BishopFox / rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
https://labs.bishopfox.com/tech-blog/rmiscout
MIT License
420 stars 60 forks source link

RMI services generated by Spring Framework's RmiInvocationHandler? #11

Open blunden opened 3 years ago

blunden commented 3 years ago

While testing RMI services generated by Spring Framework's RmiInvocationHandler, rmiscout complains about signatures not matching even when using signatures copied straight from the Interface definition in the decompiled server component jar.

It appears like Spring wraps the service methods and therefore change the signature, but I don't know in what way yet. Have you had any experience with any such services?