## https://sploitus.com/exploit?id=BEFEB390-2BAF-5255-A1B8-60071A8DCF99
This is a collection of Java deserialization exploits, specifically targeting various Java applications. The exploits are designed to bypass Java's deserialization security features and execute arbitrary code on the target system. The exploits are implemented in Python and use the ysoserial library to generate the malicious payload.
The exploits target the following applications:
Cisco Prime Infrastructure (CVE-2016-1291)
JBoss (CVE-2015-7501)
Jenkins (CVE-2015-8103 and CVE-2016-0792)
OpenNMS (no CVE assigned)
Each exploit has its own Python script, which takes the target IP and port as input, and uses the ysoserial library to generate the malicious payload. The payload is then sent to the target application, which is vulnerable to the deserialization attack.
The exploits are designed to be used by an attacker to gain remote code execution on the target system. They are not intended for use in a legitimate environment.
The execution context for these exploits is typically a web application that uses Java deserialization, such as a web service or a web application that uses Java-based frameworks like Spring or Hibernate. The attacker would need to have access to the target system and be able to send a malicious payload to the vulnerable application.
The preconditions