Pure JRE 8 RCE Deserialization gadget

July 1, 2016 ยท View on GitHub

Based on Chris Frohoff and Wouter Coekaerts ideas:

  • https://gist.github.com/frohoff/24af7913611f8406eaf3
  • http://wouter.coekaerts.be/2015/annotationinvocationhandler