Commit Graph
16 Commits
Author SHA1 Message Date
mbechler 3230c080ff Add rome (RSS/Atom library) gadget chain.
Add exploit and test code for JRMP reverse connect remote classloading.
2016-03-12 17:35:17 +01:00
mbechler 8beeec6594 Add JBoss/Wildfly exploitation client. 2016-03-06 14:54:49 +01:00
mbechler c94779b83d Add jenkins client and exploits (CVE-2016-0788) 2016-03-06 14:54:49 +01:00
mbechler 7879428d9c Add MyFaces gadgets.
Add ability to provide a custom deserializer (needed for setting up the faces context)
2016-03-06 14:54:49 +01:00
mbechler c8e82237fe Add C3P0 gadget chain.
Add remote classloading test harness.
2016-03-06 14:54:49 +01:00
mbechler 20580e918d Add commons fileupload file operation gadget chain. 2016-03-06 14:54:49 +01:00
mbechler 4130fc5545 Add spring variant and json-lib gadget chain. 2016-03-06 14:54:49 +01:00
mbechler bd21624609 Add hibernate gadget chains.
Remove missed copyright notices.
2016-03-06 14:54:49 +01:00
mbechler a69ce66e69 Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation. 2016-03-06 14:53:30 +01:00
Alvaro Muñoz c616a23428 BeanShell exploit 2016-02-27 23:50:11 +01:00
Chris Frohoff adb16e1e09 bump version to next snapshot 2016-02-25 07:47:28 -08:00
Chris Frohoff 87c91b27a0 added beanutils gadget chain, release 0.0.4 2016-02-24 14:26:00 -08:00
Chris Frohoff 0e99a197c6 jre7u21 gadget chain, refactors 2016-01-26 17:18:32 -08:00
Chris Frohoff 79219f7792 fixed spring, commons-collections4 payloads, made test cases more robust 2015-01-29 21:33:26 -08:00
Chris Frohoff cdfaff46cd next snapshot 2015-01-29 07:50:22 -08:00
Chris Frohoff e6565b61e3 init-commit 2015-01-28 11:31:57 -08:00