the_open_door
coffee
ESEN
← Tools

beanshooter

JMX enumeration and exploitation (MBeans, MLet for RCE).

JMX (Java Management Extensions) enumeration and exploitation tool: lists exposed MBeans and deploys a malicious MLet to run commands (RCE) against insecure JMX services.

Family General

Flags info standard --command

Cheatsheet Java RMI / JMX · 1099

Installation

Useful commands2 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.