archive/ysoserial
1
0
Fork 0
mirror of https://github.com/frohoff/ysoserial.git synced 2026-09-27 01:11:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: archive/ysoserial:vtesting.a.fix
Branches Tags
archive/ysoserial:master archive/ysoserial:fix_assembly archive/ysoserial:gh-actions archive/ysoserial:newgadgets archive/ysoserial:escape_error_test archive/ysoserial:fix_jk6 archive/ysoserial:jdk6_jdk9 archive/ysoserial:multiarg
archive/ysoserial:v0.0.6 archive/ysoserial:vtesting.a.fix archive/ysoserial:vtest.renamed.release archive/ysoserial:vtest.the.releases archive/ysoserial:vtest.the.release archive/ysoserial:v0.0.5 archive/ysoserial:v0.0.4 archive/ysoserial:v0.0.3 archive/ysoserial:v0.0.2 archive/ysoserial:v0.0.1
..
compare: archive/ysoserial:master
Branches Tags
archive/ysoserial:master archive/ysoserial:fix_assembly archive/ysoserial:gh-actions archive/ysoserial:newgadgets archive/ysoserial:escape_error_test archive/ysoserial:fix_jk6 archive/ysoserial:jdk6_jdk9 archive/ysoserial:multiarg
archive/ysoserial:v0.0.6 archive/ysoserial:vtesting.a.fix archive/ysoserial:vtest.renamed.release archive/ysoserial:vtest.the.releases archive/ysoserial:vtest.the.release archive/ysoserial:v0.0.5 archive/ysoserial:v0.0.4 archive/ysoserial:v0.0.3 archive/ysoserial:v0.0.2 archive/ysoserial:v0.0.1
10 Commits
vtesting.a.fix .. master
Author SHA1 Message Date
Stefano Chierici 218bcffcaa Change base image to eclipse-temurin:8-jdk-alpine (#234) 2025-12-03 20:07:31 -08:00
Sr DDrive b7d0f27b46 Update Dockerfile (#193) 
There is no image named, openjdk:8-alpine hosted in Docker,  I just replace java for openjdk and it works 

Error Step 11/14: FROM java:8-jdk-alpine
manifest for java: 8-jdk-alpine not found: unknown manifest: unknown manifest

Step 11/14 : FROM openjdk:8-jdk-alpine
8-jdk-alpine: Pulling from library/openjdk
e7c96db7181b: Pull complete
f910a506b6cb: Pull complete
c2274a1a0e27: Pull complete
Digest: sha256:94792824df2df33402f201713f932b58cb9de94a0cd524164a0f2283343547b3
Status: Downloaded newer image for openjdk:8-jdk-alpine
 2024-03-30 19:47:00 -07:00
Yunus AYDIN 401bbbc728 Update Dockerfile (#212) 2024-03-30 19:44:43 -07:00
Yechiel b03f9580c9 fixed dockerfile outdated java image to openjdk (#215) 2024-03-30 19:43:19 -07:00
Alexandre ZANNI bdbfef897a fix travis link + add jitpack (#194) 2024-03-30 19:12:17 -07:00
Chris Frohoff 863466d2e4 fix assembly conf (#223) 2024-03-30 18:50:22 -07:00
Chris Frohoff ac3d16bbd9 fix missing interceptors jar and repo order (#222) 2024-03-30 18:11:55 -07:00
Chris Frohoff 2874a69f61 fix other download links (#191) 2022-07-16 12:09:00 -07:00
Chris Frohoff 91b4266b13 update readme (#188) 2022-06-28 18:52:16 -07:00
Chris Frohoff 51110f9b71 Publish uberjar as github release (#187) 2022-06-28 18:44:09 -07:00
3 changed files with 108 additions and 104 deletions
Expand all files Collapse all files
Dockerfile
+1 -1
View File
@@ -14,7 +14,7 @@ COPY src ./src
RUN mvn clean package -DskipTests RUN mvn clean package -DskipTests
RUN mv target/ysoserial-*all*.jar target/ysoserial.jar RUN mv target/ysoserial-*all*.jar target/ysoserial.jar
FROM java:8-jdk-alpine FROM eclipse-temurin:8-jdk-alpine
WORKDIR /app WORKDIR /app
README.md
+6 -14
View File
@@ -1,13 +1,10 @@
# ysoserial # ysoserial
[![Join the chat at https://gitter.im/frohoff/ysoserial]( [![GitHub release](https://img.shields.io/github/downloads/frohoff/ysoserial/latest/total)](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar)
https://badges.gitter.im/frohoff/ysoserial.svg)]( [![Travis Build Status](https://api.travis-ci.com/frohoff/ysoserial.svg?branch=master)](https://travis-ci.com/github/frohoff/ysoserial)
https://gitter.im/frohoff/ysoserial?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
[![Download Latest Snapshot](https://img.shields.io/badge/download-master-green.svg)](
https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
[![Travis Build Status](https://api.travis-ci.com/frohoff/ysoserial.svg?branch=master)](https://travis-ci.com/frohoff/ysoserial)
[![Appveyor Build status](https://ci.appveyor.com/api/projects/status/a8tbk9blgr3yut4g/branch/master?svg=true)](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master) [![Appveyor Build status](https://ci.appveyor.com/api/projects/status/a8tbk9blgr3yut4g/branch/master?svg=true)](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master)
[![JitPack](https://jitpack.io/v/frohoff/ysoserial.svg)](https://jitpack.io/#frohoff/ysoserial)
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
@@ -103,14 +100,9 @@ $ java -cp ysoserial.jar ysoserial.exploit.RMIRegistryExploit myhost 1099 Common
## Installation ## Installation
1. Download the latest jar from [![GitHub release](https://img.shields.io/github/downloads/frohoff/ysoserial/latest/total)](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar)
[JitPack](https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
[![Download Latest Snapshot](https://img.shields.io/badge/download-master-green.svg)](
https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar)
Note that GitHub-hosted releases were removed in compliance with the Download the [latest release jar](https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar) from GitHub releases.
[GitHub Community Guidelines](
https://help.github.com/articles/github-community-guidelines/#what-is-not-allowed)
## Building ## Building
@@ -120,7 +112,7 @@ Requires Java 1.7+ and Maven 3.x+
## Code Status ## Code Status
[![Build Status](https://travis-ci.org/frohoff/ysoserial.svg?branch=master)](https://travis-ci.org/frohoff/ysoserial) [![Build Status](https://api.travis-ci.com/frohoff/ysoserial.svg?branch=master)](https://travis-ci.com/github/frohoff/ysoserial)
[![Build status](https://ci.appveyor.com/api/projects/status/a8tbk9blgr3yut4g/branch/master?svg=true)](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master) [![Build status](https://ci.appveyor.com/api/projects/status/a8tbk9blgr3yut4g/branch/master?svg=true)](https://ci.appveyor.com/project/frohoff/ysoserial/branch/master)
## Contributing ## Contributing
pom.xml
+101 -89
View File
@@ -25,9 +25,9 @@
<source>1.6</source> <source>1.6</source>
<target>1.6</target> <target>1.6</target>
<!-- ignore noisy internal api warnings --> <!-- ignore noisy internal api warnings -->
<compilerArgument>-XDignore.symbol.file</compilerArgument> <compilerArgument>-XDignore.symbol.file</compilerArgument>
<fork>true</fork> <fork>true</fork>
</configuration> </configuration>
</plugin> </plugin>
<plugin> <plugin>
<artifactId>maven-assembly-plugin</artifactId> <artifactId>maven-assembly-plugin</artifactId>
@@ -39,8 +39,10 @@
<mainClass>ysoserial.GeneratePayload</mainClass> <mainClass>ysoserial.GeneratePayload</mainClass>
</manifest> </manifest>
</archive> </archive>
<descriptor>assembly.xml</descriptor> <descriptors>
</configuration> <descriptor>assembly.xml</descriptor>
</descriptors>
</configuration>
<executions> <executions>
<execution> <execution>
<id>make-assembly</id> <id>make-assembly</id>
@@ -52,20 +54,30 @@
</executions> </executions>
</plugin> </plugin>
<plugin> <plugin>
<groupId>org.apache.maven.plugins</groupId> <groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId> <artifactId>maven-surefire-plugin</artifactId>
<version>3.0.0-M1</version> <version>3.0.0-M1</version>
<configuration> <configuration>
<trimStackTrace>false</trimStackTrace> <trimStackTrace>false</trimStackTrace>
<systemPropertyVariables> <systemPropertyVariables>
<java.rmi.server.useCodebaseOnly>false</java.rmi.server.useCodebaseOnly> <java.rmi.server.useCodebaseOnly>false</java.rmi.server.useCodebaseOnly>
</systemPropertyVariables> </systemPropertyVariables>
</configuration> </configuration>
</plugin> </plugin>
</plugins> </plugins>
</build> </build>
<repositories> <repositories>
<repository>
<id>central</id>
<layout>default</layout>
<url>https://repo.maven.apache.org/maven2/</url>
</repository>
<repository>
<id>ysoserial-m2-repo</id>
<layout>default</layout>
<url>https://raw.githubusercontent.com/frohoff/ysoserial-m2-repo/master</url>
</repository>
<repository> <repository>
<id>jenkins</id> <id>jenkins</id>
<layout>default</layout> <layout>default</layout>
@@ -131,11 +143,11 @@
<artifactId>commons-codec</artifactId> <artifactId>commons-codec</artifactId>
<version>1.9</version> <version>1.9</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>commons-io</groupId> <groupId>commons-io</groupId>
<artifactId>commons-io</artifactId> <artifactId>commons-io</artifactId>
<version>2.6</version> <version>2.6</version>
</dependency> </dependency>
<dependency> <dependency>
<artifactId>remoting</artifactId> <artifactId>remoting</artifactId>
<groupId>org.jenkins-ci.main</groupId> <groupId>org.jenkins-ci.main</groupId>
@@ -236,7 +248,7 @@
<artifactId>commons-fileupload</artifactId> <artifactId>commons-fileupload</artifactId>
<version>1.3</version> <version>1.3</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.apache.wicket</groupId> <groupId>org.apache.wicket</groupId>
<artifactId>wicket-util</artifactId> <artifactId>wicket-util</artifactId>
<version>6.23.0</version> <version>6.23.0</version>
@@ -266,11 +278,11 @@
<artifactId>rome</artifactId> <artifactId>rome</artifactId>
<version>1.0</version> <version>1.0</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.python</groupId> <groupId>org.python</groupId>
<artifactId>jython-standalone</artifactId> <artifactId>jython-standalone</artifactId>
<version>2.5.2</version> <version>2.5.2</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>rhino</groupId> <groupId>rhino</groupId>
<artifactId>js</artifactId> <artifactId>js</artifactId>
@@ -311,11 +323,11 @@
<artifactId>slf4j-api</artifactId> <artifactId>slf4j-api</artifactId>
<version>1.7.21</version> <version>1.7.21</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.slf4j</groupId> <groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId> <artifactId>slf4j-jdk14</artifactId>
<version>1.7.21</version> <version>1.7.21</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.clojure</groupId> <groupId>org.clojure</groupId>
<artifactId>clojure</artifactId> <artifactId>clojure</artifactId>
@@ -326,55 +338,55 @@
<artifactId>vaadin-server</artifactId> <artifactId>vaadin-server</artifactId>
<version>7.7.14</version> <version>7.7.14</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.aspectj</groupId> <groupId>org.aspectj</groupId>
<artifactId>aspectjweaver</artifactId> <artifactId>aspectjweaver</artifactId>
<version>1.9.5</version> <version>1.9.5</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.apache.click</groupId> <groupId>org.apache.click</groupId>
<artifactId>click-nodeps</artifactId> <artifactId>click-nodeps</artifactId>
<version>2.3.0</version> <version>2.3.0</version>
</dependency> </dependency>
</dependencies> </dependencies>
<profiles> <profiles>
<profile> <profile>
<id>jdk6</id> <id>jdk6</id>
<activation> <activation>
<jdk>1.6</jdk> <jdk>1.6</jdk>
</activation> </activation>
<build> <build>
<plugins> <plugins>
<plugin> <plugin>
<groupId>org.apache.maven.plugins</groupId> <groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId> <artifactId>maven-surefire-plugin</artifactId>
<version>2.22.1</version> <version>2.22.1</version>
</plugin> </plugin>
</plugins> </plugins>
</build> </build>
<dependencies> <dependencies>
<dependency> <dependency>
<groupId>javax.el</groupId> <groupId>javax.el</groupId>
<artifactId>javax.el-api</artifactId> <artifactId>javax.el-api</artifactId>
<version>3.0.0</version> <version>3.0.0</version>
</dependency> </dependency>
</dependencies> </dependencies>
<!-- workaround for non-overlapping TLS versions in JDK6 and central repo <!-- workaround for non-overlapping TLS versions in JDK6 and central repo
https://central.sonatype.org/articles/2018/May/04/discontinued-support-for-tlsv11-and-below/ --> https://central.sonatype.org/articles/2018/May/04/discontinued-support-for-tlsv11-and-below/ -->
<repositories> <repositories>
<repository> <repository>
<id>repo1</id> <id>repo1</id>
<url>http://repo1.maven.org/maven2</url><!-- intentionally http (see above) --> <url>http://repo1.maven.org/maven2</url><!-- intentionally http (see above) -->
</repository> </repository>
</repositories> </repositories>
<pluginRepositories> <pluginRepositories>
<pluginRepository> <pluginRepository>
<id>repo1</id> <id>repo1</id>
<url>http://repo1.maven.org/maven2</url><!-- intentionally http (see above) --> <url>http://repo1.maven.org/maven2</url><!-- intentionally http (see above) -->
</pluginRepository> </pluginRepository>
</pluginRepositories> </pluginRepositories>
</profile> </profile>
<profile> <profile>
<id>hibernate5</id> <id>hibernate5</id>
@@ -389,11 +401,11 @@
<artifactId>hibernate-core</artifactId> <artifactId>hibernate-core</artifactId>
<version>5.0.7.Final</version> <version>5.0.7.Final</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>javax.el</groupId> <groupId>javax.el</groupId>
<artifactId>javax.el-api</artifactId> <artifactId>javax.el-api</artifactId>
<version>3.0.0</version> <version>3.0.0</version>
</dependency> </dependency>
</dependencies> </dependencies>
</profile> </profile>
@@ -438,11 +450,11 @@
</profile> </profile>
</profiles> </profiles>
<distributionManagement> <distributionManagement>
<repository> <repository>
<id>github</id> <id>github</id>
<name>GitHub Packages</name> <name>GitHub Packages</name>
<url>https://maven.pkg.github.com/frohoff/ysoserial</url> <url>https://maven.pkg.github.com/frohoff/ysoserial</url>
</repository> </repository>
</distributionManagement> </distributionManagement>
</project> </project>