Java RMI Deserialization Attack Analysis
RMI Overview Java Remote Method Invocation (RMI) enables distributed computing by allowing objects in one JVM to invoke methods on objects residing in another JVM. A typical RMI application consists of: A server that creates and exports remote objects A client that looks up and invokes methods on th...