OpenWire

OpenWire is a blue team lab that falls under the Network Forensics category and will cover the following subjects: Wireshark, Zui, Network Miner, Initial Access, Execution, Command and Control.

Learning Objectives

Investigate a Java deserialization vulnerability in Apache ActiveMQ that enables remote code execution through insecure class loading.

Categories: Network Forensics.

MITRE ATT&CK Tactics: Initial Access, Execution, Command and Control.

Tools: Wireshark, Zui, Network Miner.

Difficulty: medium.