archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-21 22:50:46 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update CommonsCollections5.java

Browse Source 
real Gadget chain:
This commit is contained in:
jax777
2019-05-06 16:40:28 +08:00
committed by GitHub
parent 55f1e7c35c
commit 863dc87f78
1 changed files with 15 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/ysoserial/payloads/CommonsCollections5.java
+15 -16
View File
@@ -24,22 +24,21 @@ import ysoserial.payloads.util.Reflections;
/* /*
Gadget chain: Gadget chain:
ObjectInputStream.readObject() ObjectInputStream.readObject()
AnnotationInvocationHandler.readObject() BadAttributeValueExpException.readObject()
Map(Proxy).entrySet() TiedMapEntry.toString()
AnnotationInvocationHandler.invoke() LazyMap.get()
LazyMap.get() ChainedTransformer.transform()
ChainedTransformer.transform() ConstantTransformer.transform()
ConstantTransformer.transform() InvokerTransformer.transform()
InvokerTransformer.transform() Method.invoke()
Method.invoke() Class.getMethod()
Class.getMethod() InvokerTransformer.transform()
InvokerTransformer.transform() Method.invoke()
Method.invoke() Runtime.getRuntime()
Runtime.getRuntime() InvokerTransformer.transform()
InvokerTransformer.transform() Method.invoke()
Method.invoke() Runtime.exec()
Runtime.exec()
Requires: Requires:
commons-collections commons-collections