Commit Graph
173 Commits
Author SHA1 Message Date
mbechler 4130fc5545 Add spring variant and json-lib gadget chain. 2016-03-06 14:54:49 +01:00
mbechler bd21624609 Add hibernate gadget chains.
Remove missed copyright notices.
2016-03-06 14:54:49 +01:00
mbechler 436e831cbd Add JRMP utilties, gadgets and test code. 2016-03-06 14:54:49 +01:00
mbechler 8dfce7ed73 Add custom test infrastructure. 2016-03-06 14:54:49 +01:00
mbechler 7157d5e297 Some basic cleanups (warnings, imports)
Add controlled instantiation constructor utility.
2016-03-06 14:54:49 +01:00
mbechler a69ce66e69 Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation. 2016-03-06 14:53:30 +01:00
Chris Frohoff 48338fb6e7 Merge pull request #4 from ltearno/patch-1
Call setAccessible only once
2016-03-04 01:07:00 -08:00
Chris Frohoff 39574362ad Merge pull request #13 from pwntester/master
BeanShell exploit
2016-02-27 16:09:01 -08:00
Alvaro Muñoz c616a23428 BeanShell exploit 2016-02-27 23:50:11 +01:00
Chris Frohoff adb16e1e09 bump version to next snapshot 2016-02-25 07:47:28 -08:00
Chris Frohoff 87c91b27a0 added beanutils gadget chain, release 0.0.4 v0.0.4 2016-02-24 14:26:00 -08:00
Chris Frohoff 2c79998485 remove cruft 2016-02-24 13:57:41 -08:00
Chris Frohoff ed18a40523 updated README v0.0.3 2016-01-26 17:27:19 -08:00
Chris Frohoff 0e99a197c6 jre7u21 gadget chain, refactors 2016-01-26 17:18:32 -08:00
Arnaud Tournier 5b4b8a3320 Call setAccessible only once
In the getField method, due to recursion, the field.setAccessible was called a number of times equal to the number of level to go up the hierarchy to find the field
2015-12-11 16:32:32 +01:00
Chris Frohoff 4f00182efc Update README.md 2015-11-04 13:16:02 -08:00
Chris Frohoff 79219f7792 fixed spring, commons-collections4 payloads, made test cases more robust v0.0.2 2015-01-29 21:33:26 -08:00
Chris Frohoff 1c82fda4e4 readme updates 2015-01-29 08:14:15 -08:00
Chris Frohoff f3e0ca6456 removed openjdk8 from travis config 2015-01-29 08:14:04 -08:00
Chris Frohoff dbdce11f76 clear checks between tets, just in case 2015-01-29 07:52:17 -08:00
Chris Frohoff cdfaff46cd next snapshot 2015-01-29 07:50:22 -08:00
Chris Frohoff 58f3804a39 added link to talk slides 2015-01-28 11:58:14 -08:00
Chris Frohoff e6565b61e3 init-commit v0.0.1 2015-01-28 11:31:57 -08:00