CVE-2021-34371

This exploit leverages Java deserialization in Neo4j's ShellServer RMI interface to achieve remote code execution by crafting a malicious payload using the Rhino gadget chain. It requires the shell server to be enabled and accessible via RMI.

This repository contains a JAR file exploiting CVE-2021-34371, a deserialization vulnerability in Neo4j's Rhino engine. The PoC leverages a gadget chain to achieve remote code execution (RCE) on vulnerable Neo4j instances.

The repository contains only a README with images and a reference to an external JAR file from another GitHub repository, lacking any actual exploit code or technical details. It appears to be a placeholder or lure rather than a functional PoC.

This repository contains a functional Python exploit for CVE-2021-34371, targeting Neo4j 3.4.18 via RMI deserialization. The exploit leverages a custom Rhino gadget from ysoserial to achieve remote code execution by interacting with the exposed shell service.