archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-22 23:11:52 +08:00
Code Issues Packages Projects Releases Wiki Activity
170 Commits 8 Branches 10 Tags
15e6aa699bd478fb009fd1a1901f2c6e4e9d86c8
Commit Graph
104 Commits
Author SHA1 Message Date
k4n5ha0 15e6aa699b add CommonsBeanutils2 (#163) 2022-04-26 22:24:48 -07:00
Ian Haken 4ad1131660 Add scala and clojure payloads from a couple of years ago (#137) 
* Add some payloads for Scala

* Add new clojure payload effecting versions since 1.8.0

* Fix infinite loop behavior of clojure2 payload.
 2022-04-26 22:09:52 -07:00
Yorick KosterandChris Frohoff 30ca17f787 Add Jython2 gadget (#135) 
This version of Jython2 executes a command through os.system(). Based on Jython1 from @pwntester & @cschneider4711

Co-authored-by: Chris Frohoff <[email protected]>
 2022-04-26 22:08:41 -07:00
梅子酒 255ed9a648 Add new payload in Commons Collections 3.2.1 (#125) 2022-04-26 22:07:33 -07:00
Stefano Ciccone 02e2500874 New gadgets (Struts2JasperReports - Atomikos - SpringJta) (#123) 
* added Atomikos gadget payload

* added Atomikos gadget payload

* naming

* added spring-jta gadget

* added strutsJasperReports gadget + tests

* updated deps list on springJta

* fixed authors

* renaming
 2022-04-26 22:06:23 -07:00
navalorenzo 9c448b58cd CommonsCollections8 payload (#116) 2022-04-26 22:04:18 -07:00
Chris Frohoff 8eb5cbfbf6 test fixes (#166) 
* fix badge url

* switch to https repo url
 2021-08-17 18:54:51 -07:00
Chris Frohoff 79179e00b8 minimal test for escaping issues in createTemplatesImpl (#165) 2021-08-17 16:13:01 -07:00
XinRoom 76ac2bb259 Resolve escape error (#151) 
Resolve escape error:
Caused by: compile error: ) is missing
 2021-08-17 15:46:32 -07:00
Michael Stepankin d367e379d9 New gadget chain based on Apache Click (#154) 
1. Add ysoserial.payloads.Click1 class
2. Update README.md with latest payloads
3. Remove duplicated "commons-io:commons-io:2.6" entry from pom.xml
 2021-02-02 08:41:29 -08:00
testanull 138dc36bd2 Add AspectJWeaver file write gadget (#145) 
* Add AspectJWeaver file write gadget
 2021-01-11 08:57:01 -08:00
Alexandre Bartel fc577c0bcd Just call setAccessible with Java > 12 2020-12-14 11:23:59 +01:00
Chris Frohoff 30099844c6 Merge pull request #119 from jax777/patch-1 
Fixes #90
 2019-09-07 12:01:49 -04:00
Chris Frohoff 33f61bff57 Merge pull request #115 from frohoff/test_fixes 
Test fixes
 2019-08-05 21:58:31 -07:00
jax777 863dc87f78 Update CommonsCollections5.java 
real Gadget chain:
 2019-05-06 16:40:28 +08:00
Chris Frohoff 55f1e7c35c Adding exploit JMXInvokeMBean (#111) 
Adding exploit JMXInvokeMBean
 2019-05-01 08:41:39 -07:00
Chris Frohoff baa74aa3f6 mark test as flaky 2019-04-25 16:04:42 -07:00
Chris Frohoff 02757f649c quiet jigsaw warnings 2019-04-25 14:17:30 -07:00
Chris Frohoff 7adb3cfe63 refactors 2019-04-25 08:20:07 -07:00
Chris Frohoff 4543487154 assembly to include tests in jar 2019-04-25 08:20:07 -07:00
Hans-Martin Münch 17085eb804 Adding exploit JMXInvokeMBean 2019-03-16 17:53:04 +01:00
scristalli f2ea3ae83a CommonsCollections7 payload 2019-03-15 19:24:29 +01:00
tint0 04c198a3d0 getDeclaredField raises exception instead of returning null when field isn't found 
(cherry picked from commit 348d873)
 2019-01-30 13:21:47 +07:00
tint0 6ba90d2d83 New rhino gadget 
(cherry picked from commit 7533f65)
 2019-01-30 13:21:25 +07:00
Chris Frohoff f31677fbc3 Merge pull request #91 from supersache/vaadingadget 
Vaadin gadget
 2018-11-19 23:38:08 -08:00
Chris Frohoff ecdac3988b troubleshooting travis jdk6 build 2018-11-19 08:22:36 -08:00
Chris Frohoff 548857e3f6 jdk10+ compile fixes 2018-11-16 18:08:51 -08:00
Chris Frohoff 3f4922505f fix for jdk10+ 2018-11-16 17:44:28 -08:00
Chris Frohoff 986647e372 more robust java version parsing 2018-11-16 17:35:24 -08:00
Chris Frohoff 6909d5269d retry on failure for flaky gadgets/tests 2018-11-16 11:40:23 -08:00
Chris Frohoff fd911d0969 fix (hopefully) test flakiness 2018-11-16 11:02:44 -08:00
Chris Frohoff 377216a525 disable some gadgets/tests for jdk6 2018-11-16 10:47:29 -08:00
Chris Frohoff 09440ff356 fix build for jdk6 2018-11-16 10:23:03 -08:00
Chris Frohoff 4088b8cda2 remove serialization-stage secmgr to avoid spurious errors due to extra surefire thread 2018-11-15 13:17:25 -08:00
supersache e0b15a3961 additional dependency added, precondition badattrvalexcobj 2018-09-20 13:00:21 +02:00
supersache 614fcfeb2a Changed from TemplatesImpl to Object 2018-09-19 15:08:27 +02:00
supersache 58e578b0f6 Changes for the new Vaadin Gadget 2018-09-19 14:55:56 +02:00
Félix Martel-Denis 99f463cc69 hibernate3 payload (#88) 2018-09-12 08:25:06 -07:00
Nicky Bloor 477ecb8f05 Add support for exploiting SSL RMI services. (#81) 
* Add support for exploiting SSL RMI services.

* Make PMD happy.
 2018-04-23 08:49:47 -07:00
Chris Frohoff 3f352eacc6 bumping up wait time 2017-09-07 21:41:14 -07:00
Chris Frohoff 80b0d2f368 fixed broken tests 2017-09-03 23:40:17 -07:00
Chris Frohoff 8a330853c6 test/author fixes 2017-09-03 11:19:05 -07:00
Chris Frohoff fa0ba6031c Merge pull request #55 from SkylarWatson/file_upload_test 
Updated payload args in FileUploadTest to match what production code …
 2017-09-03 10:32:46 -07:00
Chris Frohoff 028ee30e9c fixes, refactoring 2017-09-02 20:57:11 -07:00
Chris Frohoff 35bce8fe45 Merge pull request #68 from JackOfMostTrades/clojure-gadget 
Add a gadget chain for exploiting the presence of clojure.
 2017-07-19 10:38:12 -07:00
Ian Haken 4cb0a5a17a Add a gadget chain for exploiting the presence of clojure. 2017-07-08 09:40:26 -07:00
Philippe Arteau f379338272 URLDNS: Small fix to avoid DNS resolution while generating the payload 2017-05-23 17:45:04 -04:00
Gabriel Lawrence 12a9f56d01 Add URLDNS gadget, that uses the argument as a URL to trigger a DNS lookup. 2017-03-27 01:34:28 +00:00
Skylar 8ad9b583a6 Updated payload args in FileUploadTest to match what production code is looking for; Added Intellij project files to .gitignore 2016-08-14 19:52:32 -05:00
Matthias Kaiser 436d2040e4 Merge branch 'master' of https://github.com/frohoff/ysoserial 2016-07-29 12:39:26 +02:00