DeserLab

Java deserialization exploitation lab.

Simple Java client and server application that implements a custom network protocol using the Java serialization format to demonstrate Java deserialization vulnerabilities.

Usage

First launch the server-side component as follows:

DeserLab.jar -server <listen-address> <listen-port>

Next, use the client to interact with the server component as follows:

DeserLab.jar -client <server-address> <server-port>

Now pop some calcs ;)