Commit Graph
22 Commits
Author SHA1 Message Date
be6cbf7f13 New gadgets (#180)
* CommonsCollections8 payload (#116)

* New gadgets (Struts2JasperReports - Atomikos - SpringJta) (#123)

* added Atomikos gadget payload

* added Atomikos gadget payload

* naming

* added spring-jta gadget

* added strutsJasperReports gadget + tests

* updated deps list on springJta

* fixed authors

* renaming

* Add new payload in Commons Collections 3.2.1 (#125)

* Add Jython2 gadget (#135)

This version of Jython2 executes a command through os.system(). Based on Jython1 from @pwntester & @cschneider4711

Co-authored-by: Chris Frohoff <[email protected]>

* Add scala and clojure payloads from a couple of years ago (#137)

* Add some payloads for Scala

* Add new clojure payload effecting versions since 1.8.0

* Fix infinite loop behavior of clojure2 payload.

* add CommonsBeanutils2 (#163)

* ceylon gadget (#173)

Co-authored-by: navalorenzo <[email protected]>
Co-authored-by: Stefano Ciccone <[email protected]>
Co-authored-by: 梅子酒 <[email protected]>
Co-authored-by: Yorick Koster <[email protected]>
Co-authored-by: Ian Haken <[email protected]>
Co-authored-by: k4n5ha0 <[email protected]>
Co-authored-by: supersache <[email protected]>
2022-04-26 22:59:45 -07:00
Chris Frohoff 8eb5cbfbf6 test fixes (#166)
* fix badge url

* switch to https repo url
2021-08-17 18:54:51 -07:00
Michael Stepankin d367e379d9 New gadget chain based on Apache Click (#154)
1. Add ysoserial.payloads.Click1 class
2. Update README.md with latest payloads
3. Remove duplicated "commons-io:commons-io:2.6" entry from pom.xml
2021-02-02 08:41:29 -08:00
Jakobu5 d5a95e34aa Update README.md 2019-10-14 13:27:15 +02:00
Chris Frohoff 16fc48b22b fix download link (#92) 2018-09-19 19:03:36 -07:00
Chris Frohoff e9f112ac50 fix jitpack link (#83) 2018-04-02 11:54:39 -07:00
Chris Frohoff b4d4d580a5 fixed payload authors, removed versions from jar names, added marshalsec/ysoserial.net links 2017-09-23 16:00:16 -04:00
Chris Frohoff 1f2e7bf08e fix badge 2017-09-07 22:50:31 -07:00
Chris Frohoff 2b10caa99b readme badge updates 2017-09-07 22:48:33 -07:00
Chris Frohoff 8a330853c6 test/author fixes 2017-09-03 11:19:05 -07:00
Chris Frohoff 028ee30e9c fixes, refactoring 2017-09-02 20:57:11 -07:00
Boy Baukema 55800d1e3a Update README.md to reflect additional payloads 2017-08-10 11:10:39 +02:00
Chris Frohoff ad26e2bd46 links to jitpack jars, note about release removal, build instructions 2016-10-19 11:33:38 -07:00
The Gitter Badger e8b739c383 Add Gitter badge 2016-03-18 15:51:49 +00:00
nk acc264faa7 Fix method name in the usage part of the documentation 2016-03-07 18:05:46 +01:00
Alvaro Muñoz c616a23428 BeanShell exploit 2016-02-27 23:50:11 +01:00
Chris Frohoff 87c91b27a0 added beanutils gadget chain, release 0.0.4 2016-02-24 14:26:00 -08:00
Chris Frohoff ed18a40523 updated README 2016-01-26 17:27:19 -08:00
Chris Frohoff 4f00182efc Update README.md 2015-11-04 13:16:02 -08:00
Chris Frohoff 1c82fda4e4 readme updates 2015-01-29 08:14:15 -08:00
Chris Frohoff 58f3804a39 added link to talk slides 2015-01-28 11:58:14 -08:00
Chris Frohoff e6565b61e3 init-commit 2015-01-28 11:31:57 -08:00