wizard32 8534fde50f Websphere Java Deserialization (RCE) ...

This module exploits a vulnerability in IBM's WebSphere Application Server. An unsafe deserialization call of unauthenticated Java objects exists to the Apache Commons Collections (ACC) library, which allows remote arbitrary code execution. Authentication is not required in order to exploit this vulnerability.

2017-01-03 16:04:51 +02:00

..

auxiliary

check if the socket exists before closing

2016-12-30 14:59:31 -06:00

encoders

Implement first pass of architecture/platform refactor

2016-10-28 07:16:05 +10:00

exploits

Websphere Java Deserialization (RCE)

2017-01-03 16:04:51 +02:00

nops

Merge remote-tracking branch 'upstream/master' into land-7507-uuid-arch

2016-11-20 19:08:56 -06:00

payloads

Fix nil bug in generic/custom and change opt order

2016-12-28 05:15:25 -06:00

post

Land #7744, update kiwi extension to Mimikatz 2.1

2016-12-29 16:22:45 -06:00