Chris Frohoff
|
ef1a1beb1a
|
attempt to fix jdk6/7 appveyor config
|
2018-11-16 13:25:44 -08:00 |
|
Chris Frohoff
|
6909d5269d
|
retry on failure for flaky gadgets/tests
|
2018-11-16 11:40:23 -08:00 |
|
Chris Frohoff
|
fd911d0969
|
fix (hopefully) test flakiness
|
2018-11-16 11:02:44 -08:00 |
|
Chris Frohoff
|
377216a525
|
disable some gadgets/tests for jdk6
|
2018-11-16 10:47:29 -08:00 |
|
Chris Frohoff
|
09440ff356
|
fix build for jdk6
|
2018-11-16 10:23:03 -08:00 |
|
Chris Frohoff
|
4088b8cda2
|
remove serialization-stage secmgr to avoid spurious errors due to extra surefire thread
|
2018-11-15 13:17:25 -08:00 |
|
Chris Frohoff
|
a1a40d239f
|
upgraded surefire to workaround SUREFIRE-1588 issue
|
2018-11-15 09:13:34 -08:00 |
|
Francesco Soncina
|
ecc60747a5
|
fix: include javax.el with hibernate5, fix #97 (#98)
|
2018-11-04 09:46:56 -08:00 |
|
Chris Frohoff
|
16fc48b22b
|
fix download link (#92)
|
2018-09-19 19:03:36 -07:00 |
|
Félix Martel-Denis
|
99f463cc69
|
hibernate3 payload (#88)
|
2018-09-12 08:25:06 -07:00 |
|
Nicky Bloor
|
477ecb8f05
|
Add support for exploiting SSL RMI services. (#81)
* Add support for exploiting SSL RMI services.
* Make PMD happy.
|
2018-04-23 08:49:47 -07:00 |
|
Chris Frohoff
|
e9f112ac50
|
fix jitpack link (#83)
|
2018-04-02 11:54:39 -07:00 |
|
Chris Frohoff
|
b617b7badd
|
Merge pull request #73 from frohoff/doc-updates
doc updates
|
2017-09-23 16:05:37 -04:00 |
|
Chris Frohoff
|
b4d4d580a5
|
fixed payload authors, removed versions from jar names, added marshalsec/ysoserial.net links
|
2017-09-23 16:00:16 -04:00 |
|
Chris Frohoff
|
1f2e7bf08e
|
fix badge
|
2017-09-07 22:50:31 -07:00 |
|
Chris Frohoff
|
2b10caa99b
|
readme badge updates
|
2017-09-07 22:48:33 -07:00 |
|
Chris Frohoff
|
e2110861a2
|
travis/appveyor config changes
|
2017-09-07 22:40:54 -07:00 |
|
Chris Frohoff
|
02b32407d9
|
appveyor.yml
|
2017-09-07 22:25:22 -07:00 |
|
Chris Frohoff
|
3f352eacc6
|
bumping up wait time
|
2017-09-07 21:41:14 -07:00 |
|
Chris Frohoff
|
73c5d1dbd4
|
cache maven repo in travis builds
|
2017-09-07 21:07:39 -07:00 |
|
Chris Frohoff
|
c01dc9cf40
|
ignore internal api compile warnings
|
2017-09-07 20:22:11 -07:00 |
|
Chris Frohoff
|
5d5fdc458b
|
disable stack trace trimming in surefire
|
2017-09-07 19:47:58 -07:00 |
|
Chris Frohoff
|
52383a180d
|
docker support
|
2017-09-05 10:05:27 -07:00 |
|
Chris Frohoff
|
80b0d2f368
|
fixed broken tests
|
2017-09-03 23:40:17 -07:00 |
|
Chris Frohoff
|
8a330853c6
|
test/author fixes
|
2017-09-03 11:19:05 -07:00 |
|
Chris Frohoff
|
fa0ba6031c
|
Merge pull request #55 from SkylarWatson/file_upload_test
Updated payload args in FileUploadTest to match what production code …
|
2017-09-03 10:32:46 -07:00 |
|
Chris Frohoff
|
fb1e65e5f2
|
0.0.6 snapshot
|
2017-09-02 21:07:43 -07:00 |
|
Chris Frohoff
|
19514a45e4
|
0.0.5 release
v0.0.5
|
2017-09-02 21:07:05 -07:00 |
|
Chris Frohoff
|
028ee30e9c
|
fixes, refactoring
|
2017-09-02 20:57:11 -07:00 |
|
Chris Frohoff
|
6088aa3f20
|
Merge pull request #70 from relaxnow/patch-1
Update README.md to reflect additional payloads
|
2017-09-02 12:47:51 -07:00 |
|
Boy Baukema
|
55800d1e3a
|
Update README.md to reflect additional payloads
|
2017-08-10 11:10:39 +02:00 |
|
Chris Frohoff
|
35bce8fe45
|
Merge pull request #68 from JackOfMostTrades/clojure-gadget
Add a gadget chain for exploiting the presence of clojure.
|
2017-07-19 10:38:12 -07:00 |
|
Ian Haken
|
4cb0a5a17a
|
Add a gadget chain for exploiting the presence of clojure.
|
2017-07-08 09:40:26 -07:00 |
|
Chris Frohoff
|
ca38b73711
|
Merge pull request #67 from h3xstream/master
URLDNS: Small fix to avoid DNS resolution while generating the payload
|
2017-06-09 10:15:14 -07:00 |
|
Philippe Arteau
|
f379338272
|
URLDNS: Small fix to avoid DNS resolution while generating the payload
|
2017-05-23 17:45:04 -04:00 |
|
Chris Frohoff
|
5bd2ced110
|
Merge pull request #66 from gebl/master
Add URLDNS gadget, that uses the argument as a URL to trigger a DNS l…
|
2017-03-26 19:19:56 -07:00 |
|
Gabriel Lawrence
|
12a9f56d01
|
Add URLDNS gadget, that uses the argument as a URL to trigger a DNS lookup.
|
2017-03-27 01:34:28 +00:00 |
|
Chris Frohoff
|
ad26e2bd46
|
links to jitpack jars, note about release removal, build instructions
|
2016-10-19 11:33:38 -07:00 |
|
Skylar
|
8ad9b583a6
|
Updated payload args in FileUploadTest to match what production code is looking for; Added Intellij project files to .gitignore
|
2016-08-14 19:52:32 -05:00 |
|
Chris Frohoff
|
d143b8cbfb
|
Merge pull request #52 from matthiaskaiser/master
Adding the RhinoGadget, Javassist/Weld, JBossInterceptors Gadget to ysoserial.
|
2016-07-29 09:28:06 -07:00 |
|
Matthias Kaiser
|
436d2040e4
|
Merge branch 'master' of https://github.com/frohoff/ysoserial
|
2016-07-29 12:39:26 +02:00 |
|
Matthias Kaiser
|
a62a266df5
|
Updated names
|
2016-07-29 12:36:02 +02:00 |
|
Chris Frohoff
|
bbebd8bd64
|
Merge pull request #53 from jacob-baines/fileupload2
FileUpload2
|
2016-07-28 10:06:11 -07:00 |
|
Jacob Baines
|
d8bef9642a
|
Rename FileUpload2 to Wicket1
|
2016-07-28 09:03:05 -04:00 |
|
Matthias Kaiser
|
2e6f61c039
|
Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial.
|
2016-07-26 17:11:11 +02:00 |
|
Matthias Kaiser
|
0f9526ff24
|
Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial.
|
2016-07-26 16:42:46 +02:00 |
|
Matthias Kaiser
|
8698844034
|
Adding a Javassist/Weld gadget to ysoserial.
|
2016-07-26 16:15:42 +02:00 |
|
Matthias Kaiser
|
2ae8b051a5
|
Adding the RhinoGadget to ysoserial.
The gadget uses the standalone version of Rhino ("org.mozilla.javascript.*"-namespace).
|
2016-07-26 14:48:09 +02:00 |
|
Chris Frohoff
|
80b21d9cb3
|
Merge pull request #51 from jacob-baines/jython_java6
Fix Jython1 Breaking Java 6
|
2016-07-25 16:57:38 -07:00 |
|
Jacob Baines
|
0fb8d8d222
|
Don't use API introduced in Java 7
|
2016-07-25 18:09:31 -04:00 |
|