and then we're going to do slash and we're going to type in the log NUMBER_TOKENj rce now it all has to be case sensitive you don't want to like you know you fuddle around with any of that it has to be very case sensitive because if it isn't it's not going to work so once i launch this it should in fact fire up notepad and in fact ladies and gentlemen we just have notepad fired up so here it is here it is notepad is fired up and ready to go so what we just did all right let's look to the right let's go through the whole chain of command it received an ldap reference result for log NUMBER_TOKENj rce redirecting me to that web server we just made and then it redirected it to the class file as soon as that class file was hit we then launched notepad underneath here so you might be like okay moodle what's the big deal no the big deal is what you just saw was the most harmless use of this case right now i just launched notepad all right i could launch calculator i could launch chrome i could launch basically whatever application sitting on your system however the real meat and crux of this is actually using this to gain things like privilege escalation for the sake of brevity to really showcase the real meat and potatoes of what you can do i then basically launched a shell within the system okay using the same exploit i was able to get an actual power shell underneath windows NUMBER_TOKEN but imagine for a second remember the times we looked at things like wraps for instance right where we installed a rat onto an actual computer we were able to like basically exploit it for our content okay we could throw in a bunch of malicious software like that hell remember all the ransomware we looked at i could have launched that on windows NUMBER_TOKEN and potentially put ransomware into the system and how literally threw a minecraft server now again i'm using minecraft as sort of a a test bed because at the end of the day minecraft is not to blame it's literally something out of its control minecraft is actually updated this is just me using older versions for the sake of showing how this exploit can work so the the reason why this is super freaky and why people are talking about it all over twitter and all over the internet is lockNUMBER_TOKENj is a logging tool it's literally the logging component of uh of of java okay and the fact that we have a exploit like this a arbitrary code exploited a remote code exploit is big news okay so to understand it's incredibly easy to get going you don't need to have any coding knowledge it's literally following the instructions that are already out there on github there is no coding required for this a lot of the code is already out there fixing it up isn't that big of a deal in fact you don't really even need to fix up code in most cases you just need to change a couple of words around of whatever you want to execute again taking advantage of it will require a sharper mind but again tons of information is out there anyway script kitties can go crazy the other big problem is is that there are a lot of attack points available okay a lot of different operations happen within a locking system and so the way that it can be abused is substantially larger you just saw me use a minecraft
NO_SEGMENT_TOKEN