Sploitus

Exploit for CVE-2015-7501 CVE-2015-7501 CVE-2017-12149 CVE-2017-7504

kitploit Β· 2026-08-25

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-IANXTIANXT-CVE-2015-7501
# Java 역직렬화 취약점 μ‹€μŠ΅μ‹€

이 μ½˜ν…μΈ λŠ” H2HC 맀거진 12호λ₯Ό μœ„ν•΄ μž‘μ„±λœ λ…Όλ¬Έκ³Ό 관련이 μžˆμŠ΅λ‹ˆλ‹€.  
전체 λ…Όλ¬Έ 보기: https://www.h2hc.com.br/revista/

λ°œν‘œ μŠ¬λΌμ΄λ“œμ™€ μ˜μƒμ€ 곧 제곡될 μ˜ˆμ •μž…λ‹ˆλ‹€.

> Java (JVM) ν™˜κ²½μ—μ„œ λ„€μ΄ν‹°λΈŒ 역직렬화 μ·¨μ•½μ μ˜ κΈ°μ΄ˆμ— λŒ€ν•œ κ°œμš”

> Java 가상 λ¨Έμ‹ (JVM)μ—μ„œ 역직렬화 취약점에 λŒ€ν•œ κ°œμš”

## μ½˜ν…μΈ 

이 μ‹€μŠ΅μ‹€μ—λŠ” 역직렬화 취약점과 κ°€μ ― 체인이 이λ₯Ό μ–΄λ–»κ²Œ μ•…μš©ν•˜λŠ”μ§€ μ΄ν•΄ν•˜λŠ” 데 도움이 λ˜λŠ” μ½”λ“œ μƒ˜ν”Œμ΄ ν¬ν•¨λ˜μ–΄ μžˆμŠ΅λ‹ˆλ‹€. λͺ©ν‘œλŠ” μƒˆλ‘œμš΄ νŽ˜μ΄λ‘œλ“œλ₯Ό κ°œλ°œν•˜κ±°λ‚˜ ν™˜κ²½μ„ 더 잘 섀계할 수 μžˆλ„λ‘ 더 λ‚˜μ€ 이해λ₯Ό μ œκ³΅ν•˜λŠ” κ²ƒμž…λ‹ˆλ‹€.

λ˜ν•œ νŽ˜μ΄λ‘œλ“œλ₯Ό ν…ŒμŠ€νŠΈν•˜λŠ” 데 도움이 λ˜λŠ” μ·¨μ•½ν•œ ν…ŒμŠ€νŠΈ μ• ν”Œλ¦¬μΌ€μ΄μ…˜(VulnerableHTTPServer.java)도 μžˆμŠ΅λ‹ˆλ‹€.

## μŠ¬λΌμ΄λ“œ

![Alt text](https://assets.kitploit.com/production/public/readmes/26798/95f12300eca267d920a8b461e412ec60d9fd2e30580fc2b0b2eed25cd23c707a.webp)

## 예제 (PoC)

  * PoC CVE-2017-7504 - JBossMQ JMS 호좜 계측 (https://access.redhat.com/security/cve/cve-2017-7504)



![Alt text](https://assets.kitploit.com/production/public/readmes/26798/81ca25de80af2b44146a8a439ad4250bd635709f3bc66392bfc2bb76cb176194.jpg)

  * PoC CVE-2017-12149 - JBoss 6.X 및 EAP 5.X (https://access.redhat.com/security/cve/cve-2017-12149)