# Vulnerability Discovery

> Find unauth JMX access and extract creds via jmxterm

- **URL:** https://hackindex.io/services/java-rmi-jmx/vulnerability-discovery
- **Service:** [Java RMI / JMX](https://hackindex.io/services/java-rmi-jmx.md)
- **Published:** 2026-04-04
- **Updated:** 2026-04-04

Vulnerability discovery for Java RMI and JMX targets the common security gaps in these services. Key findings include unauthenticated RMI registries accepting arbitrary connections, JMX ports open without authentication or SSL, and endpoints that accept untrusted deserialized objects.

The subpages show how to identify these weaknesses and determine which ones lead to exploitable conditions.

## Guides

- [JMX Unauthenticated Access](https://hackindex.io/services/java-rmi-jmx/vulnerability-discovery/jmx-unauthenticated-access.md)