Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2012-4681 PoC — Oracle Java 任意代码执行漏洞

Source
https://github.com/ZH3FENG/PoCs-CVE_2012_4681
Associated Vulnerability
Title:Oracle Java 任意代码执行漏洞 (CVE-2012-4681)
Description:Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.
Description
A Simple PoC for CVE-2012-4681
Readme
# PoCs-CVE_2012_4681
A Simple PoC for CVE-2012-4681
File Snapshot

 [4.0K]  /data/pocs/0f68d05859477b99b1978e0d660608939eefc57d
├── [1.9K]  CVE_2012_4681.java
└── [  52]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →