CVE-2011-3556

This Metasploit module exploits CVE-2011-3556 by leveraging insecure default RMI configurations to execute arbitrary Java code via remote class loading. It crafts a malicious RMI packet to trigger payload delivery over HTTP.

This is a Python 3 implementation of a proof-of-concept exploit for CVE-2011-3556, a vulnerability in Java RMI servers. It allows remote code execution by loading a malicious JAR file from an attacker-controlled HTTP server.

This Metasploit module scans for Java RMI endpoints and checks if remote class loading is enabled, which could lead to remote code execution. It does not contain offensive payloads but detects vulnerable configurations.

This Metasploit module exploits a Java RMI server's insecure default configuration (CVE-2011-3556) to achieve remote code execution by leveraging the RMI Distributed Garbage Collector to load malicious classes from a remote HTTP server.