├── .gitignore ├── LICENSE ├── ReadMe.md ├── assembly.xml ├── images ├── iShot_2022-06-18_20.38.31.png ├── iShot_2022-07-25_20.44.35.png ├── iShot_2022-08-04_15.52.15.png ├── iShot_2022-08-05_10.02.11.png ├── iShot_2022-08-12_18.19.48.png ├── iShot_2022-08-23_18.05.42.png ├── image-20220618204249501.png ├── image-20220618204632444.png ├── image-20220618205022904.png ├── image-20220618205547397.png ├── image-20220618205828822.png ├── image-20220618211017835.png ├── image-20220618223134650.png ├── image-20220618225208015.png ├── image-20220618232343999.png ├── image-20220618232717600.png ├── image-20220618233227870.png ├── image-20220619004500004.png ├── image-20220619234324295.png ├── image-20230228155632750.png └── image-20230228155643777.png ├── lib ├── javax.websocket-api-1.1.jar ├── resin.jar └── tomcat-websocket-9.0.62.jar ├── pom.xml └── src └── main └── java └── org └── su18 └── ysuserial ├── GeneratePayload.java ├── Serializer.java ├── Strings.java ├── exploit ├── JBoss.java ├── JMXInvokeMBean.java ├── JRMPClassLoadingListener.java ├── JRMPClient.java ├── JRMPListener.java ├── JSF.java ├── JenkinsCLI.java ├── JenkinsListener.java ├── JenkinsReverse.java └── RMIBindExploit.java ├── payloads ├── DynamicDependencies.java ├── ObjectPayload.java ├── ReleaseableObjectPayload.java ├── annotation │ ├── Authors.java │ └── Dependencies.java ├── config │ ├── Config.java │ ├── HookPointConfig.java │ └── MemShellPayloads.java ├── gadgets │ ├── AspectJWeaver.java │ ├── AspectJWeaver2.java │ ├── BeanShell1.java │ ├── BeanShell20b4.java │ ├── C3P0.java │ ├── C3P02.java │ ├── C3P03.java │ ├── C3P04.java │ ├── C3P092.java │ ├── Click1.java │ ├── Clojure.java │ ├── CommonsBeanutils1.java │ ├── CommonsBeanutils1183NOCC.java │ ├── CommonsBeanutils2.java │ ├── CommonsBeanutils2183NOCC.java │ ├── CommonsBeanutils3.java │ ├── CommonsBeanutils3183.java │ ├── CommonsBeanutils4.java │ ├── CommonsBeanutilsAttrCompare.java │ ├── CommonsBeanutilsAttrCompare183.java │ ├── CommonsBeanutilsObjectToStringComparator.java │ ├── CommonsBeanutilsObjectToStringComparator183.java │ ├── CommonsBeanutilsPropertySource.java │ ├── CommonsBeanutilsPropertySource183.java │ ├── CommonsCollections1.java │ ├── CommonsCollections10.java │ ├── CommonsCollections11.java │ ├── CommonsCollections12.java │ ├── CommonsCollections2.java │ ├── CommonsCollections3.java │ ├── CommonsCollections4.java │ ├── CommonsCollections5.java │ ├── CommonsCollections6.java │ ├── CommonsCollections6Lite.java │ ├── CommonsCollections7.java │ ├── CommonsCollections8.java │ ├── CommonsCollections9.java │ ├── CommonsCollectionsK1.java │ ├── CommonsCollectionsK2.java │ ├── FileUpload1.java │ ├── Groovy1.java │ ├── Hibernate1.java │ ├── Hibernate2.java │ ├── JBossInterceptors1.java │ ├── JRE8u20.java │ ├── JRE8u20_2.java │ ├── JRMPClient.java │ ├── JRMPClient_Activator.java │ ├── JRMPClient_Obj.java │ ├── JRMPListener.java │ ├── JSON1.java │ ├── JavassistWeld1.java │ ├── Jdk7u21.java │ ├── Jdk7u21variant.java │ ├── Jython1.java │ ├── MozillaRhino1.java │ ├── MozillaRhino2.java │ ├── Myfaces1.java │ ├── Myfaces2.java │ ├── ROME.java │ ├── ROME2.java │ ├── ROME3.java │ ├── SignedObject.java │ ├── Spring1.java │ ├── Spring2.java │ ├── Spring3.java │ ├── URLDNS.java │ ├── Vaadin1.java │ └── Wicket1.java ├── handle │ ├── ClassFieldHandler.java │ ├── ClassMethodHandler.java │ ├── ClassNameHandler.java │ └── GlassHandler.java ├── templates │ ├── ClassLoaderTemplate.java │ ├── DefineClassFromParameter.java │ ├── HideMemShellTemplate.java │ ├── agent │ │ ├── AgentLoaderTemplate.java │ │ ├── AgentNoFileForLinux.java │ │ ├── AgentNoFileForWindows.java │ │ └── util │ │ │ ├── ClassModifier.java │ │ │ ├── SuURLConnection.java │ │ │ └── SuURLStreamHandler.java │ ├── echo │ │ ├── AllEcho.java │ │ ├── JbossEcho.java │ │ ├── SpringEcho.java │ │ ├── Struts2Echo.java │ │ └── TomcatEcho.java │ └── memshell │ │ ├── RMIBindTemplate.java │ │ ├── jboss │ │ ├── JBFMSFromContext.java │ │ └── JBSMSFromContext.java │ │ ├── jetty │ │ ├── JFMSFromJMX.java │ │ └── JSMSFromJMX.java │ │ ├── resin │ │ ├── RFMSFromThread.java │ │ └── RSMSFromThread.java │ │ ├── spring │ │ ├── SpringControllerMS.java │ │ ├── SpringInterceptorMS.java │ │ └── SpringWebfluxMS.java │ │ ├── struts2 │ │ └── Struts2ActionMS.java │ │ ├── tomcat │ │ ├── TEXMSFromThread.java │ │ ├── TFMSFromJMX.java │ │ ├── TFMSFromRequest.java │ │ ├── TFMSFromThread.java │ │ ├── TLMSFromJMX.java │ │ ├── TLMSFromThread.java │ │ ├── TSMSFromJMX.java │ │ ├── TSMSFromRequest.java │ │ ├── TSMSFromThread.java │ │ ├── TUGMSFromJMX.java │ │ └── TWSMSFromThread.java │ │ └── websphere │ │ └── WSFMSFromThread.java └── util │ ├── BeanShellUtil.java │ ├── ByteUtil.java │ ├── ClassFiles.java │ ├── ClojureUtil.java │ ├── Gadgets.java │ ├── HexUtils.java │ ├── JavaVersion.java │ ├── Reflections.java │ ├── SnakeYamlUtils.java │ ├── SuClassLoader.java │ ├── TransformerUtil.java │ ├── Utils.java │ ├── dirty │ ├── DirtyDataWrapper.java │ └── RandomString.java │ └── jre │ ├── HandleContainer.java │ ├── ReferencableObject.java │ ├── Serialization.java │ ├── SerializedElement.java │ ├── TCBlockData.java │ ├── TCClassDesc.java │ ├── TCJavaObject.java │ ├── TCNull.java │ ├── TCObject.java │ ├── TCProxyClassDesc.java │ ├── TCReference.java │ ├── TCString.java │ └── Util.java └── secmgr ├── DelegateSecurityManager.java └── ExecCheckingSecurityManager.java /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/LICENSE -------------------------------------------------------------------------------- /ReadMe.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/ReadMe.md -------------------------------------------------------------------------------- /assembly.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/assembly.xml -------------------------------------------------------------------------------- /images/iShot_2022-06-18_20.38.31.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/iShot_2022-06-18_20.38.31.png -------------------------------------------------------------------------------- /images/iShot_2022-07-25_20.44.35.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/iShot_2022-07-25_20.44.35.png -------------------------------------------------------------------------------- /images/iShot_2022-08-04_15.52.15.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/iShot_2022-08-04_15.52.15.png -------------------------------------------------------------------------------- /images/iShot_2022-08-05_10.02.11.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/iShot_2022-08-05_10.02.11.png -------------------------------------------------------------------------------- /images/iShot_2022-08-12_18.19.48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/iShot_2022-08-12_18.19.48.png -------------------------------------------------------------------------------- /images/iShot_2022-08-23_18.05.42.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/iShot_2022-08-23_18.05.42.png -------------------------------------------------------------------------------- /images/image-20220618204249501.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618204249501.png -------------------------------------------------------------------------------- /images/image-20220618204632444.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618204632444.png -------------------------------------------------------------------------------- /images/image-20220618205022904.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618205022904.png -------------------------------------------------------------------------------- /images/image-20220618205547397.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618205547397.png -------------------------------------------------------------------------------- /images/image-20220618205828822.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618205828822.png -------------------------------------------------------------------------------- /images/image-20220618211017835.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618211017835.png -------------------------------------------------------------------------------- /images/image-20220618223134650.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618223134650.png -------------------------------------------------------------------------------- /images/image-20220618225208015.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618225208015.png -------------------------------------------------------------------------------- /images/image-20220618232343999.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618232343999.png -------------------------------------------------------------------------------- /images/image-20220618232717600.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618232717600.png -------------------------------------------------------------------------------- /images/image-20220618233227870.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220618233227870.png -------------------------------------------------------------------------------- /images/image-20220619004500004.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220619004500004.png -------------------------------------------------------------------------------- /images/image-20220619234324295.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20220619234324295.png -------------------------------------------------------------------------------- /images/image-20230228155632750.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20230228155632750.png -------------------------------------------------------------------------------- /images/image-20230228155643777.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/images/image-20230228155643777.png -------------------------------------------------------------------------------- /lib/javax.websocket-api-1.1.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/lib/javax.websocket-api-1.1.jar -------------------------------------------------------------------------------- /lib/resin.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/lib/resin.jar -------------------------------------------------------------------------------- /lib/tomcat-websocket-9.0.62.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/lib/tomcat-websocket-9.0.62.jar -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/pom.xml -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/GeneratePayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/GeneratePayload.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/Serializer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/Serializer.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/Strings.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JBoss.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JBoss.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JMXInvokeMBean.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JMXInvokeMBean.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JRMPClassLoadingListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JRMPClassLoadingListener.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JRMPClient.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JRMPClient.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JRMPListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JRMPListener.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JSF.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JSF.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JenkinsCLI.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JenkinsCLI.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JenkinsListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JenkinsListener.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/JenkinsReverse.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/JenkinsReverse.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/exploit/RMIBindExploit.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/exploit/RMIBindExploit.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/DynamicDependencies.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/DynamicDependencies.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/ObjectPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/ObjectPayload.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/ReleaseableObjectPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/ReleaseableObjectPayload.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/annotation/Authors.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/annotation/Authors.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/annotation/Dependencies.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/annotation/Dependencies.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/config/Config.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/config/Config.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/config/HookPointConfig.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/config/HookPointConfig.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/config/MemShellPayloads.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/config/MemShellPayloads.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/AspectJWeaver.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/AspectJWeaver.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/AspectJWeaver2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/AspectJWeaver2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/BeanShell1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/BeanShell1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/BeanShell20b4.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/BeanShell20b4.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/C3P0.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/C3P0.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/C3P02.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/C3P02.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/C3P03.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/C3P03.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/C3P04.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/C3P04.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/C3P092.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/C3P092.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Click1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Click1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Clojure.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Clojure.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils1183NOCC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils1183NOCC.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils2183NOCC.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils2183NOCC.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils3.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils3.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils3183.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils3183.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils4.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutils4.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsAttrCompare.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsAttrCompare.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsAttrCompare183.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsAttrCompare183.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsObjectToStringComparator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsObjectToStringComparator.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsObjectToStringComparator183.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsObjectToStringComparator183.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsPropertySource.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsPropertySource.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsPropertySource183.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsBeanutilsPropertySource183.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections10.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections10.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections11.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections11.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections12.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections12.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections3.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections3.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections4.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections4.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections5.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections5.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections6.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections6.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections6Lite.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections6Lite.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections7.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections7.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections8.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections8.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections9.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollections9.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollectionsK1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollectionsK1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollectionsK2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/CommonsCollectionsK2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/FileUpload1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/FileUpload1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Groovy1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Groovy1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Hibernate1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Hibernate1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Hibernate2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Hibernate2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JBossInterceptors1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JBossInterceptors1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JRE8u20.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JRE8u20.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JRE8u20_2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JRE8u20_2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPClient.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPClient.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPClient_Activator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPClient_Activator.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPClient_Obj.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPClient_Obj.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JRMPListener.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JSON1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JSON1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/JavassistWeld1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/JavassistWeld1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Jdk7u21.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Jdk7u21.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Jdk7u21variant.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Jdk7u21variant.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Jython1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Jython1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/MozillaRhino1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/MozillaRhino1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/MozillaRhino2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/MozillaRhino2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Myfaces1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Myfaces1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Myfaces2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Myfaces2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/ROME.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/ROME.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/ROME2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/ROME2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/ROME3.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/ROME3.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/SignedObject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/SignedObject.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Spring1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Spring1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Spring2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Spring2.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Spring3.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Spring3.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/URLDNS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/URLDNS.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Vaadin1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Vaadin1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/gadgets/Wicket1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/gadgets/Wicket1.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/handle/ClassFieldHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/handle/ClassFieldHandler.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/handle/ClassMethodHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/handle/ClassMethodHandler.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/handle/ClassNameHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/handle/ClassNameHandler.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/handle/GlassHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/handle/GlassHandler.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/ClassLoaderTemplate.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/ClassLoaderTemplate.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/DefineClassFromParameter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/DefineClassFromParameter.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/HideMemShellTemplate.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/HideMemShellTemplate.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/agent/AgentLoaderTemplate.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/agent/AgentLoaderTemplate.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/agent/AgentNoFileForLinux.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/agent/AgentNoFileForLinux.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/agent/AgentNoFileForWindows.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/agent/AgentNoFileForWindows.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/agent/util/ClassModifier.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/agent/util/ClassModifier.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/agent/util/SuURLConnection.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/agent/util/SuURLConnection.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/agent/util/SuURLStreamHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/agent/util/SuURLStreamHandler.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/echo/AllEcho.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/echo/AllEcho.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/echo/JbossEcho.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/echo/JbossEcho.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/echo/SpringEcho.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/echo/SpringEcho.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/echo/Struts2Echo.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/echo/Struts2Echo.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/echo/TomcatEcho.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/echo/TomcatEcho.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/RMIBindTemplate.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/RMIBindTemplate.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/jboss/JBFMSFromContext.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/jboss/JBFMSFromContext.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/jboss/JBSMSFromContext.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/jboss/JBSMSFromContext.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/jetty/JFMSFromJMX.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/jetty/JFMSFromJMX.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/jetty/JSMSFromJMX.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/jetty/JSMSFromJMX.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/resin/RFMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/resin/RFMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/resin/RSMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/resin/RSMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/spring/SpringControllerMS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/spring/SpringControllerMS.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/spring/SpringInterceptorMS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/spring/SpringInterceptorMS.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/spring/SpringWebfluxMS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/spring/SpringWebfluxMS.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/struts2/Struts2ActionMS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/struts2/Struts2ActionMS.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TEXMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TEXMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TFMSFromJMX.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TFMSFromJMX.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TFMSFromRequest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TFMSFromRequest.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TFMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TFMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TLMSFromJMX.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TLMSFromJMX.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TLMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TLMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TSMSFromJMX.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TSMSFromJMX.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TSMSFromRequest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TSMSFromRequest.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TSMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TSMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TUGMSFromJMX.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TUGMSFromJMX.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TWSMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/tomcat/TWSMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/templates/memshell/websphere/WSFMSFromThread.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/templates/memshell/websphere/WSFMSFromThread.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/BeanShellUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/BeanShellUtil.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/ByteUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/ByteUtil.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/ClassFiles.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/ClassFiles.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/ClojureUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/ClojureUtil.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/Gadgets.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/Gadgets.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/HexUtils.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/HexUtils.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/JavaVersion.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/JavaVersion.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/Reflections.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/Reflections.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/SnakeYamlUtils.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/SnakeYamlUtils.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/SuClassLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/SuClassLoader.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/TransformerUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/TransformerUtil.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/Utils.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/Utils.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/dirty/DirtyDataWrapper.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/dirty/DirtyDataWrapper.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/dirty/RandomString.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/dirty/RandomString.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/HandleContainer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/HandleContainer.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/ReferencableObject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/ReferencableObject.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/Serialization.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/Serialization.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/SerializedElement.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/SerializedElement.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCBlockData.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCBlockData.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCClassDesc.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCClassDesc.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCJavaObject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCJavaObject.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCNull.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCNull.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCObject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCObject.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCProxyClassDesc.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCProxyClassDesc.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCReference.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCReference.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/TCString.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/TCString.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/payloads/util/jre/Util.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/payloads/util/jre/Util.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/secmgr/DelegateSecurityManager.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/secmgr/DelegateSecurityManager.java -------------------------------------------------------------------------------- /src/main/java/org/su18/ysuserial/secmgr/ExecCheckingSecurityManager.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rabbitmask/ysuserial/HEAD/src/main/java/org/su18/ysuserial/secmgr/ExecCheckingSecurityManager.java --------------------------------------------------------------------------------