Oracle Java Swing Sandbox Integrity Vulnerability

This repository is a proof-of-concept exploit for CVE-2023-21939, targeting Oracle JDK versions lower than 8u371 in conjunction with Apache XML Graphics Batik Swing (1.15) and optionally Mozilla Rhino (1.7.10). The exploit demonstrates remote code execution (RCE) via malicious SVG/XML payloads and Java deserialization. The structure includes: - Two HTTP servers: XmlServer (serving malicious SVG/XML files on port 8886) and JarServer (serving a malicious JAR on port 8887). - Exploit payloads (in JSRCE.java and JarRCE.java) that craft Java Swing JLabel objects with HTML content referencing the malicious SVG/XML endpoints. - The SVG/XML payloads trigger code execution (e.g., launching calc.exe) via embedded scripts or by loading the malicious JAR. - The exploit chain involves deserialization of crafted objects, which, when processed by a vulnerable application, results in arbitrary command execution. The repository is organized with clear separation between server components, exploit payload generators, and utility code for serialization. The README provides detailed reproduction steps and required dependencies. The exploit is primarily a local proof-of-concept but demonstrates a network-based attack vector via HTTP endpoints.