---
id: 4100
title: "Lessons Learned on Brute-forcing RMI-IIOP With RMIScout"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/brute-forcing-rmi-iiop-with-rmiscout"
published_at: "2020-12-08T00:00:00Z"
tags: ["penetration-testing", "security-tools", "brute-force", "rmiscout", "java-rmi", "rmi-iiop"]
phying_url: "https://phying.com/item/4100"
lang: en
---

# Lessons Learned on Brute-forcing RMI-IIOP With RMIScout

## Summary

RMIScout 1.4 adds RMI-IIOP support, SSL, invoke and list modes, and a localhost bypass for attacking exposed Java RMI interfaces — plus notes on brute-forcing RMI-IIOP method signatures.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2020-12-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/brute-forcing-rmi-iiop-with-rmiscout
- **Phying News:** https://phying.com/item/4100