CVE-2020-26217

This PoC demonstrates a deserialization vulnerability in XStream (CVE-2020-26217) by loading a malicious XML file. The code initializes XStream and deserializes the XML input, which can lead to arbitrary code execution if the XML contains malicious payloads.

This is a working proof-of-concept exploit for CVE-2020-26217, demonstrating remote code execution via XStream deserialization. The payload triggers arbitrary command execution (e.g., 'calc') through a crafted XML input.

This repository contains a functional proof-of-concept exploit for CVE-2020-26217, demonstrating remote code execution via XStream deserialization. The exploit constructs a malicious XML payload that triggers arbitrary command execution (e.g., launching calc.exe) when deserialized by vulnerable XStream versions.

This repository contains a functional Go-based exploit for CVE-2020-26217, a deserialization vulnerability in XStream. The PoC constructs a malicious XML payload to achieve remote code execution via a crafted HTTP request.

This repository appears to be a fork or snapshot of the XStream project but lacks any exploit code or technical analysis related to CVE-2020-26217. The files provided are part of the XStream benchmarking tool and do not demonstrate the vulnerability.

The repository contains benchmarking code for XStream but lacks any exploit code or technical details related to CVE-2020-26217. It appears to be a fork or snapshot of the XStream project without vulnerability-specific content.

This repository contains a proof-of-concept for CVE-2020-26217, a deserialization vulnerability in XStream. The code includes builder utilities and configurations for XStream, which can be used to exploit unsafe deserialization.

This repository contains a minimal Java stub for CVE-2020-26217, an XStream deserialization vulnerability. It lacks exploit payloads or detailed PoC logic, only demonstrating basic XML deserialization.

This repository contains benchmarking code for XStream, a Java XML serialization library. It does not include exploit code for CVE-2020-26217, which is a deserialization vulnerability in XStream.