ysoserial icon indicating copy to clipboard operation
ysoserial copied to clipboard

Published 20 hours ago • verified publisher icon frohoff

[Enhancement] TemplatesImpl gadget for IBM Java

Open federicodotta opened this issue 8 years ago • 5 comments

Hi,

The TemplateImpl gadget used by most payloads does not work on IBM Java. There is a way (or you have some indications) to have the gadget working on IBM Java products?

Thank you a lot!

Federico

federicodotta avatar Jul 28 '16 17:07 federicodotta

@matthiaskaiser might have some thoughts/suggestions

frohoff avatar Jul 28 '16 17:07 frohoff

Depends on the target. If the target is not IBM WebSphere, there is a technique to get RCE.

matthiaskaiser avatar Jul 29 '16 10:07 matthiaskaiser

And if it is IBM WebSphere? :)

There are differences between IBM Java and the jre used by WebSphere?

Thank you a lot for the help!

federicodotta avatar Jul 29 '16 10:07 federicodotta

Still working on getting a variant of TemplatesImpl running

matthiaskaiser avatar Jul 29 '16 11:07 matthiaskaiser

Great! Thank you for your great job!

federicodotta avatar Jul 29 '16 12:07 federicodotta