /opt/start.sh
 
-ENV _JAVA_OPTIONS -Djava.rmi.server.hostname=iinsecure.dev \
+ENV _JAVA_OPTIONS -Djava.rmi.server.hostname=iinsecure.example \
     -Djavax.net.ssl.keyStorePassword=password \
     -Djavax.net.ssl.keyStore=/opt/store.p12 \
     -Djavax.net.ssl.keyStoreType=pkcs12 \
     -Djava.rmi.server.useCodebaseOnly=false \
     -Djava.security.policy=/opt/policy \
-    -Djava.rmi.server.codebase=http://iinsecure.dev/well-hidden-development-folder/
+    -Djava.rmi.server.codebase=http://iinsecure.example/well-hidden-development-folder/
 
 EXPOSE 1090/tcp 1098/tcp 9010/tcp
 

diff --git a/docker/example-server/Dockerfile-jdk8 b/docker/example-server/Dockerfile-jdk8
@@ -1,7 +1,7 @@
 ###########################################
 ###            Build Stage              ###
 ###########################################
-FROM maven:3.8.2-openjdk-8 AS maven-builder
+FROM maven:3.8.6-openjdk-8-slim AS maven-builder
 COPY ./resources/server /usr/src/app
 WORKDIR /usr/src/app
 RUN mvn clean package
@@ -21,13 +21,13 @@ COPY --from=maven-builder /usr/src/app/target/rmg-example-server-*-jar-with-depe
 RUN set -ex \
     && chmod +x /opt/start.sh
 
-ENV _JAVA_OPTIONS -Djava.rmi.server.hostname=iinsecure.dev \
+ENV _JAVA_OPTIONS -Djava.rmi.server.hostname=iinsecure.example \
     -Djavax.net.ssl.keyStorePassword=password \
     -Djavax.net.ssl.keyStore=/opt/store.p12 \
     -Djavax.net.ssl.keyStoreType=pkcs12 \
     -Djava.rmi.server.useCodebaseOnly=false \
     -Djava.security.policy=/opt/policy \
-    -Djava.rmi.server.codebase=http://iinsecure.dev/well-hidden-development-folder/
+    -Djava.rmi.server.codebase=http://iinsecure.example/well-hidden-development-folder/
 
 EXPOSE 1090/tcp 1098/tcp 9010/tcp
 

diff --git a/docker/example-server/Dockerfile-jdk9 b/docker/example-server/Dockerfile-jdk9
@@ -1,7 +1,7 @@
 ###########################################
 ###            Build Stage 1            ###
 ###########################################
-FROM maven:3.8.2-openjdk-8 AS maven-builder
+FROM maven:3.8.6-openjdk-8-slim AS maven-builder
 COPY ./resources/server /usr/src/app
 WORKDIR /usr/src/app
 RUN mvn clean package
@@ -31,13 +31,13 @@ RUN set -ex \
     && ln -s /usr/lib/jvm/java-9-openjdk/bin/java /usr/bin/java \
     && chmod +x /opt/start.sh
 
-ENV _JAVA_OPTIONS -Djava.rmi.server.hostname=iinsecure.dev \
+ENV _JAVA_OPTIONS -Djava.rmi.server.hostname=iinsecure.example \
     -Djavax.net.ssl.keyStorePassword=password \
     -Djavax.net.ssl.keyStore=/opt/store.p12 \
     -Djavax.net.ssl.keyStoreType=pkcs12 \
     -Djava.rmi.server.useCodebaseOnly=false \
     -Djava.security.policy=/opt/policy \
-    -Djava.rmi.server.codebase=http://iinsecure.dev/well-hidden-development-folder/
+    -Djava.rmi.server.codebase=http://iinsecure.example/well-hidden-development-folder/
 
 EXPOSE 1090/tcp 1098/tcp 9010/tcp
 

diff --git a/docker/example-server/README.md b/docker/example-server/README.md
@@ -11,9 +11,9 @@ You can either build the container from source or pull it from *GitHub Packages*
 
 * To load the container from the *GitHub Container Registry* just use the corresponding pull command:
   ```console
-  $ docker pull ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:3.2-jdk8
-  $ docker pull ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:3.2-jdk9
-  $ docker pull ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:3.2-jdk11
+  $ docker pull ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:4.0-jdk8
+  $ docker pull ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:4.0-jdk9
+  $ docker pull ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:4.0-jdk11
   ```
 
 To change the default configuration of the container (like e.g. the *SSL* certificate), you can modify the [docker-compose.yml](./docker-compose-jdk8.yml)
@@ -35,17 +35,17 @@ The registry on port `1090` is *SSL* protected and contains three available boun
 [+]
 [+] 	- plain-server
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7fff, 8831379559932805383]
+[+] 		    Endpoint: iinsecure.example:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7fff, 8831379559932805383]
 [+] 	- ssl-server
 [+] 		--> de.qtc.rmg.server.interfaces.ISslServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:42031  TLS: yes  ObjID: [-492549a8:1809adab6bf:-7ffe, -8819602238278920745]
+[+] 		    Endpoint: iinsecure.example:42031  TLS: yes  ObjID: [-492549a8:1809adab6bf:-7ffe, -8819602238278920745]
 [+] 	- secure-server
 [+] 		--> de.qtc.rmg.server.interfaces.ISecureServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ffd, -5037949272481440924]
+[+] 		    Endpoint: iinsecure.example:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ffd, -5037949272481440924]
 [+]
 [+] RMI server codebase enumeration:
 [+]
-[+] 	- http://iinsecure.dev/well-hidden-development-folder/
+[+] 	- http://iinsecure.example/well-hidden-development-folder/
 [+] 		--> de.qtc.rmg.server.interfaces.ISslServer
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer
 [+] 		--> de.qtc.rmg.server.interfaces.ISecureServer
@@ -97,20 +97,20 @@ The registry on port `1098` hosts an *Activation System* and has some *activatab
 [+]
 [+] 	- activation-test
 [+] 		--> de.qtc.rmg.server.activation.IActivationService (unknown class)
-[+] 		    Activator: iinsecure.dev:1098  ActivationID: -492549a8:1809adab6bf:-7ff1
+[+] 		    Activator: iinsecure.example:1098  ActivationID: -492549a8:1809adab6bf:-7ff1
 [+] 	- activation-test2
 [+] 		--> de.qtc.rmg.server.activation.IActivationService2 (unknown class)
-[+] 		    Activator: iinsecure.dev:1098  ActivationID: -492549a8:1809adab6bf:-7fee
+[+] 		    Activator: iinsecure.example:1098  ActivationID: -492549a8:1809adab6bf:-7fee
 [+] 	- plain-server
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7fec, 5541025679742310482]
+[+] 		    Endpoint: iinsecure.example:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7fec, 5541025679742310482]
 [+] 	- java.rmi.activation.ActivationSystem
 [+] 		--> sun.rmi.server.Activation$ActivationSystemImpl_Stub (known class: RMI Activator)
-[+] 		    Endpoint: iinsecure.dev:1098  TLS: no  ObjID: [0:0:0, 4]
+[+] 		    Endpoint: iinsecure.example:1098  TLS: no  ObjID: [0:0:0, 4]
 [+]
 [+] RMI server codebase enumeration:
 [+]
-[+] 	- http://iinsecure.dev/well-hidden-development-folder/
+[+] 	- http://iinsecure.example/well-hidden-development-folder/
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer
 [+] 		--> de.qtc.rmg.server.activation.IActivationService
 [+] 		--> sun.rmi.server.Activation$ActivationSystemImpl_Stub
@@ -168,17 +168,17 @@ registry port binds an *RMI Activator instance*, but not a full working *Activat
 [+]
 [+] 	- plain-server2
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ff7, 8893583921173173865]
+[+] 		    Endpoint: iinsecure.example:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ff7, 8893583921173173865]
 [+] 	- legacy-service
 [+] 		--> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ffc, -5452660335673756521]
+[+] 		    Endpoint: iinsecure.example:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ffc, -5452660335673756521]
 [+] 	- plain-server
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer (unknown class)
-[+] 		    Endpoint: iinsecure.dev:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ff8, 5860842907020657289]
+[+] 		    Endpoint: iinsecure.example:40579  TLS: no  ObjID: [-492549a8:1809adab6bf:-7ff8, 5860842907020657289]
 [+]
 [+] RMI server codebase enumeration:
 [+]
-[+] 	- http://iinsecure.dev/well-hidden-development-folder/
+[+] 	- http://iinsecure.example/well-hidden-development-folder/
 [+] 		--> de.qtc.rmg.server.legacy.LegacyServiceImpl_Stub
 [+] 		--> de.qtc.rmg.server.interfaces.IPlainServer
 [+]
@@ -238,12 +238,12 @@ Each successful method call is logged on the server side. The following listing
 was started. Additionally, one successful method call on the ``login`` method was logged:
 
 ```console
-[qtc@devbox ~]$ docker run ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:3.2-jdk9
+[qtc@devbox ~]$ docker run ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:4.0-jdk9
 [+] IP address of the container: 172.17.0.2
 [+] Adding gateway address to /etc/hosts file...
 [+] Adding RMI hostname to /etc/hosts file...
 [+] Starting rmi server...
-Picked up _JAVA_OPTIONS: -Djava.rmi.server.hostname=iinsecure.dev     -Djavax.net.ssl.keyStorePassword=password     -Djavax.net.ssl.keyStore=/opt/store.p12     -Djavax.net.ssl.keyStoreType=pkcs12     -Djava.rmi.server.useCodebaseOnly=false     -Djava.security.policy=/opt/policy     -Djava.rmi.server.codebase=http://iinsecure.dev/well-hidden-development-folder/
+Picked up _JAVA_OPTIONS: -Djava.rmi.server.hostname=iinsecure.example     -Djavax.net.ssl.keyStorePassword=password     -Djavax.net.ssl.keyStore=/opt/store.p12     -Djavax.net.ssl.keyStoreType=pkcs12     -Djava.rmi.server.useCodebaseOnly=false     -Djava.security.policy=/opt/policy     -Djava.rmi.server.codebase=http://iinsecure.example/well-hidden-development-folder/
 [2022.05.06 - 19:45:12] Initializing Java RMI Server:
 [2022.05.06 - 19:45:12] 
 [2022.05.06 - 19:45:12]     Creating RMI-Registry on port 1090

diff --git a/docker/example-server/build.sh b/docker/example-server/build.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+
+set -e
+
+if [ $# -lt 1 ]; then
+    echo "$0 [<version>] [<version>] ..."
+    exit 1
+fi
+
+for VERSION in $@; do
+
+    if [[ $VERSION -ne 8 && $VERSION -ne 9 && $VERSION -ne 11 ]]; then
+        echo "[-] Unsupported version: ${VERSION}"
+        continue
+    fi
+
+    echo "[+] Starting build for jdk${VERSION}."
+    sleep 1.5
+
+    mv "docker-compose-jdk${VERSION}.yml" docker-compose.yml 
+    mv "Dockerfile-jdk${VERSION}" Dockerfile 
+
+    set +e
+    docker compose build
+
+    mv docker-compose.yml "docker-compose-jdk${VERSION}.yml"
+    mv Dockerfile "Dockerfile-jdk${VERSION}"
+
+done
diff --git a/docker/example-server/docker-compose-jdk11.yml b/docker/example-server/docker-compose-jdk11.yml
@@ -2,18 +2,18 @@ version: '3.7'
 
 services:
     rmg:
-      image: ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:3.3-jdk11
+      image: ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:4.0-jdk11
       build: .
       environment:
         - > 
           _JAVA_OPTIONS=
-          -Djava.rmi.server.hostname=iinsecure.dev
+          -Djava.rmi.server.hostname=iinsecure.example
           -Djavax.net.ssl.keyStorePassword=password
           -Djavax.net.ssl.keyStore=/opt/store.p12
           -Djavax.net.ssl.keyStoreType=pkcs12
           -Djava.rmi.server.useCodebaseOnly=false
           -Djava.security.policy=/opt/policy
-          -Djava.rmi.server.codebase=http://iinsecure.dev/well-hidden-development-folder/
+          -Djava.rmi.server.codebase=http://iinsecure.example/well-hidden-development-folder/
         - >
           DELETE_THIS_AND_THE_ABOVE_LINE_TO_ENABLE_CODEBASE_LOGGING_OR_TO_DISABLE_COLOR=
           -Djava.rmi.server.RMIClassLoaderSpi=de.qtc.rmg.server.utils.CodebaseLogger

diff --git a/docker/example-server/docker-compose-jdk8.yml b/docker/example-server/docker-compose-jdk8.yml
@@ -2,18 +2,18 @@ version: '3.7'
 
 services:
     rmg:
-      image: ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:3.3-jdk8
+      image: ghcr.io/qtc-de/remote-method-guesser/rmg-example-server:4.0-jdk8
       build: .
       environment:
         - > 
           _JAVA_OPTIONS=
-          -Djava.rmi.server.hostname=iinsecure.dev
+          -Djava.rmi.server.hostname=iinsecure.example
           -Djavax.net.ssl.keyStorePassword=password
           -Djavax.net.ssl.keyStore=/opt/store.p12
           -Djavax.net.ssl.keyStoreType=pkcs12
           -Djava.rmi.server.useCodebaseOnly=false
           -Djava.security.policy=/opt/policy
-          -Djava.rmi.server.codebase=http://iinsecure.dev/well-hidden-development-folder/
+          -Djava.rmi.server.codebase=http://iinsecure.example/well-hidden-development-folder/
         - >
           DELETE_THIS_AND_THE_ABOVE_LINE_TO_ENABLE_CODEBASE_LOGGING_OR_TO_DISABLE_COLOR=
           -Djava.rmi.server.RMIClassLoaderSpi=de.qtc.rmg.server.utils.CodebaseLogger