mirror of
https://github.com/frohoff/ysoserial.git
synced 2026-09-27 01:11:53 +08:00
Compare commits
11
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
39432cbe6d | ||
|
|
048a9db46a | ||
|
|
77e3aff82f | ||
|
|
cfd02f9c2e | ||
|
|
2c4d8d815c | ||
|
|
96f5b62749 | ||
|
|
320c299a93 | ||
|
|
efb3f61337 | ||
|
|
094b92ef28 | ||
|
|
42bd6d2586 | ||
|
|
66a012184d |
@@ -28,13 +28,11 @@ jobs:
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
|
||||
|
||||
- name: Rename artifact
|
||||
run: mv target/ysoserial-${{ github.ref_name }}-all.jar target/ysoserial-all.jar
|
||||
- run: ls -la target/ysoserial-${{ github.ref_name }}-all.jar
|
||||
|
||||
- name: Publish GitHub release
|
||||
uses: softprops/action-gh-release@v1
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
with:
|
||||
files: target/ysoserial-all.jar
|
||||
files: target/ysoserial-${{ github.ref_name }}-all.jar
|
||||
+1
-1
@@ -14,7 +14,7 @@ COPY src ./src
|
||||
RUN mvn clean package -DskipTests
|
||||
RUN mv target/ysoserial-*all*.jar target/ysoserial.jar
|
||||
|
||||
FROM eclipse-temurin:8-jdk-alpine
|
||||
FROM java:8-jdk-alpine
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
|
||||
@@ -1,10 +1,13 @@
|
||||
|
||||
# ysoserial
|
||||
|
||||
[](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar)
|
||||
[](https://travis-ci.com/github/frohoff/ysoserial)
|
||||
[](
|
||||
https://gitter.im/frohoff/ysoserial?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
|
||||
[](
|
||||
https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
|
||||
[](https://travis-ci.com/frohoff/ysoserial)
|
||||
[](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master)
|
||||
[](https://jitpack.io/#frohoff/ysoserial)
|
||||
|
||||
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
|
||||
|
||||
@@ -100,9 +103,14 @@ $ java -cp ysoserial.jar ysoserial.exploit.RMIRegistryExploit myhost 1099 Common
|
||||
|
||||
## Installation
|
||||
|
||||
[](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar)
|
||||
1. Download the latest jar from
|
||||
[JitPack](https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
|
||||
[](
|
||||
https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
|
||||
|
||||
Download the [latest release jar](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar) from GitHub releases.
|
||||
Note that GitHub-hosted releases were removed in compliance with the
|
||||
[GitHub Community Guidelines](
|
||||
https://help.github.com/articles/github-community-guidelines/#what-is-not-allowed)
|
||||
|
||||
## Building
|
||||
|
||||
@@ -112,7 +120,7 @@ Requires Java 1.7+ and Maven 3.x+
|
||||
|
||||
## Code Status
|
||||
|
||||
[](https://travis-ci.com/github/frohoff/ysoserial)
|
||||
[](https://travis-ci.org/frohoff/ysoserial)
|
||||
[](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master)
|
||||
|
||||
## Contributing
|
||||
|
||||
@@ -39,9 +39,7 @@
|
||||
<mainClass>ysoserial.GeneratePayload</mainClass>
|
||||
</manifest>
|
||||
</archive>
|
||||
<descriptors>
|
||||
<descriptor>assembly.xml</descriptor>
|
||||
</descriptors>
|
||||
</configuration>
|
||||
<executions>
|
||||
<execution>
|
||||
@@ -68,16 +66,6 @@
|
||||
</build>
|
||||
|
||||
<repositories>
|
||||
<repository>
|
||||
<id>central</id>
|
||||
<layout>default</layout>
|
||||
<url>https://repo.maven.apache.org/maven2/</url>
|
||||
</repository>
|
||||
<repository>
|
||||
<id>ysoserial-m2-repo</id>
|
||||
<layout>default</layout>
|
||||
<url>https://raw.githubusercontent.com/frohoff/ysoserial-m2-repo/master</url>
|
||||
</repository>
|
||||
<repository>
|
||||
<id>jenkins</id>
|
||||
<layout>default</layout>
|
||||
|
||||
Reference in New Issue
Block a user