archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-22 07:00:44 +08:00
Code Issues Packages Projects Releases Wiki Activity
241 Commits 8 Branches 10 Tags
cb0fa86a997658b77a29fcc7600a43084c6387f5
Commit Graph
132 Commits
Author SHA1 Message Date
Chris Frohoff c8e203e358 added myfaces3 payload for sentimental reasons 2022-06-08 20:39:40 -07:00
Chris Frohoff 72de587568 fix payload name parsing 2022-06-05 23:36:44 -07:00
Chris Frohoff b8dd652273 try to fix jrmp client test 2022-06-05 23:09:08 -07:00
Chris Frohoff f4a6bcaf09 trying to fix jrmp reverse test 2022-06-05 22:25:22 -07:00
Chris Frohoff 62a5819182 added extra output 2022-06-05 20:26:41 -07:00
Chris Frohoff 26f38bb5df simplifications 2022-05-20 20:42:07 -07:00
Chris Frohoff 16cf78837e test fixes 2022-05-19 23:36:20 -07:00
Chris Frohoff 780bba473d forgot filter class 2022-05-13 18:37:06 -07:00
Chris Frohoff bee1257c5f move filter code to own class 2022-05-13 18:36:49 -07:00
Chris Frohoff 58d883fa6d disable filter 2022-05-13 18:06:29 -07:00
Chris Frohoff 710ae4deeb possible test fix 2022-05-10 20:15:42 -07:00
Chris Frohoff cac360b2ea resilient filter disabling 2022-05-09 23:36:53 -07:00
Chris Frohoff 8804dcb1dd jrmp listener test case 2022-05-09 21:04:00 -07:00
Chris Frohoff c6a0123f0b dns test 2022-05-07 15:21:16 -07:00
Chris Frohoff 34531b28fe tests for scala payloads 2022-05-07 15:02:42 -07:00
Chris Frohoff ce78f7301f adding test harnesses 2022-05-07 13:46:43 -07:00
Chris Frohoff 379f95f7a8 more test fix/cleanup 2022-04-29 22:49:32 -07:00
Chris Frohoff 5b831ccbd7 another test fix attempt 2022-04-29 22:35:38 -07:00
Chris Frohoff 08544e319d try to fix test 2022-04-29 22:17:20 -07:00
Chris Frohoff 1614ef011e revert change 2022-04-29 22:03:26 -07:00
Chris Frohoff 22b523a968 use cached deps for java 1.6 due to supported TLS versions 2022-04-29 21:49:38 -07:00
Chris Frohoff 73f83e47e5 fix some tests 2022-04-29 21:05:18 -07:00
Chris Frohoff 2f52d9da6b remove cc9 due to missing dep 2022-04-26 23:30:00 -07:00
Chris Frohoff 3605c6b903 test 2022-04-26 23:13:35 -07:00
Chris Frohoff 9010ad3dd4 fix class name 2022-04-26 23:05:49 -07:00
Chris FrohoffnavalorenzoStefano Ciccone梅子酒Yorick KosterIan Hakenk4n5ha0supersache
 		be6cbf7f13 New gadgets (#180) 
* CommonsCollections8 payload (#116)

* New gadgets (Struts2JasperReports - Atomikos - SpringJta) (#123)

* added Atomikos gadget payload

* added Atomikos gadget payload

* naming

* added spring-jta gadget

* added strutsJasperReports gadget + tests

* updated deps list on springJta

* fixed authors

* renaming

* Add new payload in Commons Collections 3.2.1 (#125)

* Add Jython2 gadget (#135)

This version of Jython2 executes a command through os.system(). Based on Jython1 from @pwntester & @cschneider4711

Co-authored-by: Chris Frohoff <[email protected]>

* Add scala and clojure payloads from a couple of years ago (#137)

* Add some payloads for Scala

* Add new clojure payload effecting versions since 1.8.0

* Fix infinite loop behavior of clojure2 payload.

* add CommonsBeanutils2 (#163)

* ceylon gadget (#173)

Co-authored-by: navalorenzo <[email protected]>
Co-authored-by: Stefano Ciccone <[email protected]>
Co-authored-by: 梅子酒 <[email protected]>
Co-authored-by: Yorick Koster <[email protected]>
Co-authored-by: Ian Haken <[email protected]>
Co-authored-by: k4n5ha0 <[email protected]>
Co-authored-by: supersache <[email protected]>
 2022-04-26 22:59:45 -07:00
Chris Frohoff 84affc3092 testing 2022-03-24 23:51:22 -07:00
Chris Frohoff f778c5d0ec testing 2022-03-24 23:47:14 -07:00
Chris Frohoff 47dcf11dd9 testing 2022-03-22 01:03:15 -07:00
Chris Frohoff f0233ca0c9 fix test dependency downloading 2022-03-21 20:13:49 -07:00
Chris Frohoff 658ba7ea09 re-add output 2022-03-20 22:54:47 -07:00
Chris Frohoff 746dae054d add logging config 2022-03-20 20:25:14 -07:00
Chris Frohoff 87785d2000 refactors 2022-03-20 20:24:28 -07:00
Chris Frohoff d022c995e7 payload test refactors 2022-03-19 15:46:14 -07:00
Chris Frohoff 8eb5cbfbf6 test fixes (#166) 
* fix badge url

* switch to https repo url
 2021-08-17 18:54:51 -07:00
Chris Frohoff 79179e00b8 minimal test for escaping issues in createTemplatesImpl (#165) 2021-08-17 16:13:01 -07:00
XinRoom 76ac2bb259 Resolve escape error (#151) 
Resolve escape error:
Caused by: compile error: ) is missing
 2021-08-17 15:46:32 -07:00
Michael Stepankin d367e379d9 New gadget chain based on Apache Click (#154) 
1. Add ysoserial.payloads.Click1 class
2. Update README.md with latest payloads
3. Remove duplicated "commons-io:commons-io:2.6" entry from pom.xml
 2021-02-02 08:41:29 -08:00
testanull 138dc36bd2 Add AspectJWeaver file write gadget (#145) 
* Add AspectJWeaver file write gadget
 2021-01-11 08:57:01 -08:00
Alexandre Bartel fc577c0bcd Just call setAccessible with Java > 12 2020-12-14 11:23:59 +01:00
Chris Frohoff 30099844c6 Merge pull request #119 from jax777/patch-1 
Fixes #90
 2019-09-07 12:01:49 -04:00
Chris Frohoff 33f61bff57 Merge pull request #115 from frohoff/test_fixes 
Test fixes
 2019-08-05 21:58:31 -07:00
jax777 863dc87f78 Update CommonsCollections5.java 
real Gadget chain:
 2019-05-06 16:40:28 +08:00
Chris Frohoff 55f1e7c35c Adding exploit JMXInvokeMBean (#111) 
Adding exploit JMXInvokeMBean
 2019-05-01 08:41:39 -07:00
Chris Frohoff baa74aa3f6 mark test as flaky 2019-04-25 16:04:42 -07:00
Chris Frohoff 02757f649c quiet jigsaw warnings 2019-04-25 14:17:30 -07:00
Chris Frohoff 7adb3cfe63 refactors 2019-04-25 08:20:07 -07:00
Chris Frohoff 4543487154 assembly to include tests in jar 2019-04-25 08:20:07 -07:00
Hans-Martin Münch 17085eb804 Adding exploit JMXInvokeMBean 2019-03-16 17:53:04 +01:00
scristalli f2ea3ae83a CommonsCollections7 payload 2019-03-15 19:24:29 +01:00