Two new tools using ysoserial.net and implementing the technique I presented last year for generating RCE viewstates (speakerdeck.com/pwntester/dot-…) were released today (1/2)👇🏼
Honored that @NASA is using GitHub, Actions, and CodeQL for the Mars drone flight software: github.com/nasa/fprime
If anyone working on this needs GitHub support, please feel free to DM me directly!
🚨@_atorralba
and I just managed to bypass the allowedLdapHost and allowedClasses checks. 2.15 with no formatMsgNoLookups mitigations is still vulnerable to RCE. 2.15.0 w/o those mitigations is vulnerable only if attackers can control non-message parts of the pattern layout🚨
Most Java apps working with databases have configuration files where you specify the JNDI address to fetch the JDBC datasource. Please do not start requesting CVEs for them 🙏🏼
