Commit Graph
112 Commits
Author SHA1 Message Date
Chris Frohoff 63ff643129 fix travisci config for jdk6 2018-11-16 13:43:28 -08:00
Chris Frohoff ef1a1beb1a attempt to fix jdk6/7 appveyor config 2018-11-16 13:25:44 -08:00
Chris Frohoff 6909d5269d retry on failure for flaky gadgets/tests 2018-11-16 11:40:23 -08:00
Chris Frohoff fd911d0969 fix (hopefully) test flakiness 2018-11-16 11:02:44 -08:00
Chris Frohoff 377216a525 disable some gadgets/tests for jdk6 2018-11-16 10:47:29 -08:00
Chris Frohoff 09440ff356 fix build for jdk6 2018-11-16 10:23:03 -08:00
Chris Frohoff 4088b8cda2 remove serialization-stage secmgr to avoid spurious errors due to extra surefire thread 2018-11-15 13:17:25 -08:00
Chris Frohoff a1a40d239f upgraded surefire to workaround SUREFIRE-1588 issue 2018-11-15 09:13:34 -08:00
Francesco Soncina ecc60747a5 fix: include javax.el with hibernate5, fix #97 (#98) 2018-11-04 09:46:56 -08:00
Chris Frohoff 16fc48b22b fix download link (#92) 2018-09-19 19:03:36 -07:00
Félix Martel-Denis 99f463cc69 hibernate3 payload (#88) 2018-09-12 08:25:06 -07:00
Nicky Bloor 477ecb8f05 Add support for exploiting SSL RMI services. (#81)
* Add support for exploiting SSL RMI services.

* Make PMD happy.
2018-04-23 08:49:47 -07:00
Chris Frohoff e9f112ac50 fix jitpack link (#83) 2018-04-02 11:54:39 -07:00
Chris Frohoff b617b7badd Merge pull request #73 from frohoff/doc-updates
doc updates
2017-09-23 16:05:37 -04:00
Chris Frohoff b4d4d580a5 fixed payload authors, removed versions from jar names, added marshalsec/ysoserial.net links 2017-09-23 16:00:16 -04:00
Chris Frohoff 1f2e7bf08e fix badge 2017-09-07 22:50:31 -07:00
Chris Frohoff 2b10caa99b readme badge updates 2017-09-07 22:48:33 -07:00
Chris Frohoff e2110861a2 travis/appveyor config changes 2017-09-07 22:40:54 -07:00
Chris Frohoff 02b32407d9 appveyor.yml 2017-09-07 22:25:22 -07:00
Chris Frohoff 3f352eacc6 bumping up wait time 2017-09-07 21:41:14 -07:00
Chris Frohoff 73c5d1dbd4 cache maven repo in travis builds 2017-09-07 21:07:39 -07:00
Chris Frohoff c01dc9cf40 ignore internal api compile warnings 2017-09-07 20:22:11 -07:00
Chris Frohoff 5d5fdc458b disable stack trace trimming in surefire 2017-09-07 19:47:58 -07:00
Chris Frohoff 52383a180d docker support 2017-09-05 10:05:27 -07:00
Chris Frohoff 80b0d2f368 fixed broken tests 2017-09-03 23:40:17 -07:00
Chris Frohoff 8a330853c6 test/author fixes 2017-09-03 11:19:05 -07:00
Chris Frohoff fa0ba6031c Merge pull request #55 from SkylarWatson/file_upload_test
Updated payload args in FileUploadTest to match what production code …
2017-09-03 10:32:46 -07:00
Chris Frohoff fb1e65e5f2 0.0.6 snapshot 2017-09-02 21:07:43 -07:00
Chris Frohoff 19514a45e4 0.0.5 release v0.0.5 2017-09-02 21:07:05 -07:00
Chris Frohoff 028ee30e9c fixes, refactoring 2017-09-02 20:57:11 -07:00
Chris Frohoff 6088aa3f20 Merge pull request #70 from relaxnow/patch-1
Update README.md to reflect additional payloads
2017-09-02 12:47:51 -07:00
Boy Baukema 55800d1e3a Update README.md to reflect additional payloads 2017-08-10 11:10:39 +02:00
Chris Frohoff 35bce8fe45 Merge pull request #68 from JackOfMostTrades/clojure-gadget
Add a gadget chain for exploiting the presence of clojure.
2017-07-19 10:38:12 -07:00
Ian Haken 4cb0a5a17a Add a gadget chain for exploiting the presence of clojure. 2017-07-08 09:40:26 -07:00
Chris Frohoff ca38b73711 Merge pull request #67 from h3xstream/master
URLDNS: Small fix to avoid DNS resolution while generating the payload
2017-06-09 10:15:14 -07:00
Philippe Arteau f379338272 URLDNS: Small fix to avoid DNS resolution while generating the payload 2017-05-23 17:45:04 -04:00
Chris Frohoff 5bd2ced110 Merge pull request #66 from gebl/master
Add URLDNS gadget, that uses the argument as a URL to trigger a DNS l…
2017-03-26 19:19:56 -07:00
Gabriel Lawrence 12a9f56d01 Add URLDNS gadget, that uses the argument as a URL to trigger a DNS lookup. 2017-03-27 01:34:28 +00:00
Chris Frohoff ad26e2bd46 links to jitpack jars, note about release removal, build instructions 2016-10-19 11:33:38 -07:00
Skylar 8ad9b583a6 Updated payload args in FileUploadTest to match what production code is looking for; Added Intellij project files to .gitignore 2016-08-14 19:52:32 -05:00
Chris Frohoff d143b8cbfb Merge pull request #52 from matthiaskaiser/master
Adding the RhinoGadget, Javassist/Weld, JBossInterceptors  Gadget to ysoserial.
2016-07-29 09:28:06 -07:00
Matthias Kaiser 436d2040e4 Merge branch 'master' of https://github.com/frohoff/ysoserial 2016-07-29 12:39:26 +02:00
Matthias Kaiser a62a266df5 Updated names 2016-07-29 12:36:02 +02:00
Chris Frohoff bbebd8bd64 Merge pull request #53 from jacob-baines/fileupload2
FileUpload2
2016-07-28 10:06:11 -07:00
Jacob Baines d8bef9642a Rename FileUpload2 to Wicket1 2016-07-28 09:03:05 -04:00
Matthias Kaiser 2e6f61c039 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. 2016-07-26 17:11:11 +02:00
Matthias Kaiser 0f9526ff24 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. 2016-07-26 16:42:46 +02:00
Matthias Kaiser 8698844034 Adding a Javassist/Weld gadget to ysoserial. 2016-07-26 16:15:42 +02:00
Matthias Kaiser 2ae8b051a5 Adding the RhinoGadget to ysoserial.
The gadget uses the standalone version of Rhino ("org.mozilla.javascript.*"-namespace).
2016-07-26 14:48:09 +02:00
Chris Frohoff 80b21d9cb3 Merge pull request #51 from jacob-baines/jython_java6
Fix Jython1 Breaking Java 6
2016-07-25 16:57:38 -07:00