Clone plugin from
https://github.com/silentsignal/oracle_forms/
Edit script for Python 3 (see pull request)
if ctx.options.corrupt_handshake:
flow.response.content = flow.response.content.replace(b'Mate', b'Matf')
Download /forms/java/frmall.jar, put in OracleFormsSerializer/lib
Download JDK 19 to compile jar
export JAVA_HOME=/home/user/Downloads/jdk-19.0.2
./gradlew shadowJar
Download java 1.7 jdk
Import burp cert in java (pwd = changeit)
./keytool -importcert -keystore ../../jdk1.7.0_80/jre/lib/security/cacerts -file ~/Desktop/burp.der
Enable debug settings and network proxy settings in
./javaws -viewer
Start Burp, load Burp plugin, set upstream proxy to 8081 (plugin builds to
OracleFormsSerializer/build/libs/OracleFormsSerializer-1.0-SNAPSHOT-all.jar)
mitmdump -s mitmproxy_oracleforms.py -p 8081
Launch (add
-J-Djavax.net.debug=allfor tls debugging) from java 1.7 jdk
./javaws ~/Downloads/forms.jnlp