Types & classes — github.com/Y4er/ysoserial

CodeHub MCPcopy Create free account

hub / github.com/Y4er/ysoserial / types & classes

Types & classes130 in github.com/Y4er/ysoserial

⨍ Functions 435◇ Types & classes 130

ClassAspectJWeaver

src/main/java/ysoserial/payloads/AspectJWeaver.java:41

ClassBeanShell1

Credits: Alvaro Munoz (@pwntester) and Christian Schneider (@cschneider4711)

src/main/java/ysoserial/payloads/BeanShell1.java:22

InterfaceBeforeAfterCallback

src/test/java/ysoserial/test/util/Callables.java:10

com.sun.jndi.rmi.registry.RegistryContext->lookup com.mchange.v2.naming.ReferenceIndirector$ReferenceSerialized->getObject com.mchange.v2.c3p0.impl.Po

src/main/java/ysoserial/payloads/C3P0.java:36

src/test/java/ysoserial/test/util/Callables.java:5

src/main/java/ysoserial/payloads/Ceylon.java:9

src/test/java/ysoserial/CiTest.java:5

ClassClassFiles

src/main/java/ysoserial/payloads/util/ClassFiles.java:7

ClassClassLoaderTemplate

src/main/java/ysoserial/payloads/templates/ClassLoaderTemplate.java:10

src/main/java/ysoserial/payloads/Click1.java:47

src/main/java/ysoserial/payloads/Clojure.java:27

ClassCommandExecTest

src/test/java/ysoserial/test/payloads/CommandExecTest.java:12

ClassCommandTemplate

src/main/java/ysoserial/payloads/templates/CommandTemplate.java:5

ClassCommonsBeanutils1

src/main/java/ysoserial/payloads/CommonsBeanutils1.java:13

ClassCommonsBeanutils183NOCC

src/main/java/ysoserial/payloads/CommonsBeanutils183NOCC.java:18

ClassCommonsBeanutils192NOCC

src/main/java/ysoserial/payloads/CommonsBeanutils192NOCC.java:18

ClassCommonsBeanutils192WithDualTreeBidiMap

src/main/java/ysoserial/payloads/CommonsBeanutils192WithDualTreeBidiMap.java:16

ClassCommonsCollections1

src/main/java/ysoserial/payloads/CommonsCollections1.java:42

ClassCommonsCollections12

src/main/java/ysoserial/payloads/CommonsCollections12.java:20

ClassCommonsCollections2

src/main/java/ysoserial/payloads/CommonsCollections2.java:26

ClassCommonsCollections3

src/main/java/ysoserial/payloads/CommonsCollections3.java:26

ClassCommonsCollections4

src/main/java/ysoserial/payloads/CommonsCollections4.java:23

ClassCommonsCollections5

src/main/java/ysoserial/payloads/CommonsCollections5.java:47

ClassCommonsCollections6

src/main/java/ysoserial/payloads/CommonsCollections6.java:36

ClassCommonsCollections7

src/main/java/ysoserial/payloads/CommonsCollections7.java:34

ClassCommonsCollections8

src/main/java/ysoserial/payloads/CommonsCollections8.java:28

ClassConnectionHandlerContextImpl

src/main/java/ysoserial/exploit/JBoss.java:292

ClassConnectionProviderContextImpl

src/main/java/ysoserial/exploit/JBoss.java:328

ClassConsoleLogHandler

src/main/java/ysoserial/exploit/JBoss.java:272

InterfaceCustomDeserializer

@author mbechler

src/test/java/ysoserial/test/CustomDeserializer.java:7

InterfaceCustomPayloadArgs

@author mbechler

src/test/java/ysoserial/test/CustomPayloadArgs.java:7

InterfaceCustomTest

@author mbechler

src/test/java/ysoserial/test/CustomTest.java:8

ClassDelegateSecurityManager

src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:7

ClassDeserializer

src/main/java/ysoserial/Deserializer.java:6

src/main/java/ysoserial/exploit/JRMPListener.java:281

InterfaceDynamicDependencies

@author mbechler

src/main/java/ysoserial/payloads/DynamicDependencies.java:7

ClassExecCheckingSecurityManager

src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:10

ClassExecException

src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:77

ClassExecMockPayload

src/test/java/ysoserial/test/payloads/TestHarnessTest.java:42

ClassExecMockSerializable

src/test/java/ysoserial/test/payloads/TestHarnessTest.java:54

src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:122

src/main/java/ysoserial/payloads/Fastjson1.java:13

src/main/java/ysoserial/payloads/Fastjson2.java:13

ClassFileUpload1

Gadget chain: DiskFileItem.readObject() <p> Arguments: - copyAndDelete;sourceFile;destDir - write;destDir;ascii-data - writeB64;destDir;base64-data -

src/main/java/ysoserial/payloads/FileUpload1.java:39

ClassFileUploadTest

@author mbechler

src/test/java/ysoserial/test/payloads/FileUploadTest.java:16

src/test/java/ysoserial/test/util/Files.java:5

src/main/java/ysoserial/payloads/util/Gadgets.java:201

src/main/java/ysoserial/payloads/util/Gadgets.java:37

ClassGeneratePayload

src/main/java/ysoserial/GeneratePayload.java:11

src/main/java/ysoserial/payloads/Groovy1.java:28

ClassHibernate1

org.hibernate.property.access.spi.GetterMethodImpl.get() org.hibernate.tuple.component.AbstractComponentTuplizer.getPropertyValue() org.hibernate.type

src/main/java/ysoserial/payloads/Hibernate1.java:42

ClassHibernate2

Another application filter bypass <p> Needs a getter invocation that is provided by hibernate here <p> javax.naming.InitialContext.InitialContext.look

src/main/java/ysoserial/payloads/Hibernate2.java:40

An exploitation client for JBoss AS/Wildfly JMX <p> JBoss is using a custom tunneled protocol for JMX, this is a client for this protocol. <p> This is

src/main/java/ysoserial/exploit/JBoss.java:61

ClassJBossInterceptors1

src/main/java/ysoserial/payloads/JBossInterceptors1.java:31

ClassJMXInvokeMBean

src/main/java/ysoserial/exploit/JMXInvokeMBean.java:16

ClassJRMPClassLoadingListener

JRMP listener triggering RMI remote classloading <p> Opens up an JRMP listener that will deliver a remote classpath class to the calling client. <p> M

src/main/java/ysoserial/exploit/JRMPClassLoadingListener.java:26

ClassJRMPClient

UnicastRef.newCall(RemoteObject, Operation[], int, long) DGCImpl_Stub.dirty(ObjID[], long, Lease) DGCClient$EndpointEntry.makeDirtyCall(Set<RefEntry>,

src/main/java/ysoserial/payloads/JRMPClient.java:47

ClassJRMPClient

Generic JRMP client <p> Pretty much the same thing as {@link RMIRegistryExploit} but - targeting the remote DGC (Distributed Garbage Collection, alway

src/main/java/ysoserial/exploit/JRMPClient.java:24

ClassJRMPListener

Gadget chain: UnicastRemoteObject.readObject(ObjectInputStream) line: 235 UnicastRemoteObject.reexport() line: 266 UnicastRemoteObject.exportObject(Re

src/main/java/ysoserial/payloads/JRMPListener.java:34

ClassJRMPListener

Generic JRMP listener <p> Opens up an JRMP listener that will deliver the specified payload to any client connecting to it and making a call. @author

src/main/java/ysoserial/exploit/JRMPListener.java:29

ClassJRMPReverseConnectSMTest

@author mbechler

src/test/java/ysoserial/test/payloads/JRMPReverseConnectSMTest.java:14

ClassJRMPReverseConnectTest

@author mbechler

src/test/java/ysoserial/test/payloads/JRMPReverseConnectTest.java:15

JSF view state exploit <p> Delivers a gadget payload via JSF ViewState token. <p> This will only work if ViewState encryption/mac is disabled. <p> Whi

src/main/java/ysoserial/exploit/JSF.java:33

A bit more convoluted example <p> com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl.getOutputProperties() java.lang.reflect.Method.invoke(Obj

src/main/java/ysoserial/payloads/JSON1.java:49

src/main/java/ysoserial/payloads/Jackson1.java:16

src/main/java/ysoserial/payloads/Jackson2.java:20

ClassJavaVersion

@author mbechler

src/main/java/ysoserial/payloads/util/JavaVersion.java:7

ClassJavassistWeld1

src/main/java/ysoserial/payloads/JavassistWeld1.java:31

src/main/java/ysoserial/payloads/Jdk7u21.java:55

ClassJenkinsCLI

Jenkins CLI client <p> Jenkins unfortunately is still using a custom serialization based protocol for remote communications only protected by a blackl

src/main/java/ysoserial/exploit/JenkinsCLI.java:33

ClassJenkinsListener

CVE-2016-0788 exploit (1) <p> 1. delivers a ysoserial.payloads.JRMPListener payload to jenkins via it's remoting protocol. 2. that payload causes the

src/main/java/ysoserial/exploit/JenkinsListener.java:43

ClassJenkinsReverse

CVE-2016-0788 exploit (2) <p> - Sets up a local {@link JRMPListener} - Delivers a {@link ysoserial.payloads.JRMPClient} payload via the CLI protocol t

src/main/java/ysoserial/exploit/JenkinsReverse.java:25

Credits: Alvaro Munoz (@pwntester) and Christian Schneider (@cschneider4711) <p> This version of Jython1 writes a python script on the victim machine

src/main/java/ysoserial/payloads/Jython1.java:41

Credits: Steven Seeley (@steventseeley) and Rocco Calvi (@TecR0c) Thanks to Alvaro Munoz (@pwntester) for the InvocationHandler tekniq! This version

src/main/java/ysoserial/payloads/Jython2.java:40

ClassMarshalOutputStream

src/main/java/ysoserial/exploit/JRMPClient.java:88

ClassMockELResolver

src/test/java/ysoserial/test/payloads/MyfacesTest.java:114

ClassMockRequestContext

src/test/java/ysoserial/test/payloads/MyfacesTest.java:96

ClassMozillaRhino1

src/main/java/ysoserial/payloads/MozillaRhino1.java:21

ClassMozillaRhino2

src/main/java/ysoserial/payloads/MozillaRhino2.java:49

ValueExpressionImpl.getValue(ELContext) ValueExpressionMethodExpression.getMethodExpression(ELContext) ValueExpressionMethodExpression.getMethodExpres

src/main/java/ysoserial/payloads/Myfaces1.java:40

ValueExpressionImpl.getValue(ELContext) ValueExpressionMethodExpression.getMethodExpression(ELContext) ValueExpressionMethodExpression.getMethodExpres

src/main/java/ysoserial/payloads/Myfaces2.java:30

ClassMyfacesDeserializer

need to use a custom deserializer so that the faces context gets set in the isolated class @author mbechler

src/test/java/ysoserial/test/payloads/MyfacesTest.java:49

ClassMyfacesTest

@author mbechler

src/test/java/ysoserial/test/payloads/MyfacesTest.java:32

ClassNoopMockPayload

src/test/java/ysoserial/test/payloads/TestHarnessTest.java:48

src/test/java/ysoserial/test/util/OS.java:3

InterfaceObjectPayload

src/main/java/ysoserial/payloads/ObjectPayload.java:12

ClassPayloadListener

src/test/java/ysoserial/test/payloads/PayloadsTest.java:274

ClassPayloadRunner

src/main/java/ysoserial/payloads/util/PayloadRunner.java:14

ClassPayloadsTest

src/test/java/ysoserial/test/payloads/PayloadsTest.java:51

ClassPoolSource

src/main/java/ysoserial/payloads/C3P0.java:58

ClassRMIRegistryExploit

src/main/java/ysoserial/exploit/RMIRegistryExploit.java:30

ClassRMIRegistryExploitTest

src/test/java/ysoserial/test/exploit/RMIRegistryExploitTest.java:7

ClassRMISSLClientSocketFactory

src/main/java/ysoserial/exploit/RMIRegistryExploit.java:83

TemplatesImpl.getOutputProperties() NativeMethodAccessorImpl.invoke0(Method, Object, Object[]) NativeMethodAccessorImpl.invoke(Object, Object[]) Deleg

src/main/java/ysoserial/payloads/ROME.java:28

ClassReflections

src/main/java/ysoserial/payloads/util/Reflections.java:11

InterfaceReleaseableObjectPayload

@author mbechler

src/main/java/ysoserial/payloads/ReleaseableObjectPayload.java:7

ClassRemoteClassLoadingTest

@author mbechler

src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:21

ClassRemoteClassLoadingTestCallable

src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:64

ClassRuoYiInterceptor

src/main/java/ysoserial/payloads/templates/RuoYiInterceptor.java:23

ClassSerializer

src/main/java/ysoserial/Serializer.java:9

next →1–100 of 130, ranked by callers