CVE-2017-12149 Jboss Java Deserialization RCE (CVE-2017-12149) The python script uses ysoserial to dynamically generate the payload. Therefore java is required as well.