evil-rmi-server

一个邪恶的RMI服务器，可以执行任意命令。在本地提权场景中对CVE-2021-44228可能有用。

构建

./gradlew bootJar

运行

Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar [-hV] [-p=<port>]
       <cmd>
An evil RMI Server to help construct and run an arbitrary command.
      <cmd>           The Command to run. Wrap in quotes if there are spaces.
  -h, --help          Show this help message and exit.
  -p, --port=<port>   The port to listen on
  -V, --version       Print version information and exit.