supersache
58e578b0f6
Changes for the new Vaadin Gadget
2018-09-19 14:55:56 +02:00
Félix Martel-Denis
99f463cc69
hibernate3 payload ( #88 )
2018-09-12 08:25:06 -07:00
Nicky Bloor
477ecb8f05
Add support for exploiting SSL RMI services. ( #81 )
...
* Add support for exploiting SSL RMI services.
* Make PMD happy.
2018-04-23 08:49:47 -07:00
Chris Frohoff
e9f112ac50
fix jitpack link ( #83 )
2018-04-02 11:54:39 -07:00
Chris Frohoff
b617b7badd
Merge pull request #73 from frohoff/doc-updates
...
doc updates
2017-09-23 16:05:37 -04:00
Chris Frohoff
b4d4d580a5
fixed payload authors, removed versions from jar names, added marshalsec/ysoserial.net links
2017-09-23 16:00:16 -04:00
Chris Frohoff
1f2e7bf08e
fix badge
2017-09-07 22:50:31 -07:00
Chris Frohoff
2b10caa99b
readme badge updates
2017-09-07 22:48:33 -07:00
Chris Frohoff
e2110861a2
travis/appveyor config changes
2017-09-07 22:40:54 -07:00
Chris Frohoff
02b32407d9
appveyor.yml
2017-09-07 22:25:22 -07:00
Chris Frohoff
3f352eacc6
bumping up wait time
2017-09-07 21:41:14 -07:00
Chris Frohoff
73c5d1dbd4
cache maven repo in travis builds
2017-09-07 21:07:39 -07:00
Chris Frohoff
c01dc9cf40
ignore internal api compile warnings
2017-09-07 20:22:11 -07:00
Chris Frohoff
5d5fdc458b
disable stack trace trimming in surefire
2017-09-07 19:47:58 -07:00
Chris Frohoff
52383a180d
docker support
2017-09-05 10:05:27 -07:00
Chris Frohoff
80b0d2f368
fixed broken tests
2017-09-03 23:40:17 -07:00
Chris Frohoff
8a330853c6
test/author fixes
2017-09-03 11:19:05 -07:00
Chris Frohoff
fa0ba6031c
Merge pull request #55 from SkylarWatson/file_upload_test
...
Updated payload args in FileUploadTest to match what production code …
2017-09-03 10:32:46 -07:00
Chris Frohoff
fb1e65e5f2
0.0.6 snapshot
2017-09-02 21:07:43 -07:00
Chris Frohoff
19514a45e4
0.0.5 release
2017-09-02 21:07:05 -07:00
Chris Frohoff
028ee30e9c
fixes, refactoring
2017-09-02 20:57:11 -07:00
Chris Frohoff
6088aa3f20
Merge pull request #70 from relaxnow/patch-1
...
Update README.md to reflect additional payloads
2017-09-02 12:47:51 -07:00
Boy Baukema
55800d1e3a
Update README.md to reflect additional payloads
2017-08-10 11:10:39 +02:00
Chris Frohoff
35bce8fe45
Merge pull request #68 from JackOfMostTrades/clojure-gadget
...
Add a gadget chain for exploiting the presence of clojure.
2017-07-19 10:38:12 -07:00
Ian Haken
4cb0a5a17a
Add a gadget chain for exploiting the presence of clojure.
2017-07-08 09:40:26 -07:00
Chris Frohoff
ca38b73711
Merge pull request #67 from h3xstream/master
...
URLDNS: Small fix to avoid DNS resolution while generating the payload
2017-06-09 10:15:14 -07:00
Philippe Arteau
f379338272
URLDNS: Small fix to avoid DNS resolution while generating the payload
2017-05-23 17:45:04 -04:00
Chris Frohoff
5bd2ced110
Merge pull request #66 from gebl/master
...
Add URLDNS gadget, that uses the argument as a URL to trigger a DNS l…
2017-03-26 19:19:56 -07:00
Gabriel Lawrence
12a9f56d01
Add URLDNS gadget, that uses the argument as a URL to trigger a DNS lookup.
2017-03-27 01:34:28 +00:00
Chris Frohoff
ad26e2bd46
links to jitpack jars, note about release removal, build instructions
2016-10-19 11:33:38 -07:00
Skylar
8ad9b583a6
Updated payload args in FileUploadTest to match what production code is looking for; Added Intellij project files to .gitignore
2016-08-14 19:52:32 -05:00
Chris Frohoff
d143b8cbfb
Merge pull request #52 from matthiaskaiser/master
...
Adding the RhinoGadget, Javassist/Weld, JBossInterceptors Gadget to ysoserial.
2016-07-29 09:28:06 -07:00
Matthias Kaiser
436d2040e4
Merge branch 'master' of https://github.com/frohoff/ysoserial
2016-07-29 12:39:26 +02:00
Matthias Kaiser
a62a266df5
Updated names
2016-07-29 12:36:02 +02:00
Chris Frohoff
bbebd8bd64
Merge pull request #53 from jacob-baines/fileupload2
...
FileUpload2
2016-07-28 10:06:11 -07:00
Jacob Baines
d8bef9642a
Rename FileUpload2 to Wicket1
2016-07-28 09:03:05 -04:00
Matthias Kaiser
2e6f61c039
Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial.
2016-07-26 17:11:11 +02:00
Matthias Kaiser
0f9526ff24
Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial.
2016-07-26 16:42:46 +02:00
Matthias Kaiser
8698844034
Adding a Javassist/Weld gadget to ysoserial.
2016-07-26 16:15:42 +02:00
Matthias Kaiser
2ae8b051a5
Adding the RhinoGadget to ysoserial.
...
The gadget uses the standalone version of Rhino ("org.mozilla.javascript.*"-namespace).
2016-07-26 14:48:09 +02:00
Chris Frohoff
80b21d9cb3
Merge pull request #51 from jacob-baines/jython_java6
...
Fix Jython1 Breaking Java 6
2016-07-25 16:57:38 -07:00
Jacob Baines
0fb8d8d222
Don't use API introduced in Java 7
2016-07-25 18:09:31 -04:00
Jacob Baines
6f3dd217c7
Created FileUpload2 based on Apache Wicket's version of DiskFileItem. Also changed FileUpload1 to support Windows filepaths
2016-07-25 14:15:39 -04:00
Chris Frohoff
74254d2cc7
Merge pull request #44 from mbechler/master
...
Test fixes, some minor stuff
2016-07-25 09:38:03 -07:00
Chris Frohoff
09603ef5ed
Merge pull request #49 from jacob-baines/jython-general
...
A more generalized Jython1
2016-07-25 09:36:16 -07:00
Chris Frohoff
e90e8725b4
Merge pull request #50 from matthiaskaiser/master
...
Adding general CC gadget that works with IBM and Oracle JRE
2016-07-25 09:35:16 -07:00
matthiaskaiser
39ea0590fb
Adding general CC gadget that works with IBM and Oracle JRE
2016-07-04 16:32:51 +02:00
Jacob Baines
f924363559
A more generalized Jython1 use case
2016-06-26 20:38:25 -04:00
mbechler
c61106f69f
Some minor improvements
...
- Let JRMPListener dump the object id used in DGC calls.
- Allow full specification of JDNI name in Hibernate2, accordingly fix JRMPReverseConnectTest
- Randomize object id in JRMLClient payload for increased reliability (and side channel)
2016-05-14 10:29:39 +02:00
mbechler
c7a3f8c65c
Fix tests
...
- extract version checking code
- add version check for AnnotationInvocationHandler usage
- add java.rmi.server.useCodebaseOnly=false to surefire system properties
2016-05-14 10:04:56 +02:00
supersache