RestletXMLDecoder. Restlet API consuming XML serialized Java Objects. Vulnerable to XXE and RCE (if third party libraries like GroovyShell are found in the classpath)

github.com/pwntester/RestletXMLDecoder

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.