README.md

Documentation

---

In this folder you can find more detailed documentation on remote-method-guesser. This folder is currently work in progress and will be updated from time to time. So far, the following topics are documented:

• Java RMI

  • AccessControlContext List
  • Known Remote Objects
  • Serialization Filter List
  • Unicast Remote Object

• remote-method-gusser

  • Actions
  • Activation System
  • Media
  • Method-Guessing
  • Plugin System

Java RMI - Attack Surface

---

The following mindmap is an attempt to visualize the attack surface on Java RMI servers. It is far from being complete and mostly covers vulnerabilities that can be identifed by remote-method-guesser.