mbechler
|
3273b27c75
|
JRMPListener Java6 compatiblity.
|
2016-03-06 19:32:08 +01:00 |
|
mbechler
|
eabfce0dc2
|
Disable json-lib test as the gadget chain depends on the HashMap ordering which seemingly is different
across JDK versions.
|
2016-03-06 19:24:32 +01:00 |
|
mbechler
|
b814712e19
|
Fix HashMap creation for java7.
|
2016-03-06 18:53:39 +01:00 |
|
mbechler
|
4795bce7ff
|
Add hook for payload generators to modify the object before finalizers are called
(to fix the fileupload test and also to prevent exploiting yourself, also may be
useful for finalizer based gadgets)
|
2016-03-06 15:50:59 +01:00 |
|
mbechler
|
5fc361df4f
|
A final touch
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
8beeec6594
|
Add JBoss/Wildfly exploitation client.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
37dbcf57e4
|
Fix fileupload test reliability
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
c94779b83d
|
Add jenkins client and exploits (CVE-2016-0788)
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
6bb0d80aa0
|
Some cleanup of myfaces gadgets.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
7879428d9c
|
Add MyFaces gadgets.
Add ability to provide a custom deserializer (needed for setting up the faces context)
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
d6658809cf
|
Move payload annotation to annotation package.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
bba1460cb6
|
Remove wrong copyright notices, again
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
c8e82237fe
|
Add C3P0 gadget chain.
Add remote classloading test harness.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
20580e918d
|
Add commons fileupload file operation gadget chain.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
6f9c8dca2b
|
Rename beanutils gadget
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
4130fc5545
|
Add spring variant and json-lib gadget chain.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
bd21624609
|
Add hibernate gadget chains.
Remove missed copyright notices.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
436e831cbd
|
Add JRMP utilties, gadgets and test code.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
8dfce7ed73
|
Add custom test infrastructure.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
7157d5e297
|
Some basic cleanups (warnings, imports)
Add controlled instantiation constructor utility.
|
2016-03-06 14:54:49 +01:00 |
|
mbechler
|
a69ce66e69
|
Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation.
|
2016-03-06 14:53:30 +01:00 |
|