CVE-2018-12533

This repository contains a working proof-of-concept exploit for CVE-2018-12533, which targets a deserialization vulnerability in RichFaces 3.3.4. The exploit generates a malicious URL that, when accessed, executes arbitrary code via EL injection, creating a file in /tmp as a demonstration.

This repository contains a functional exploit for CVE-2018-12533, a deserialization vulnerability in RichFaces. The exploit generates a malicious JAR payload to achieve remote code execution (RCE) on vulnerable RichFaces applications.

This PoC exploits a deserialization vulnerability in RichFaces (CVE-2018-12533) by crafting a malicious serialized object that executes arbitrary EL expressions when deserialized. The exploit generates a base64-encoded payload for use in attacks against vulnerable applications.

This repository contains a functional proof-of-concept exploit for CVE-2018-12533, a deserialization vulnerability in RichFaces. The exploit generates a malicious serialized object that, when deserialized, executes arbitrary commands via a JavaScript engine.

This repository contains a functional exploit for CVE-2018-12533, a deserialization vulnerability in RichFaces 3.3.4. The exploit generates a malicious payload that, when processed by a vulnerable JBoss server, executes arbitrary commands via EL injection.