All Classes

Class	Description
ActivatableWrapper	The ActivatableWrapper class extends RemoteObjectWrapper and is used for wrapping ActivatableRef.
ActivationClient	In the old days, it was pretty common for RMI endpoints to use an Activator.
ArgumentHandler	The ArgumentHandler class is a wrapper around an argparse4j ArgumentParser.
CodebaseCollector	The CodebaseCollector class is used to detect server specified codebases and to report them to the user.
DefaultProvider	The DefaultProvider is a default implementation of an rmg plugin.
DefinitelyNonExistingClass	This class can be considered as a leftover.
DevNullOutputStream	Dummy implementation of an OutputStream.
DGCClient	The distributed garbage collector (DGC) is a well known RMI object with publicly known method definitions.
DGCClientSocket	The DGCClientSocket simulates a connection to the DGC server side component of a remote object.
DGCClientSocketFactory	The DGCClientSocket factory is used when the --ssrf-response option was specified on the command line.
DGCClientSslSocketFactory	SSL implementation of the DGCClientSocketFactory.
Dispatcher	The dispatcher class contains all method definitions for the different rmg actions.
DummySocketFactory	During the creation of the An Trinh registry whitelist bypass gadget, the creation of a UnicastRemoteObject is required.
DummyTrustManager	A dummy implementation for a trust manager.
EmptyWrapper	EmptyWrapper is basically a dummy class that extends RemoteWrapper.
ExceptionHandler	During the different RMI operations you have always a roughly same set of exceptions that can occur.
Formatter	The formatter class is used to print formatted output for the enum and guess operations.
GenericPrint	GenericPrint is an rmg ResponseHandler plugin that attempts to print all incoming server responses.
IActionProvider	The IActionProvider interface can be implemented by plugins to add custom actions to remote-method-guesser.
IArgumentProvider	The IArgumentProvider interface is used during rmg's 'call' action to obtain the argument array that should be used for the call.
IPayloadProvider	The IPayloadProvider interface is used during all rmg actions that send payload objects to the remote server.
IResponseHandler	The IResponseHandler interface is used during rmg's 'call' action to handle the return value of an invoked method.
ISocketFactoryProvider	The ISocketFactoryProvider interface can be used to overwrite SocketFactory implementations that are used during RMI communication.
IUnknown	IUnknown is a dummy interface that is used when performing method guessing with a manually specified ObjID.
KnownEndpoint	The KnownEndpoint class represents a well known RMI endpoint.
KnownEndpointHolder	The KnownEndpointHolder is a helper class to work with KnownEndpoints.
LimitedSocketFactory	The LimitedSocketFactoryClass is used when creating a rogue JMX server.
Logger	The Logger class exposes static methods that can be used to create colored output.
LoopbackSocketFactory	Remote objects bound to an RMI registry are usually pointing to remote endpoints on the same host.
LoopbackSslSocketFactory	Remote objects bound to an RMI registry are usually pointing to remote endpoints on the same host.
MalformedPluginException	MalformedPluginExceptions are thrown then an rmg plugin was specified on the command line that does not satisfy the plugin requirements.
MaliciousOutputStream	MaliciousOutputStream can be used as a wrapper around a MarshalOutputStream or other subclasses of it.
MethodArguments	Internally, Java RMI always uses an array of objects as argument for method calls.
MethodCandidate	A MethodCandidate represents a remote method that may exists on a remote endpoint.
MethodGuesser	The MethodGuesser class is used to brute force available remote methods on Java RMI endpoints.
Operation	The Operation enum class contains one item for each possible rmg action.
OperationGroup	When plugins implement IActionProvider, they can add additional arguments to rmg.
Pair<K,V>	For the MethodArguments class, a Pair type is required.
PluginSystem	The PluginSystem class allows rmg to be extended by user defined classes.
PortScanner	The PortScanner class implements a simple RMI service scan that can be used to identify RMI endpoints on a target.
ProgressBar	Simple progress bar that is used during the guess and scan operations.
RawObjectInputStream	Wrapper class for an ObjectInputStream.
RawObjectOutputStream	Wrapper class for an ObjectOutputStream.
RegistryClient	The RMI registry is a well known RMI object with publicly known method definitions.
RemoteInvocationHolder	RemoteInvocation objects do not contain all information that MethodCandidates contain.
RemoteObjectClient	The RemoteObjectClient class is used for method guessing and communication to user defined remote objects.
RemoteObjectWrapper	The RemoteObjectWrapper class represents a wrapper around the ordinary RMI remote object related classes.
ReturnValueProvider	ReturnValueProvider is a helper class that can be used to capture return values of custom RMI calls.
RMGOption	The RMGOption enum is an additional helper class to manage command line parameters.
RMGOptionGroup	The RMGOptionGroup enum is used to bundle certain options into a logical context.
RMGUtils	The RMGUtils class defines static helper functions that do not really fit into other categories.
RMIComponent	The RMIComponent enum represents the different RMI components that may be targeted when communicating with an RMI server.
RMIEndpoint	The RMIEndpoint class represents an RMI endpoint on a remote server.
RMIRegistryEndpoint	The RMIRegistryEndpoint represents an RMI Registry endpoint on the remote server.
RogueJMX	The RogueJMX class implements a rogue JMX server that displays used credentials from incoming JMX connections.
SampleWriter	The SampleWriter class handles the dynamic creation of RMI code.
ScanAction	The ScanAction Enum represents available enumeration techniques that are applied during rmg's enum action.
Security	During sample creation, remote-method-guesser creates sample files with filenames and contents controlled by the remote RMI server.
SingleOpOutputStream	The SingleOpOutputStream class is used during SSRF operations.
SpringRemotingWrapper	SpringRemoting represents a wrapper around regular Java RMI.
SSRFException	Custom Exception class used to generate SSRF payloads.
SSRFResponseSocket	Socket implementation that prevents outputs from being sent anywhere and that simulates input by using a byte array that is set when calling the constructor.
SSRFResponseSocketFactory	Factory class for creating SSRFResponseSockets.
SSRFSocket	The SSRFSocket class is an alternative Socket implementation that sends all socket output to a byte array and that uses another static byte array for simulating server input.
SSRFSocketFactory	Factory class for creating SSRFSockets.
Starter	The Starter class contains the entrypoint of remote-method-guesser.
TimeoutSocketFactory	The TimeoutSocketFactory is a wrapper around the default RMISocketFactory that allows to set timeouts for the created sockets.
TrustAllSocketFactory	Wrapper around an SSLSocketFactory that trusts all certificates.
UnexpectedCharacterException	UnexpectedCharacterException may be thrown during the dynamic creation of RMI code (guess action with --create-samples switch).
UnicastWrapper	The UnicastWrapper class extends RemoteObjectWrapper and is used for wrapping UnicastRef.
Vulnerability	The Vulnerability class represents a known vulnerability of a KnownEndpoint.
WordlistHandler	The WordlistHandler is responsible for reading and writing wordlist files.
YsoIntegration	remote-method-guesser does not include the ysoserial library as one of its dependencies.