jdwp-shellifier
jdwp-shellifier copied to clipboard
IOActive
Greetings, jdwp-shellifier will still happily hand over shell in 2021 although Python 2 is getting harder to find. I managed to get system info and commands executed under Python 3.9...
Hey, i've ported the code to python3 and added checking target without exploitation
we normally use java -Xdebug -Xrunjdwp:transport=dt_socket,address=port,server=y,suspend=y,but weather it is possible to hack server when it start up ,add -Xdebug -Xrunjdwp:transport=dt_socket,address=ipv4\ipv6:port,server=**n**,suspend=y as the client mode to connected to server? like a...
Hello @hugsy, I wondered whether it would even be possible to **grab the command output**, as going blind is sometimes tricky. I don't know if it is possible as a...
The maintained version is available here: https://github.com/hugsy/jdwp-shellifier
line 150 should be print ("Error") line 581 should be print ("[-] Failed to invoke Runtime.getRuntime()") it does not have the () now so it is python 2
Changes to jdwp-shellifier.py write the output of the --cmd-with-output commands to a customer Java property, which is then printed so you get the actual command output. jdwp-shellifier3.py is a Python3...
