Skip to content

Java caches the class/jar if it fails to load #7

@Meatballs1

Description

@Meatballs1

Attempting to exploit this and the payload major version was 52 but the server was running java 1.7.

Recreating the jar file but the install request didn't cause a GET request for the jar file after the first attempt. Had to change the archive/class strings in the MLET XML to force it to call back.

Would be good if these values could be randomized more ><

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions