{"id":2129,"date":"2021-01-09T14:42:23","date_gmt":"2021-01-09T13:42:23","guid":{"rendered":"https:\/\/andreas-klingler.de\/infosec\/?p=2129"},"modified":"2021-01-09T14:42:23","modified_gmt":"2021-01-09T13:42:23","slug":"1100-java-rmi","status":"publish","type":"post","link":"https:\/\/infosec.andreas-klingler.de\/?p=2129","title":{"rendered":"1100 Java&nbsp;<span class=\"caps\">RMI<\/span>"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Enumeration<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Mandatory<\/h3>\n\n\n\n<ol class=\"wp-block-list\"><li>Check con\u00adfig\u00adu\u00adra\u00adtion:<br><code>nmap -sSVC --script rmi-dumpregistry -p 1100 $target<\/code><\/li><\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Optional<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Try <code>msf&gt; use scanner\/misc\/java_rmi_server<\/code> if class upload is pos\u00adsi\u00adble; if yes, try <code>msf&gt; use multi\/misc\/java_rmi_server<\/code>.<\/li><li>Try to exploit with BaRMIe.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enu\u00admer\u00ada\u00adtion Manda\u00adto\u00adry Check con\u00adfig\u00adu\u00adra\u00adtion:nmap \u2011sSVC \u2013script rmi-dumpreg\u00adistry \u2011p 1100 $tar\u00adget Option\u00adal Try msf&gt; use scanner\/misc\/java_rmi_server if class upload is pos\u00adsi\u00adble; if yes, try msf&gt; use multi\/misc\/java_rmi_server. Try to exploit with BaRMIe.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"footnotes":""},"categories":[36],"tags":[37,325],"class_list":["post-2129","post","type-post","status-publish","format-standard","hentry","category-port","tag-checklist","tag-java-rmi"],"_links":{"self":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2129"}],"version-history":[{"count":1,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2129\/revisions"}],"predecessor-version":[{"id":2130,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=\/wp\/v2\/posts\/2129\/revisions\/2130"}],"wp:attachment":[{"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.andreas-klingler.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}