GWT: Unpatched, Unauthenticated Java Deserialization
Tags
attack-pattern: Data Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Javascript - T1059.007 Python - T1059.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 9843e92e-2429-42aa-af71-9b72943190b9
Fingerprint 9d0399126cf74e9d
Analysis status DONE
Considered CTI value 2
Text language
Published Feb. 22, 2024, midnight
Added to db Aug. 31, 2024, 11:01 a.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline GWT: Unpatched, Unauthenticated Java Deserialization
Title GWT: Unpatched, Unauthenticated Java Deserialization
Detected Hints/Tags/Attributes 46/1/19
Source URLs
Redirection Url
Details Source https://bishopfox.com/blog/gwt-unpatched-unauthenticated-java-deserialization-vulnerability
URL Provider
Details Provider Source level domain
Details bishopfox.com bishopfox.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 444 ✔ bishopfox.com https://bishopfox.com/feeds/blog.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 397 
asp.net
Details Domain 42 
com.google
Details Domain 138 
java.io
Details Domain 1 
dvc5ng8w4odw47m0a8qk45hdv41vpndc.oastify.com
Details File 1 
rpc.inc
Details File 4 
6-snapshot-all.jar
Details File 1 
gwt_urldns.bin
Details File 16 
java.sql
Details md5 1 
18FD06825EC4CA84A7FDA272DEDDAFBB
Details md5 1 
813E653A29B5DD147027BD9F1DDC06B1
Details md5 1 
259823D3B8B1029302496D0C7E009509
Details md5 1 
458602FF7418310373EB05D1C5992BC5
Details IPv4 1 
10.1.10.161
Details IPv4 1 
10.1.2.20
Details IPv4 1441 
127.0.0.1
Details Url 1 
http://10.1.10.161:8888/stockwatcher/|18fd06825ec4ca84a7fda272deddafbb|com.google.gwt.sample.stockwatcher.client.stockpriceservice|getprices|[ljava.lang.string;/2600011424|com.google.gwt.sample.stockwatcher.client.customclass1/769391051|a
Details Url 1 
http://10.1.2.20:8888/stockwatcher/|813e653a29b5dd147027bd9f1ddc06b1|com.google.gwt.sample.stockwatcher.client.checkcustomclassservice|checkcustomclass1|com.google.gwt.sample.stockwatcher.client.customclass1/658581322|ro0abxceaaaaaa==|com.google.gwt.sample.stockwatcher.client.customclass2/69504871|a
Details Url 1 
http://127.0.0.1:8888/stockwatcher/|259823d3b8b1029302496d0c7e009509|com.google.gwt.sample.stockwatcher.client.checkcustomclassservice|checkcustomclass1|com.google.gwt.sample.stockwatcher.client.customclass1/1972642674|ro0abxceaaaaaxqacwjpc2hvcgzvehnyabfqyxzhlnv0awwusgfzafnldlpehzwwulc0awaaehb3daaaaai
Details Url 1 
http://10.1.2.20:8888/stockwatcher/|259823d3b8b1029302496d0c7e009509|com.google.gwt.sample.stockwatcher.client.checkcustomclassservice|checkcustomclass1|com.google.gwt.sample.stockwatcher.client.customclass1/1972642674|ro0abxceaaaaaa==|com.google.gwt.sample.stockwatcher.client.customclass2/69504871|java.sql.date/730999118|string1