Skip to content

Commit 0597d2d

Browse files
committed
Land rapid7#4560, Massive Java RMI update
2 parents a4c6e42 + b07ef33 commit 0597d2d

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

56 files changed

+3771
-191
lines changed
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.

data/java/metasploit/JMXPayload.class

345 Bytes
Binary file not shown.
163 Bytes
Binary file not shown.

lib/msf/core.rb

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,12 @@ module Msf
7575
# Kerberos Support
7676
require 'msf/kerberos/client'
7777

78+
# Java RMI Support
79+
require 'msf/java/rmi/client'
80+
81+
# Java JMX Support
82+
require 'msf/java/jmx'
83+
7884
# Drivers
7985
require 'msf/core/exploit_driver'
8086

lib/msf/java/jmx.rb

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
# -*- coding: binary -*-
2+
3+
require 'rex/java/serialization'
4+
5+
module Msf
6+
module Java
7+
module Jmx
8+
require 'msf/java/jmx/util'
9+
require 'msf/java/jmx/discovery'
10+
require 'msf/java/jmx/handshake'
11+
require 'msf/java/jmx/mbean'
12+
13+
include Msf::Java::Jmx::Util
14+
include Msf::Java::Jmx::Discovery
15+
include Msf::Java::Jmx::Handshake
16+
include Msf::Java::Jmx::Mbean
17+
18+
def initialize(info = {})
19+
super
20+
21+
register_options(
22+
[
23+
Msf::OptString.new('JMX_ROLE', [false, 'The role to interact with an authenticated JMX endpoint']),
24+
Msf::OptString.new('JMX_PASSWORD', [false, 'The password to interact with an authenticated JMX endpoint'])
25+
], HTTP::Wordpress
26+
)
27+
end
28+
29+
def jmx_role
30+
datastore['JMX_ROLE']
31+
end
32+
33+
def jmx_password
34+
datastore['JMX_PASSWORD']
35+
end
36+
37+
end
38+
end
39+
end

0 commit comments

Comments
 (0)