archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-21 22:50:46 +08:00
Code Issues Packages Projects Releases Wiki Activity
168 Commits 8 Branches 10 Tags
ac3d16bbd9e03317d4c9dad9c9cf8dca3c67c2f4
Commit Graph
45 Commits
Author SHA1 Message Date
Chris Frohoff ac3d16bbd9 fix missing interceptors jar and repo order (#222) 2024-03-30 18:11:55 -07:00
Chris Frohoff 51110f9b71 Publish uberjar as github release (#187) 2022-06-28 18:44:09 -07:00
Michael Stepankin d367e379d9 New gadget chain based on Apache Click (#154) 
1. Add ysoserial.payloads.Click1 class
2. Update README.md with latest payloads
3. Remove duplicated "commons-io:commons-io:2.6" entry from pom.xml
 2021-02-02 08:41:29 -08:00
testanull 138dc36bd2 Add AspectJWeaver file write gadget (#145) 
* Add AspectJWeaver file write gadget
 2021-01-11 08:57:01 -08:00
Chris Frohoff 63fb038cfb fix jdk6 protocol errors 2020-12-23 21:37:39 +00:00
Alexandre Bartel 0d5604ea73 Added missing dependency 2020-12-14 11:07:02 +01:00
Jonathan Leitschuh 6bdb3ef3f8 Use HTTPS instead of HTTP to resolve dependencies 
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <[email protected]>
 2020-02-11 00:10:26 -05:00
Chris Frohoff 02757f649c quiet jigsaw warnings 2019-04-25 14:17:30 -07:00
Chris Frohoff 4543487154 assembly to include tests in jar 2019-04-25 08:20:07 -07:00
Chris Frohoff f31677fbc3 Merge pull request #91 from supersache/vaadingadget 
Vaadin gadget
 2018-11-19 23:38:08 -08:00
Chris Frohoff 09440ff356 fix build for jdk6 2018-11-16 10:23:03 -08:00
Chris Frohoff a1a40d239f upgraded surefire to workaround SUREFIRE-1588 issue 2018-11-15 09:13:34 -08:00
Francesco Soncina ecc60747a5 fix: include javax.el with hibernate5, fix #97 (#98) 2018-11-04 09:46:56 -08:00
supersache 58e578b0f6 Changes for the new Vaadin Gadget 2018-09-19 14:55:56 +02:00
Chris Frohoff c01dc9cf40 ignore internal api compile warnings 2017-09-07 20:22:11 -07:00
Chris Frohoff 5d5fdc458b disable stack trace trimming in surefire 2017-09-07 19:47:58 -07:00
Chris Frohoff 8a330853c6 test/author fixes 2017-09-03 11:19:05 -07:00
Chris Frohoff fb1e65e5f2 0.0.6 snapshot 2017-09-02 21:07:43 -07:00
Chris Frohoff 19514a45e4 0.0.5 release 2017-09-02 21:07:05 -07:00
Chris Frohoff 028ee30e9c fixes, refactoring 2017-09-02 20:57:11 -07:00
Ian Haken 4cb0a5a17a Add a gadget chain for exploiting the presence of clojure. 2017-07-08 09:40:26 -07:00
Matthias Kaiser 436d2040e4 Merge branch 'master' of https://github.com/frohoff/ysoserial 2016-07-29 12:39:26 +02:00
Matthias Kaiser 2e6f61c039 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. 2016-07-26 17:11:11 +02:00
Matthias Kaiser 0f9526ff24 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. 2016-07-26 16:42:46 +02:00
Matthias Kaiser 8698844034 Adding a Javassist/Weld gadget to ysoserial. 2016-07-26 16:15:42 +02:00
Matthias Kaiser 2ae8b051a5 Adding the RhinoGadget to ysoserial. 
The gadget uses the standalone version of Rhino ("org.mozilla.javascript.*"-namespace).
 2016-07-26 14:48:09 +02:00
Jacob Baines 6f3dd217c7 Created FileUpload2 based on Apache Wicket's version of DiskFileItem. Also changed FileUpload1 to support Windows filepaths 2016-07-25 14:15:39 -04:00
mbechler c7a3f8c65c Fix tests 
- extract version checking code
- add version check for AnnotationInvocationHandler usage
- add java.rmi.server.useCodebaseOnly=false to surefire system properties
 2016-05-14 10:04:56 +02:00
Alvaro Muñoz 097179b703 Rebased Jython Gadget 2016-03-14 00:30:31 +01:00
mbechler 3230c080ff Add rome (RSS/Atom library) gadget chain. 
Add exploit and test code for JRMP reverse connect remote classloading.
 2016-03-12 17:35:17 +01:00
mbechler 8beeec6594 Add JBoss/Wildfly exploitation client. 2016-03-06 14:54:49 +01:00
mbechler c94779b83d Add jenkins client and exploits (CVE-2016-0788) 2016-03-06 14:54:49 +01:00
mbechler 7879428d9c Add MyFaces gadgets. 
Add ability to provide a custom deserializer (needed for setting up the faces context)
 2016-03-06 14:54:49 +01:00
mbechler c8e82237fe Add C3P0 gadget chain. 
Add remote classloading test harness.
 2016-03-06 14:54:49 +01:00
mbechler 20580e918d Add commons fileupload file operation gadget chain. 2016-03-06 14:54:49 +01:00
mbechler 4130fc5545 Add spring variant and json-lib gadget chain. 2016-03-06 14:54:49 +01:00
mbechler bd21624609 Add hibernate gadget chains. 
Remove missed copyright notices.
 2016-03-06 14:54:49 +01:00
mbechler a69ce66e69 Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation. 2016-03-06 14:53:30 +01:00
Alvaro Muñoz c616a23428 BeanShell exploit 2016-02-27 23:50:11 +01:00
Chris Frohoff adb16e1e09 bump version to next snapshot 2016-02-25 07:47:28 -08:00
Chris Frohoff 87c91b27a0 added beanutils gadget chain, release 0.0.4 2016-02-24 14:26:00 -08:00
Chris Frohoff 0e99a197c6 jre7u21 gadget chain, refactors 2016-01-26 17:18:32 -08:00
Chris Frohoff 79219f7792 fixed spring, commons-collections4 payloads, made test cases more robust 2015-01-29 21:33:26 -08:00
Chris Frohoff cdfaff46cd next snapshot 2015-01-29 07:50:22 -08:00
Chris Frohoff e6565b61e3 init-commit 2015-01-28 11:31:57 -08:00