mbechler
7879428d9c
Add MyFaces gadgets.
...
Add ability to provide a custom deserializer (needed for setting up the faces context)
2016-03-06 14:54:49 +01:00
mbechler
d6658809cf
Move payload annotation to annotation package.
2016-03-06 14:54:49 +01:00
mbechler
c8e82237fe
Add C3P0 gadget chain.
...
Add remote classloading test harness.
2016-03-06 14:54:49 +01:00
mbechler
20580e918d
Add commons fileupload file operation gadget chain.
2016-03-06 14:54:49 +01:00
mbechler
6f9c8dca2b
Rename beanutils gadget
2016-03-06 14:54:49 +01:00
mbechler
4130fc5545
Add spring variant and json-lib gadget chain.
2016-03-06 14:54:49 +01:00
mbechler
bd21624609
Add hibernate gadget chains.
...
Remove missed copyright notices.
2016-03-06 14:54:49 +01:00
mbechler
436e831cbd
Add JRMP utilties, gadgets and test code.
2016-03-06 14:54:49 +01:00
mbechler
8dfce7ed73
Add custom test infrastructure.
2016-03-06 14:54:49 +01:00
mbechler
7157d5e297
Some basic cleanups (warnings, imports)
...
Add controlled instantiation constructor utility.
2016-03-06 14:54:49 +01:00
mbechler
a69ce66e69
Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation.
2016-03-06 14:53:30 +01:00
Chris Frohoff
48338fb6e7
Merge pull request #4 from ltearno/patch-1
...
Call setAccessible only once
2016-03-04 01:07:00 -08:00
Alvaro Muñoz
c616a23428
BeanShell exploit
2016-02-27 23:50:11 +01:00
Chris Frohoff
87c91b27a0
added beanutils gadget chain, release 0.0.4
2016-02-24 14:26:00 -08:00
Chris Frohoff
2c79998485
remove cruft
2016-02-24 13:57:41 -08:00
Chris Frohoff
0e99a197c6
jre7u21 gadget chain, refactors
2016-01-26 17:18:32 -08:00
Arnaud Tournier
5b4b8a3320
Call setAccessible only once
...
In the getField method, due to recursion, the field.setAccessible was called a number of times equal to the number of level to go up the hierarchy to find the field
2015-12-11 16:32:32 +01:00
Chris Frohoff
79219f7792
fixed spring, commons-collections4 payloads, made test cases more robust
2015-01-29 21:33:26 -08:00
Chris Frohoff
e6565b61e3
init-commit
2015-01-28 11:31:57 -08:00
mbechler