Solving ObjectInputStream

This exercise covers the exploitation of a call to readObject in a Spring application

PRO

content

Medium difficulty

Less than an hour average completion time

3812 users completed this exercise

Try using base64 -w 0 instead of base64 to avoid new lines in the payload
Make sure you replace the full netcat command with the score command followed by your UUID: /usr/local/bin/score ....

Online access to this exercise is only available with PentesterLab PRO