Attempting to exploit this and the payload major version was 52 but the server was running java 1.7.
Recreating the jar file but the install request didn't cause a GET request for the jar file after the first attempt. Had to change the archive/class strings in the MLET XML to force it to call back.
Would be good if these values could be randomized more ><
Attempting to exploit this and the payload major version was 52 but the server was running java 1.7.
Recreating the jar file but the install request didn't cause a GET request for the jar file after the first attempt. Had to change the archive/class strings in the MLET XML to force it to call back.
Would be good if these values could be randomized more ><