Commit Graph

Select branches

Hide Pull Requests

escape_error_test

fix_assembly

fix_jk6

gh-actions

jdk6_jdk9

master

multiarg

newgadgets

#100

#101

#101

#103

#104

#106

#110

#111

#112

#113

#114

#115

#116

#117

#119

#12

#12

#121

#121

#123

#125

#127

#129

#129

#13

#130

#131

#133

#133

#134

#134

#135

#137

#138

#139

#14

#14

#141

#142

#143

#144

#145

#148

#149

#150

#151

#153

#153

#154

#157

#158

#159

#159

#16

#162

#162

#163

#164

#165

#166

#167

#167

#168

#169

#169

#170

#172

#172

#173

#177

#177

#180

#184

#184

#187

#188

#189

#189

#19

#190

#191

#192

#192

#193

#194

#197

#198

#20

#200

#200

#206

#21

#211

#212

#215

#219

#219

#222

#223

#234

#26

#29

#3

#3

#31

#31

#34

#4

#41

#41

#42

#42

#44

#45

#45

#47

#47

#48

#48

#49

#5

#5

#50

#51

#52

#53

#55

#58

#58

#60

#60

#61

#61

#66

#67

#68

#70

#72

#73

#74

#74

#76

#81

#83

#88

#91

#92

#96

#96

#98

#99

#99

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

vtest.renamed.release

vtest.the.release

vtest.the.releases

vtesting.a.fix

Mono Color

• 55800d1e3a Update README.md to reflect additional payloads Boy Baukema 2017-08-10 11:10:39 +02:00
• 35bce8fe45 Merge pull request #68 from JackOfMostTrades/clojure-gadget Chris Frohoff 2017-07-19 10:38:12 -07:00
• 4cb0a5a17a Add a gadget chain for exploiting the presence of clojure. Ian Haken 2017-07-08 09:39:07 -07:00
• ca38b73711 Merge pull request #67 from h3xstream/master Chris Frohoff 2017-06-09 10:15:14 -07:00
• f379338272 URLDNS: Small fix to avoid DNS resolution while generating the payload Philippe Arteau 2017-05-23 17:45:04 -04:00
• 5bd2ced110 Merge pull request #66 from gebl/master Chris Frohoff 2017-03-26 19:19:56 -07:00
• 12a9f56d01 Add URLDNS gadget, that uses the argument as a URL to trigger a DNS lookup. Gabriel Lawrence 2017-03-27 01:34:28 +00:00
• ad26e2bd46 links to jitpack jars, note about release removal, build instructions Chris Frohoff 2016-10-19 11:33:38 -07:00
• 8ad9b583a6 Updated payload args in FileUploadTest to match what production code is looking for; Added Intellij project files to .gitignore Skylar 2016-08-14 19:52:32 -05:00
• d143b8cbfb Merge pull request #52 from matthiaskaiser/master Chris Frohoff 2016-07-29 09:28:06 -07:00
• 436d2040e4 Merge branch 'master' of https://github.com/frohoff/ysoserial Matthias Kaiser 2016-07-29 12:39:26 +02:00
• a62a266df5 Updated names Matthias Kaiser 2016-07-29 12:36:02 +02:00
• bbebd8bd64 Merge pull request #53 from jacob-baines/fileupload2 Chris Frohoff 2016-07-28 10:06:11 -07:00
• d8bef9642a Rename FileUpload2 to Wicket1 Jacob Baines 2016-07-28 09:03:05 -04:00
• 2e6f61c039 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. Matthias Kaiser 2016-07-26 17:11:11 +02:00
• 0f9526ff24 Adding a Javassist/Weld/JBossInterceptor gadgets to ysoserial. Matthias Kaiser 2016-07-26 16:42:46 +02:00
• 8698844034 Adding a Javassist/Weld gadget to ysoserial. Matthias Kaiser 2016-07-26 16:15:42 +02:00
• 2ae8b051a5 Adding the RhinoGadget to ysoserial. Matthias Kaiser 2016-07-26 14:48:09 +02:00
• 80b21d9cb3 Merge pull request #51 from jacob-baines/jython_java6 Chris Frohoff 2016-07-25 16:57:38 -07:00
• 0fb8d8d222 Don't use API introduced in Java 7 Jacob Baines 2016-07-25 18:09:31 -04:00
• 6f3dd217c7 Created FileUpload2 based on Apache Wicket's version of DiskFileItem. Also changed FileUpload1 to support Windows filepaths Jacob Baines 2016-07-25 14:15:39 -04:00
• 74254d2cc7 Merge pull request #44 from mbechler/master Chris Frohoff 2016-07-25 09:38:03 -07:00
• 09603ef5ed Merge pull request #49 from jacob-baines/jython-general Chris Frohoff 2016-07-25 09:36:16 -07:00
• e90e8725b4 Merge pull request #50 from matthiaskaiser/master Chris Frohoff 2016-07-25 09:35:16 -07:00
• 39ea0590fb Adding general CC gadget that works with IBM and Oracle JRE matthiaskaiser 2016-07-04 16:32:51 +02:00
• f924363559 A more generalized Jython1 use case Jacob Baines 2016-06-26 20:38:25 -04:00
• c61106f69f Some minor improvements - Let JRMPListener dump the object id used in DGC calls. - Allow full specification of JDNI name in Hibernate2, accordingly fix JRMPReverseConnectTest - Randomize object id in JRMLClient payload for increased reliability (and side channel) mbechler 2016-05-14 10:29:39 +02:00
• c7a3f8c65c Fix tests - extract version checking code - add version check for AnnotationInvocationHandler usage - add java.rmi.server.useCodebaseOnly=false to surefire system properties mbechler 2016-05-14 10:04:56 +02:00
• 8adc168dc0 Merge pull request #34 from gitter-badger/gitter-badge Chris Frohoff 2016-03-18 08:53:00 -07:00
• e8b739c383 Add Gitter badge The Gitter Badger 2016-03-18 15:51:49 +00:00
• 1bd7e9e488 disabling jython test Chris Frohoff 2016-03-13 17:03:52 -07:00
• 0b402d2bee Merge pull request #29 from pwntester/jython_gadget Chris Frohoff 2016-03-13 16:42:51 -07:00
• 097179b703 Rebased Jython Gadget Alvaro Muñoz 2016-03-14 00:30:31 +01:00
• 2650ab6093 skip cc5 test for now Chris Frohoff 2016-03-13 12:28:06 -07:00
• 3be56c7ac8 Merge pull request #26 from jasinner/AnnotationInvocationHandler Chris Frohoff 2016-03-13 12:19:54 -07:00
• 4b798a1d6e Merge pull request #20 from mbechler/cleanup Chris Frohoff 2016-03-13 12:12:41 -07:00
• 3230c080ff Add rome (RSS/Atom library) gadget chain. Add exploit and test code for JRMP reverse connect remote classloading. mbechler 2016-03-12 17:35:17 +01:00
• 5d9e0e9eca workaround for issue 17 Jason Shepherd 2016-03-11 10:56:16 +10:00
• bdb1e0db3d Add some tooling docs mbechler 2016-03-09 15:30:04 +01:00
• 6873a43409 Drop empty javadocs. mbechler 2016-03-09 14:11:15 +01:00
• c86d134f14 Merge pull request #21 from nikaiw/master Chris Frohoff 2016-03-07 10:39:45 -08:00
• acc264faa7 Fix method name in the usage part of the documentation nk 2016-03-07 18:05:46 +01:00
• 2d6962162b Made json-lib gadget chain more reliable. mbechler 2016-03-07 11:35:52 +01:00
• 3273b27c75 JRMPListener Java6 compatiblity. mbechler 2016-03-06 19:32:08 +01:00
• eabfce0dc2 Disable json-lib test as the gadget chain depends on the HashMap ordering which seemingly is different across JDK versions. mbechler 2016-03-06 19:24:32 +01:00
• b814712e19 Fix HashMap creation for java7. mbechler 2016-03-06 18:53:39 +01:00
• 4795bce7ff Add hook for payload generators to modify the object before finalizers are called (to fix the fileupload test and also to prevent exploiting yourself, also may be useful for finalizer based gadgets) mbechler 2016-03-06 15:50:59 +01:00
• 5fc361df4f A final touch mbechler 2016-03-06 12:47:44 +01:00
• 8beeec6594 Add JBoss/Wildfly exploitation client. mbechler 2016-03-06 12:38:18 +01:00
• 37dbcf57e4 Fix fileupload test reliability mbechler 2016-03-06 12:37:49 +01:00
• c94779b83d Add jenkins client and exploits (CVE-2016-0788) mbechler 2016-03-06 12:27:37 +01:00
• 6bb0d80aa0 Some cleanup of myfaces gadgets. mbechler 2016-03-05 20:01:07 +01:00
• 7879428d9c Add MyFaces gadgets. Add ability to provide a custom deserializer (needed for setting up the faces context) mbechler 2016-03-05 19:57:38 +01:00
• d6658809cf Move payload annotation to annotation package. mbechler 2016-03-05 17:28:44 +01:00
• bba1460cb6 Remove wrong copyright notices, again mbechler 2016-03-05 17:27:44 +01:00
• c8e82237fe Add C3P0 gadget chain. Add remote classloading test harness. mbechler 2016-03-05 17:23:34 +01:00
• 20580e918d Add commons fileupload file operation gadget chain. mbechler 2016-03-05 16:43:14 +01:00
• 6f9c8dca2b Rename beanutils gadget mbechler 2016-03-05 16:24:44 +01:00
• 4130fc5545 Add spring variant and json-lib gadget chain. mbechler 2016-03-05 16:20:13 +01:00
• bd21624609 Add hibernate gadget chains. Remove missed copyright notices. mbechler 2016-03-05 16:15:54 +01:00
• 436e831cbd Add JRMP utilties, gadgets and test code. mbechler 2016-03-05 15:42:44 +01:00
• 8dfce7ed73 Add custom test infrastructure. mbechler 2016-03-05 14:48:02 +01:00
• 7157d5e297 Some basic cleanups (warnings, imports) Add controlled instantiation constructor utility. mbechler 2016-03-05 14:11:45 +01:00
• a69ce66e69 Add ability to generate TemplatesImpl payloads with an actual non-shaded xalan implementation. mbechler 2016-03-05 13:50:34 +01:00
• 48338fb6e7 Merge pull request #4 from ltearno/patch-1 Chris Frohoff 2016-03-04 01:07:00 -08:00
• 39574362ad Merge pull request #13 from pwntester/master Chris Frohoff 2016-02-27 16:09:01 -08:00
• c616a23428 BeanShell exploit Alvaro Muñoz 2016-02-27 23:50:11 +01:00
• adb16e1e09 bump version to next snapshot Chris Frohoff 2016-02-25 07:47:28 -08:00
• 87c91b27a0 added beanutils gadget chain, release 0.0.4 v0.0.4 Chris Frohoff 2016-02-24 14:26:00 -08:00
• 2c79998485 remove cruft Chris Frohoff 2016-02-24 13:57:41 -08:00
• ed18a40523 updated README v0.0.3 Chris Frohoff 2016-01-26 17:27:19 -08:00
• 0e99a197c6 jre7u21 gadget chain, refactors Chris Frohoff 2016-01-26 17:18:32 -08:00
• 5b4b8a3320 Call setAccessible only once Arnaud Tournier 2015-12-11 16:32:32 +01:00
• 4f00182efc Update README.md Chris Frohoff 2015-11-04 13:16:02 -08:00
• 79219f7792 fixed spring, commons-collections4 payloads, made test cases more robust v0.0.2 Chris Frohoff 2015-01-29 21:33:26 -08:00
• 1c82fda4e4 readme updates Chris Frohoff 2015-01-29 08:14:15 -08:00
• f3e0ca6456 removed openjdk8 from travis config Chris Frohoff 2015-01-29 08:14:04 -08:00
• dbdce11f76 clear checks between tets, just in case Chris Frohoff 2015-01-29 07:52:17 -08:00
• cdfaff46cd next snapshot Chris Frohoff 2015-01-29 07:50:22 -08:00
• 58f3804a39 added link to talk slides Chris Frohoff 2015-01-28 11:58:14 -08:00
• e6565b61e3 init-commit v0.0.1 Chris Frohoff 2015-01-28 11:31:57 -08:00