JNDI Injection Series: RMI Vector — The Final Piece of The Puzzle
Tags
| attack-pattern: | Data Email Addresses - T1589.002 Javascript - T1059.007 Python - T1059.006 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 65bdce46-640c-4503-b0c3-591b7d2c1626 |
| Fingerprint | 5a6b6b58fc870e9c |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Jan. 13, 2023, 2:13 a.m. |
| Added to db | Jan. 13, 2023, 4:43 a.m. |
| Last updated | Nov. 17, 2024, 12:58 p.m. |
| Headline | JNDI Injection Series: RMI Vector — The Final Piece of The Puzzle |
| Title | JNDI Injection Series: RMI Vector — The Final Piece of The Puzzle |
| Detected Hints/Tags/Attributes | 31/1/20 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 136 | ✔ | InfoSec Write-ups - Medium | https://infosecwriteups.com/feed | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 2 | rmiserver.java |
|
| Details | Domain | 2 | calc.java |
|
| Details | Domain | 2 | rmiclient.java |
|
| Details | Domain | 6 | repo1.maven.org |
|
| Details | 1 | john@x.com |
||
| Details | 1 | zhjohn@a.com |
||
| Details | File | 2 | reg.bin |
|
| Details | File | 5 | rt.exe |
|
| Details | File | 2 | rmiserver.java |
|
| Details | File | 2 | calc.java |
|
| Details | File | 2 | rmiclient.java |
|
| Details | File | 5 | 3.jar |
|
| Details | IPv4 | 2 | 192.168.0.95 |
|
| Details | IPv4 | 619 | 0.0.0.0 |
|
| Details | IPv4 | 3 | 192.168.0.96 |
|
| Details | Url | 2 | http://192.168.0.95:8000 |
|
| Details | Url | 1 | http://192.168.0.95:8000/remoteclass/clac.class |
|
| Details | Url | 9 | http://0.0.0.0:8000 |
|
| Details | Url | 1 | https://repo1.maven.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/8.5.3/tomcat-embed-el-8.5.3.jar |
|
| Details | Url | 1 | https://repo1.maven.org/maven2/org/apache/tomcat/tomcat-catalina/8.5.3/tomcat-catalina-8.5.3.jar |