OOB to RCE: Exploitation of the Hobbes Functional Interpreter (CVE-2020-13656)know.bishopfox.com·2 pts·alg2000·0
Invest in Trusted Partners, Not Crowdsourcing, for Continuous Securityknow.bishopfox.com·2 pts·alg2000·0
RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Executionknow.bishopfox.com·1 pts·alg2000·0
GadgetProbe: Exploiting Deserialization to Brute-Force the Remote Classpathknow.bishopfox.com·1 pts·alg2000·0
CVE-2019-18935: Remote Code Execution via Insecure Deserialization in Telerik UIknow.bishopfox.com·1 pts·alg2000·0