Exploitation

Exploiting Java RMI and JMX services typically leads to remote code execution. The main vectors are Java deserialization attacks against RMI endpoints, abusing remote class loading, and invoking MBean operations that allow arbitrary command execution on the server.

The subpages cover specific tooling and payloads for each attack path, from crafting deserialization gadget chains to leveraging MBeans for direct OS command execution.