{"id":13841168,"url":"https://github.com/lalajun/RMIDeserialize","last_synced_at":"2025-07-11T12:30:25.335Z","repository":{"id":105440296,"uuid":"273928989","full_name":"lalajun/RMIDeserialize","owner":"lalajun","description":"RMI 反序列化环境 一步步","archived":false,"fork":false,"pushed_at":"2020-08-31T07:52:14.000Z","size":578,"stargazers_count":212,"open_issues_count":4,"forks_count":23,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-08-05T17:26:54.417Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lalajun.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2020-06-21T15:13:52.000Z","updated_at":"2024-05-16T15:59:32.000Z","dependencies_parsed_at":null,"dependency_job_id":"2cac75a3-f7c4-4f6d-80a1-2c9fdbcdfe76","html_url":"https://github.com/lalajun/RMIDeserialize","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lalajun%2FRMIDeserialize","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lalajun%2FRMIDeserialize/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lalajun%2FRMIDeserialize/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lalajun%2FRMIDeserialize/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lalajun","download_url":"https://codeload.github.com/lalajun/RMIDeserialize/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225720397,"owners_count":17513596,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:03.670Z","updated_at":"2024-11-21T11:30:21.545Z","avatar_url":"https://github.com/lalajun.png","language":"Java","funding_links":[],"categories":["Java","Java (504)"],"sub_categories":[],"readme":"# RMIDeserialize\nRMI反序列化学习环境，细节请参考博客[RMI-反序列化-深入-上](https://lalajun.github.io/2020/06/22/RMI%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96-%E6%B7%B1%E5%85%A5-%E4%B8%8A/)、[RMI-反序列化-深入-下](https://lalajun.github.io/2020/06/22/RMI%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96-%E6%B7%B1%E5%85%A5-%E4%B8%8B/)\n\n`java -cp RMIDeserialize.jar com.lala.ServerAndRegister` ：起一个包含CC链可以被攻击的RMI服务\n\n`java -jar RMI-Bypass290.jar \u003c攻击目标IP\u003e \u003c攻击目标端口\u003e \u003c本地JRMP服务IP\u003e \u003c本地JRMP服务端口\u003e`：攻击目标8u231版本以下的RMI服务。\n\n其他功能可以从源码运行。\n\n![总结图.png](http://ww1.sinaimg.cn/large/006iKNp3ly1gg378mdwp2j31ut18015j.jpg)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flalajun%2FRMIDeserialize","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flalajun%2FRMIDeserialize","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flalajun%2FRMIDeserialize/lists"}