CVE-2021-35464

This exploit leverages a deserialization vulnerability in ForgeRock OpenAM to achieve unauthenticated remote code execution. It sends a malicious serialized payload to the target endpoint, bypassing potential WAFs via path traversal.

This repository contains a functional exploit for CVE-2021-35464, leveraging deserialization in OpenAM to achieve remote command execution (RCE) via crafted payloads. The exploit uses ysoserial and custom payloads to execute commands and return output.

The repository contains a Nuclei template for detecting CVE-2021-35464, a pre-authentication RCE vulnerability in ForgeRock OpenAM. The template sends a crafted GET request to trigger a path traversal and checks for a 302 redirect response, indicating potential vulnerability.

This Metasploit module exploits a pre-authentication Java deserialization vulnerability (CVE-2021-35464) in ForgeRock OpenAM, allowing remote code execution via a crafted POST request to the `/oauth2/..;/ccversion/Version` endpoint.