├── .gitignore ├── FastjsonExploit.iml ├── README.md ├── pom.xml └── src ├── .DS_Store └── main ├── java ├── FastjsonExploit.java ├── META-INF │ └── MANIFEST.MF ├── gadget │ ├── BasicDataSource1.java │ ├── Default.java │ ├── Gadget.java │ ├── JndiDataSourceFactory1.java │ ├── TemplatesImpl1.java │ └── TemplatesImpl2.java ├── payloads │ ├── BasicDataSource1.java │ ├── BasicDataSource2.java │ ├── JdbcRowSetImpl1.java │ ├── JdbcRowSetImpl2.java │ ├── JdbcRowSetImpl3.java │ ├── JdbcRowSetImpl4.java │ ├── JdbcRowSetImpl5.java │ ├── JndiDataSourceFactory1.java │ ├── ObjectPayload.java │ ├── SimpleJndiBeanFactory1.java │ ├── TemplatesImpl1.java │ ├── TemplatesImpl2.java │ └── annotation │ │ ├── Dependencies.java │ │ ├── PayloadType.java │ │ └── VulVersion.java ├── server │ ├── CodebaseServer.java │ ├── HttpFileHandler.java │ ├── LDAPServer.java │ └── RMIServer.java └── util │ ├── AddressParser.java │ ├── Alert.java │ ├── Common.java │ ├── Exploit.java │ ├── JarFileReader.java │ ├── Strings.java │ └── Util.java └── resources ├── BasicDataSource1.tpl ├── BasicDataSource2.tpl ├── JdbcRowSetImpl1.tpl ├── JdbcRowSetImpl2.tpl ├── JdbcRowSetImpl3.tpl ├── JdbcRowSetImpl4.tpl ├── JdbcRowSetImpl5.tpl ├── JndiDataSourceFactory1.tpl ├── SimpleJndiBeanFactory1.tpl ├── TemplatesImpl1.tpl ├── TemplatesImpl2.tpl └── banner /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/.gitignore -------------------------------------------------------------------------------- /FastjsonExploit.iml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/FastjsonExploit.iml -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/README.md -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/pom.xml -------------------------------------------------------------------------------- /src/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/.DS_Store -------------------------------------------------------------------------------- /src/main/java/FastjsonExploit.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/FastjsonExploit.java -------------------------------------------------------------------------------- /src/main/java/META-INF/MANIFEST.MF: -------------------------------------------------------------------------------- 1 | Manifest-Version: 1.0 2 | Main-Class: FastjsonExploit 3 | 4 | -------------------------------------------------------------------------------- /src/main/java/gadget/BasicDataSource1.java: -------------------------------------------------------------------------------- 1 | package gadget; 2 | 3 | public class BasicDataSource1 { 4 | } 5 | -------------------------------------------------------------------------------- /src/main/java/gadget/Default.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/gadget/Default.java -------------------------------------------------------------------------------- /src/main/java/gadget/Gadget.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/gadget/Gadget.java -------------------------------------------------------------------------------- /src/main/java/gadget/JndiDataSourceFactory1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/gadget/JndiDataSourceFactory1.java -------------------------------------------------------------------------------- /src/main/java/gadget/TemplatesImpl1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/gadget/TemplatesImpl1.java -------------------------------------------------------------------------------- /src/main/java/gadget/TemplatesImpl2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/gadget/TemplatesImpl2.java -------------------------------------------------------------------------------- /src/main/java/payloads/BasicDataSource1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/BasicDataSource1.java -------------------------------------------------------------------------------- /src/main/java/payloads/BasicDataSource2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/BasicDataSource2.java -------------------------------------------------------------------------------- /src/main/java/payloads/JdbcRowSetImpl1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/JdbcRowSetImpl1.java -------------------------------------------------------------------------------- /src/main/java/payloads/JdbcRowSetImpl2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/JdbcRowSetImpl2.java -------------------------------------------------------------------------------- /src/main/java/payloads/JdbcRowSetImpl3.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/JdbcRowSetImpl3.java -------------------------------------------------------------------------------- /src/main/java/payloads/JdbcRowSetImpl4.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/JdbcRowSetImpl4.java -------------------------------------------------------------------------------- /src/main/java/payloads/JdbcRowSetImpl5.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/JdbcRowSetImpl5.java -------------------------------------------------------------------------------- /src/main/java/payloads/JndiDataSourceFactory1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/JndiDataSourceFactory1.java -------------------------------------------------------------------------------- /src/main/java/payloads/ObjectPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/ObjectPayload.java -------------------------------------------------------------------------------- /src/main/java/payloads/SimpleJndiBeanFactory1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/SimpleJndiBeanFactory1.java -------------------------------------------------------------------------------- /src/main/java/payloads/TemplatesImpl1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/TemplatesImpl1.java -------------------------------------------------------------------------------- /src/main/java/payloads/TemplatesImpl2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/TemplatesImpl2.java -------------------------------------------------------------------------------- /src/main/java/payloads/annotation/Dependencies.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/annotation/Dependencies.java -------------------------------------------------------------------------------- /src/main/java/payloads/annotation/PayloadType.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/annotation/PayloadType.java -------------------------------------------------------------------------------- /src/main/java/payloads/annotation/VulVersion.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/payloads/annotation/VulVersion.java -------------------------------------------------------------------------------- /src/main/java/server/CodebaseServer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/server/CodebaseServer.java -------------------------------------------------------------------------------- /src/main/java/server/HttpFileHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/server/HttpFileHandler.java -------------------------------------------------------------------------------- /src/main/java/server/LDAPServer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/server/LDAPServer.java -------------------------------------------------------------------------------- /src/main/java/server/RMIServer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/server/RMIServer.java -------------------------------------------------------------------------------- /src/main/java/util/AddressParser.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/AddressParser.java -------------------------------------------------------------------------------- /src/main/java/util/Alert.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/Alert.java -------------------------------------------------------------------------------- /src/main/java/util/Common.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/Common.java -------------------------------------------------------------------------------- /src/main/java/util/Exploit.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/Exploit.java -------------------------------------------------------------------------------- /src/main/java/util/JarFileReader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/JarFileReader.java -------------------------------------------------------------------------------- /src/main/java/util/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/Strings.java -------------------------------------------------------------------------------- /src/main/java/util/Util.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/java/util/Util.java -------------------------------------------------------------------------------- /src/main/resources/BasicDataSource1.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/BasicDataSource1.tpl -------------------------------------------------------------------------------- /src/main/resources/BasicDataSource2.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/BasicDataSource2.tpl -------------------------------------------------------------------------------- /src/main/resources/JdbcRowSetImpl1.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/JdbcRowSetImpl1.tpl -------------------------------------------------------------------------------- /src/main/resources/JdbcRowSetImpl2.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/JdbcRowSetImpl2.tpl -------------------------------------------------------------------------------- /src/main/resources/JdbcRowSetImpl3.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/JdbcRowSetImpl3.tpl -------------------------------------------------------------------------------- /src/main/resources/JdbcRowSetImpl4.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/JdbcRowSetImpl4.tpl -------------------------------------------------------------------------------- /src/main/resources/JdbcRowSetImpl5.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/JdbcRowSetImpl5.tpl -------------------------------------------------------------------------------- /src/main/resources/JndiDataSourceFactory1.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/JndiDataSourceFactory1.tpl -------------------------------------------------------------------------------- /src/main/resources/SimpleJndiBeanFactory1.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/SimpleJndiBeanFactory1.tpl -------------------------------------------------------------------------------- /src/main/resources/TemplatesImpl1.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/TemplatesImpl1.tpl -------------------------------------------------------------------------------- /src/main/resources/TemplatesImpl2.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/TemplatesImpl2.tpl -------------------------------------------------------------------------------- /src/main/resources/banner: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/c0ny1/FastjsonExploit/HEAD/src/main/resources/banner --------------------------------------------------------------------------------