Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
coolbreezetft
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
2 ms
·
1.
▲
by
coolbreezetft
5y ago
So the attacking server sends back a serialized object during the jndi request and then deserialized method is called on that object?
2.
▲
by
coolbreezetft
5y ago
How does the downloaded java class get executed though? I get that you can get the logger to download from a server but what needs to be on the server? e.g. how does it trigger the malicious java class? Does it need to contain certain metho