zerothoughts / spring-jndi Public

Notifications You must be signed in to change notification settings
Fork 39
Star 116

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

116 stars 39 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
client		client
server		server
README.md		README.md

Repository files navigation

spring-jndi

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

Check out writeup for more information: http://zerothoughts.tumblr.com/post/137831000514/spring-framework-deserialization-rce

About

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

Report repository

Releases

No releases published

Packages

No packages published

Languages

Java 100.0%