the_open_door
coffee
ESEN
← Tools

BaRMIe

Enumerates and attacks exposed Java RMI services (1099).

Enumerates and attacks exposed Java RMI services (RMI registry on 1099): lists remote objects and tries known attacks such as deserialization and classloader abuse.

Family General

Flags -enum -attack

Cheatsheet Java RMI / JMX · 1099

Installation

Useful commands2 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.