## https://sploitus.com/exploit?id=26AE20C8-15D8-5558-9FCD-6240861D3FC4
# Fastjson 1.2.83 RCE PoC
Fastjson 1.2.66โ1.2.83: Script for verifying remote code execution vulnerabilities | AutoType is still vulnerable even when disabled by default | Compatible with JDK 8/17/21
Does the damage-minimization test detect this vulnerability?
The test process report is in the.docx file; Iโm too lazy to write it again.
**POC Overview:**
The poc.py script causes the target server to send a request to our own server. Our server must have a listening port enabled (remember to turn on the firewall). If our server responds with data, it indicates that there is a vulnerability on the target server. If there is no response, itโs likely that there is no vulnerability, or there are other reasons.