---
id: 4152
title: "RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Execution"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/rmiscout"
published_at: "2020-05-26T00:00:00Z"
tags: ["java", "deserialization", "penetration-testing", "brute-force", "rmi", "tool"]
phying_url: "https://phying.com/item/4152"
lang: en
---

# RMIScout: Safely and Quickly Brute-Force Java RMI Interfaces for Code Execution

## Summary

Bishop Fox's open source RMIScout safely brute-forces exposed Java RMI interfaces to guess method signatures without invocation, exposing deserialization-based code execution vectors.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2020-05-26T00:00:00Z
- **Original:** https://bishopfox.com/blog/rmiscout
- **Phying News:** https://phying.com/item/4152