Solving ObjectInputStream

This exercise covers the exploitation of a call to readObject in a Spring application

PTLAB

PRO

Tier

PTLAB

Medium

PTLAB

< 1 Hr.

PTLAB

3996

PTLAB

Serialize Badge

Common Mistakes:

Try using base64 -w 0 instead of base64 to avoid new lines in the payload
Make sure you replace the full netcat command with the score command followed by your UUID: /usr/local/bin/score ....

Online access to this exercise is only available with PentesterLab PRO