Unauthenticated RCE in ForgeRock AM via JATO Java Deserialization

This repository is an exploit for CVE-2021-35464, a pre-authentication remote code execution vulnerability in ForgeRock OpenAM. The exploit is based on ysoserial and Java-Rce-Echo, and leverages Java deserialization to inject a memory shell into Tomcat, enabling arbitrary command execution via HTTP requests. The main exploit logic is in the Java files under src/ysoserial/payloads, particularly Click1.java (which constructs a malicious serialized object) and TomcatEchoInject.java (which implements the memory shell). The entry point is src/com/test/Main.java, which demonstrates generating the payload. The README provides a detailed example of the HTTP POST request required to trigger the vulnerability, targeting the /OpenAM/ccversion/Version endpoint. The exploit requires the attacker to send a crafted serialized object to the vulnerable endpoint, after which commands can be executed on the server by including a 'cmd' header in subsequent requests. The repository is operational and provides a working exploit for the vulnerability, but does not include a fully weaponized, automated attack tool.