Sploitus

Exploit for Deserialization of Untrusted Data in Oracle Access Manager

gitee · 2020-09-03

Exploit Code

MARKDOWN14 lines
## https://sploitus.com/exploit?id=5C63944C-2B9E-5C2E-9823-0B36D5E9964C
This is a Java class file, specifically the `Main` class from the `com.axin` package. The class has a single method, `main`, which takes an array of `String` arguments. The method is not implemented, as it is empty.

The class has several annotations and attributes, including:

`LineNumberTable`: This attribute specifies the line numbers of the Java source code that correspond to the bytecode in the class file.
`LocalVariableTable`: This attribute specifies the local variables and their corresponding indices in the stack frame.
`this`: This attribute refers to the current object being executed.
`main`: This is the entry point of the program, which is called when the program is run.
`args`: This is an array of `String` objects that represents the command-line arguments passed to the program.
`valueExtractors`: This is an array of `ValueExtractor` objects that are used to extract values from the `args` array.
`chainedExtractor`: This is a `ChainedExtractor` object that is used to extract values from the `args` array.
`limitFilter`: This is a `LimitFilter` object that is used to filter the values extracted from the `args` array.
`badAttributeValueExp