writeups.xyz / Exploiting JMeter via RMI

Submitter : c2a

Date: 11 July 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• Java RMI
• RCE
• Security Code Review

Programs :

• Apache JMeter

Authors :

• Christopher Ellis

Link :
https://medium.com/workday-engineering/exploiting-jmeter-via-rmi-e8e12392bba8