Java RMI / JMX:
Vulnerability Discovery
Find unauth JMX access and extract creds via jmxterm
1 guide
•
Created Apr 4, 2026
•
Updated Apr 4, 2026
Vulnerability discovery for Java RMI and JMX targets the common security gaps in these services. Key findings include unauthenticated RMI registries accepting arbitrary connections, JMX ports open without authentication or SSL, and endpoints that accept untrusted deserialized objects.
The subpages show how to identify these weaknesses and determine which ones lead to exploitable conditions.