RMIScout enables wordlist and bruteforce attacks against exposed Java RMI interfaces to safely guess method signatures without invocation. It supports multiple Java RMI protocols, method invocation, and exploitation.
Jake Miller (OSCE, OSCP) is a Bishop Fox alumnus and former lead researcher. While at Bishop Fox, Jake was responsible for overseeing firm-wide research initiatives. He also produced award-winning research in addition to several popular hacking tools like RMIScout and GitGot.
Twitter: @theBumbleSec
GitHub: the-bumble
Jun 05, 2020
RMIScout: New Hacking Tool Brute-Forces Java RMI Servers for Vulnerabilities
May 26, 2020
RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Execution
By Jake Miller
Dec 08, 2020
Lessons Learned on Brute-forcing RMI-IIOP With RMIScout
By Jake Miller
This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.