There's more...

Since this recipe scenario is a bit contrived, you may not receive a response on your network listener for the nslookup command. Try the recipe again after downloading a vulnerable version of an application with known Java deserialization vulnerabilities (that is, Jenkins, JBoss). Reuse the same steps shown here, only change the target application.

Get Burp Suite Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.