Commit Graph
169 Commits
Author SHA1 Message Date
Chris Frohoff 863466d2e4 fix assembly conf (#223) 2024-03-30 18:50:22 -07:00
Chris Frohoff ac3d16bbd9 fix missing interceptors jar and repo order (#222) 2024-03-30 18:11:55 -07:00
Chris Frohoff 2874a69f61 fix other download links (#191) 2022-07-16 12:09:00 -07:00
Chris Frohoff 91b4266b13 update readme (#188) 2022-06-28 18:52:16 -07:00
Chris Frohoff 51110f9b71 Publish uberjar as github release (#187) v0.0.6 2022-06-28 18:44:09 -07:00
Chris Frohoff 8eb5cbfbf6 test fixes (#166)
* fix badge url

* switch to https repo url
2021-08-17 18:54:51 -07:00
YunLemon d13299428d Improve Travis CI build Performance (#164) 2021-08-17 16:14:45 -07:00
Chris Frohoff 79179e00b8 minimal test for escaping issues in createTemplatesImpl (#165) 2021-08-17 16:13:01 -07:00
XinRoom 76ac2bb259 Resolve escape error (#151)
Resolve escape error:
Caused by: compile error: ) is missing
2021-08-17 15:46:32 -07:00
Michael Stepankin d367e379d9 New gadget chain based on Apache Click (#154)
1. Add ysoserial.payloads.Click1 class
2. Update README.md with latest payloads
3. Remove duplicated "commons-io:commons-io:2.6" entry from pom.xml
2021-02-02 08:41:29 -08:00
testanull 138dc36bd2 Add AspectJWeaver file write gadget (#145)
* Add AspectJWeaver file write gadget
2021-01-11 08:57:01 -08:00
Chris Frohoff 750168c6d3 Merge pull request #149 from Alexandre-Bartel/jdk12_setAccessible
Just call setAccessible with Java > 12
2021-01-05 11:11:54 -08:00
Chris Frohoff 4df2ee2bb5 Merge pull request #150 from frohoff/fix_jk6
fix jdk6 protocol errors
2020-12-23 13:52:55 -08:00
Chris Frohoff 63fb038cfb fix jdk6 protocol errors 2020-12-23 21:37:39 +00:00
Chris Frohoff df9cea71d3 Merge pull request #148 from Alexandre-Bartel/missing_dep
Added missing dependency
2020-12-23 11:27:45 -08:00
Alexandre Bartel fc577c0bcd Just call setAccessible with Java > 12 2020-12-14 11:23:59 +01:00
Alexandre Bartel 0d5604ea73 Added missing dependency 2020-12-14 11:07:02 +01:00
Chris Frohoff 6eca5bc740 Merge pull request #144 from drwetter/patch-2
Using HTTPS
2020-08-28 08:58:59 -07:00
Chris Frohoff 8ede62029d Merge pull request #139 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
[SECURITY] Use HTTPS to resolve dependencies in Maven Build
2020-08-28 08:58:43 -07:00
Chris Frohoff 7bcd9e7974 Merge pull request #131 from drwetter/patch-1
Use HTTPS for jenkins repo
2020-08-28 08:58:16 -07:00
Chris Frohoff 098854113c Merge pull request #130 from Jakobu5/master
Update README.md
2020-08-28 08:57:56 -07:00
Dirk Wetter a7be14877a Using HTTPS
* added for jenkins
  * also added for repo1.maven.org
2020-07-10 16:19:56 +02:00
Jonathan Leitschuh 6bdb3ef3f8 Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <[email protected]>
2020-02-11 00:10:26 -05:00
Dirk Wetter 9d74e17ae6 Use HTTPS for jenkins repo
... tested & worked for me
2019-10-15 11:19:26 +02:00
Jakobu5 d5a95e34aa Update README.md 2019-10-14 13:27:15 +02:00
Chris Frohoff 30099844c6 Merge pull request #119 from jax777/patch-1
Fixes #90
2019-09-07 12:01:49 -04:00
Chris Frohoff 66cda5a6cf Merge pull request #127 from frohoff/docker_assembly_fix
Fix for Dockerfile assembly.xml issue
2019-08-05 22:29:51 -07:00
Chris Frohoff 33f61bff57 Merge pull request #115 from frohoff/test_fixes
Test fixes
2019-08-05 21:58:31 -07:00
Chris Frohoff fe74b6b200 fix for dockerfile 2019-08-05 21:57:47 -07:00
jax777 863dc87f78 Update CommonsCollections5.java
real Gadget chain:
2019-05-06 16:40:28 +08:00
Chris Frohoff 55f1e7c35c Adding exploit JMXInvokeMBean (#111)
Adding exploit JMXInvokeMBean
2019-05-01 08:41:39 -07:00
Chris Frohoff baa74aa3f6 mark test as flaky 2019-04-25 16:04:42 -07:00
Chris Frohoff f829b478ae Quiet jigsaw warnings (#114)
Quiet jigsaw warnings
2019-04-25 14:29:32 -07:00
Chris Frohoff 02757f649c quiet jigsaw warnings 2019-04-25 14:17:30 -07:00
Chris Frohoff f5e40c8d74 Assembly to include tests in jar (#104)
Assembly to include tests in jar
2019-04-25 09:21:18 -07:00
Chris Frohoff eb1c49eae7 fix travis config 2019-04-25 08:34:51 -07:00
Chris Frohoff 7adb3cfe63 refactors 2019-04-25 08:20:07 -07:00
Chris Frohoff 4543487154 assembly to include tests in jar 2019-04-25 08:20:07 -07:00
Chris Frohoff 47154e8c7f CommonsCollections7 payload (#110)
CommonsCollections7 payload
2019-04-25 08:11:24 -07:00
Hans-Martin Münch 17085eb804 Adding exploit JMXInvokeMBean 2019-03-16 17:53:04 +01:00
scristalli f2ea3ae83a CommonsCollections7 payload 2019-03-15 19:24:29 +01:00
Chris Frohoff ff59523eb6 Merge pull request #106 from tint0/rhino-gadget-2
MozillaRhino2 gadget
2019-02-06 09:08:02 -08:00
tint0 04c198a3d0 getDeclaredField raises exception instead of returning null when field isn't found
(cherry picked from commit 348d873)
2019-01-30 13:21:47 +07:00
tint0 6ba90d2d83 New rhino gadget
(cherry picked from commit 7533f65)
2019-01-30 13:21:25 +07:00
Chris Frohoff f31677fbc3 Merge pull request #91 from supersache/vaadingadget
Vaadin gadget
2018-11-19 23:38:08 -08:00
Chris Frohoff 8cf9802a0c Merge pull request #103 from frohoff/fixes
Various JDK Build/Test Fixes
2018-11-19 13:37:12 -08:00
Chris Frohoff ecdac3988b troubleshooting travis jdk6 build 2018-11-19 08:22:36 -08:00
Chris Frohoff cecdd80a81 print mvn version 2018-11-16 18:17:06 -08:00
Chris Frohoff 548857e3f6 jdk10+ compile fixes 2018-11-16 18:08:51 -08:00
Chris Frohoff 3f4922505f fix for jdk10+ 2018-11-16 17:44:28 -08:00