Repository to exploit CVE-2023-46604 reported for ActiveMQ# Active MQ CVE-2023-46604 exploit
This repository is a guide with examples on how to exploit the [CVE-2023-46604](https://activemq.apache.org/news/cve-2023-46604)
The exploit takes advantage of the usage of reflection for instantiating Exception classes through a malicious command
that instead of being a valid command, it sends as the exception class a Spring class to load beans and as the
string constructor parameter an URL from where to download an XML file with the Spring Bean definitions.
This Spring Bean is in fact a `java.lang.ProcessBuilder` which will run any bash command with the same user permissions as the
one that is running the Java Active MQ client or server.
[4.0K] /data/pocs/ae4a0ea605c03752f0bc08de486ee5c90c792f9f
├── [4.0K] activemq-exploit
│ ├── [4.3K] pom.xml
│ └── [4.0K] src
│ └── [4.0K] main
│ ├── [4.0K] java
│ │ ├── [4.0K] malicious
│ │ │ └── [4.0K] http
│ │ │ └── [2.3K] HttpServer.java
│ │ ├── [4.0K] victim
│ │ │ └── [ 911] ActiveMQClient.java
│ │ └── [4.0K] vulnerability
│ │ └── [1.5K] Vulnerability.java
│ └── [4.0K] resources
│ └── [ 637] exploit.xml
├── [ 687] README.md
└── [4.0K] scripts
├── [6.0K] client_exploit.py
└── [5.6K] server_exploit.py
10 directories, 8 files