Package eu.tneitzel.rmg.networking

Class DummySocketFactory

java.lang.Object

java.rmi.server.RMISocketFactory

eu.tneitzel.rmg.networking.DummySocketFactory

All Implemented Interfaces:

Serializable, RMIClientSocketFactory, RMIServerSocketFactory

public class DummySocketFactory
extends RMISocketFactory
implements Serializable

During the creation of the An Trinh registry whitelist bypass gadget, the creation of a UnicastRemoteObject is required. There are several different ways to achieve this. One of them is to access the 'official' constructor via reflection. This approach is used by rmg, but it has the downside that RMI tries to export the object within the constructor directly. Therefore, when blindly using the constructor, a port will open on your machine. To avoid this, rmg uses a dummy socket factory with the constructed UnicastRemoteObject. This dummy socket factory returns a dummy ServerSocket with an overwritten accept method. Calls to accept just cause a sleep. In this time, rmg has already unexported the object, which closes the socket.

Author:

Tobias Neitzel (@qtc_de)

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor	Description
DummySocketFactory()

Method Summary

Modifier and Type	Method	Description
ServerSocket	createServerSocket(int port)
Socket	createSocket(String host, int port)

Methods inherited from class java.rmi.server.RMISocketFactory

getDefaultSocketFactory, getFailureHandler, getSocketFactory, setFailureHandler, setSocketFactory

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DummySocketFactory

public DummySocketFactory()

Method Detail

createServerSocket

public ServerSocket createServerSocket(int port)
                                throws IOException

Specified by:

createServerSocket in interface RMIServerSocketFactory

Specified by:

createServerSocket in class RMISocketFactory

Throws:

IOException

createSocket

public Socket createSocket(String host,
                           int port)
                    throws IOException

Specified by:

createSocket in interface RMIClientSocketFactory

Specified by:

createSocket in class RMISocketFactory

Throws:

IOException