Java RMI / JMX:

Vulnerability Discovery

Find unauth JMX access and extract creds via jmxterm

1 guide • Created Apr 4, 2026 • Updated Apr 4, 2026

1 guide

JMX Unauthenticated Access

Apr 4, 2026 • 6 min read

Vulnerability discovery for Java RMI and JMX targets the common security gaps in these services. Key findings include unauthenticated RMI registries accepting arbitrary connections, JMX ports open without authentication or SSL, and endpoints that accept untrusted deserialized objects.

The subpages show how to identify these weaknesses and determine which ones lead to exploitable conditions.