archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-22 07:00:44 +08:00
Code Issues Packages Projects Releases Wiki Activity
105 Commits 8 Branches 10 Tags
cf44df121aa7af80dfcacf57f77d875a74ee07f2
Commit Graph
32 Commits
Author SHA1 Message Date
Chris Frohoff 1075423d36 mvn surefire.rerunFailingTestsCount=3 for flaky Wicket1 test 2017-09-24 15:46:04 -04:00
Chris Frohoff c01dc9cf40 ignore internal api compile warnings 2017-09-07 20:22:11 -07:00
Chris Frohoff 5d5fdc458b disable stack trace trimming in surefire 2017-09-07 19:47:58 -07:00
Chris Frohoff 8a330853c6 test/author fixes 2017-09-03 11:19:05 -07:00
Chris Frohoff fb1e65e5f2 0.0.6 snapshot 2017-09-02 21:07:43 -07:00
Chris Frohoff 19514a45e4 0.0.5 release 2017-09-02 21:07:05 -07:00
Chris Frohoff 028ee30e9c fixes, refactoring 2017-09-02 20:57:11 -07:00
Ian Haken 4cb0a5a17a Add a gadget chain for exploiting the presence of clojure. 2017-07-08 09:40:26 -07:00
Matthias Kaiser 436d2040e4 Merge branch 'master' of https://github.com/frohoff/ysoserial 2016-07-29 12:39:26 +02:00
Matthias Kaiser 2e6f61c039 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. 2016-07-26 17:11:11 +02:00
Matthias Kaiser 0f9526ff24 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. 2016-07-26 16:42:46 +02:00
Matthias Kaiser 8698844034 Adding a Javassist/Weld gadget to ysoserial. 2016-07-26 16:15:42 +02:00
Matthias Kaiser 2ae8b051a5 Adding the RhinoGadget to ysoserial. 
The gadget uses the standalone version of Rhino ("org.mozilla.javascript.*"-namespace).
 2016-07-26 14:48:09 +02:00
Jacob Baines 6f3dd217c7 Created FileUpload2 based on Apache Wicket's version of DiskFileItem. Also changed FileUpload1 to support Windows filepaths 2016-07-25 14:15:39 -04:00
mbechler c7a3f8c65c Fix tests 
- extract version checking code
- add version check for AnnotationInvocationHandler usage
- add java.rmi.server.useCodebaseOnly=false to surefire system properties
 2016-05-14 10:04:56 +02:00
Alvaro Muñoz 097179b703 Rebased Jython Gadget 2016-03-14 00:30:31 +01:00
mbechler 3230c080ff Add rome (RSS/Atom library) gadget chain. 
Add exploit and test code for JRMP reverse connect remote classloading.
 2016-03-12 17:35:17 +01:00
mbechler 8beeec6594 Add JBoss/Wildfly exploitation client. 2016-03-06 14:54:49 +01:00
mbechler c94779b83d Add jenkins client and exploits (CVE-2016-0788) 2016-03-06 14:54:49 +01:00
mbechler 7879428d9c Add MyFaces gadgets. 
Add ability to provide a custom deserializer (needed for setting up the faces context)
 2016-03-06 14:54:49 +01:00
mbechler c8e82237fe Add C3P0 gadget chain. 
Add remote classloading test harness.
 2016-03-06 14:54:49 +01:00
mbechler 20580e918d Add commons fileupload file operation gadget chain. 2016-03-06 14:54:49 +01:00
mbechler 4130fc5545 Add spring variant and json-lib gadget chain. 2016-03-06 14:54:49 +01:00
mbechler bd21624609 Add hibernate gadget chains. 
Remove missed copyright notices.
 2016-03-06 14:54:49 +01:00
mbechler a69ce66e69 Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation. 2016-03-06 14:53:30 +01:00
Alvaro Muñoz c616a23428 BeanShell exploit 2016-02-27 23:50:11 +01:00
Chris Frohoff adb16e1e09 bump version to next snapshot 2016-02-25 07:47:28 -08:00
Chris Frohoff 87c91b27a0 added beanutils gadget chain, release 0.0.4 2016-02-24 14:26:00 -08:00
Chris Frohoff 0e99a197c6 jre7u21 gadget chain, refactors 2016-01-26 17:18:32 -08:00
Chris Frohoff 79219f7792 fixed spring, commons-collections4 payloads, made test cases more robust 2015-01-29 21:33:26 -08:00
Chris Frohoff cdfaff46cd next snapshot 2015-01-29 07:50:22 -08:00
Chris Frohoff e6565b61e3 init-commit 2015-01-28 11:31:57 -08:00