├── .editorconfig ├── .gitignore ├── .travis.yml ├── DISCLAIMER.txt ├── Dockerfile ├── LICENSE.txt ├── README.md ├── appveyor.yml ├── assembly.xml ├── pom.xml ├── src ├── main │ └── java │ │ └── ysoserial │ │ ├── Deserializer.java │ │ ├── GadgetsHelper.java │ │ ├── GeneratePayload.java │ │ ├── Serializer.java │ │ ├── Strings.java │ │ ├── SuidLookup.java │ │ ├── exploit │ │ ├── JBoss.java │ │ ├── JMXInvokeMBean.java │ │ ├── JRMPClassLoadingListener.java │ │ ├── JRMPClient.java │ │ ├── JRMPListener.java │ │ ├── JSF.java │ │ ├── JenkinsCLI.java │ │ ├── JenkinsListener.java │ │ ├── JenkinsReverse.java │ │ ├── RMIRegistryExploit.java │ │ ├── RMIRegistryExploit2.java │ │ ├── TomcatSessionClusterExploit.java │ │ └── tomcat │ │ │ ├── ChannelData.java │ │ │ ├── ChannelMessage.java │ │ │ ├── ClusterMessage.java │ │ │ ├── ClusterMessageBase.java │ │ │ ├── Member.java │ │ │ ├── MemberImpl.java │ │ │ ├── SessionMessage.java │ │ │ ├── SessionMessageImpl.java │ │ │ ├── UUIDGenerator.java │ │ │ └── XByteBuffer.java │ │ ├── payloads │ │ ├── BeanShell1.java │ │ ├── C3P0.java │ │ ├── CheckClassURLDNS.java │ │ ├── Clojure.java │ │ ├── CommonsBeanutils1.java │ │ ├── CommonsCollections1.java │ │ ├── CommonsCollections10.java │ │ ├── CommonsCollections10ForLoadJar.java │ │ ├── CommonsCollections11.java │ │ ├── CommonsCollections11ForTomcatEchoInject.java │ │ ├── CommonsCollections11ForTomcatShellInject.java │ │ ├── CommonsCollections12.java │ │ ├── CommonsCollections2.java │ │ ├── CommonsCollections2ForTomcatEchoInject.java │ │ ├── CommonsCollections2ForTomcatShellInject.java │ │ ├── CommonsCollections3.java │ │ ├── CommonsCollections3ForLoadJar.java │ │ ├── CommonsCollections3ForTomcatEchoInject.java │ │ ├── CommonsCollections3ForTomcatShellInject.java │ │ ├── CommonsCollections4.java │ │ ├── CommonsCollections4ForTomcatEchoInject.java │ │ ├── CommonsCollections4ForTomcatShellInject.java │ │ ├── CommonsCollections5.java │ │ ├── CommonsCollections5ForLoadJar.java │ │ ├── CommonsCollections6.java │ │ ├── CommonsCollections6ForLoadJar.java │ │ ├── CommonsCollections7.java │ │ ├── CommonsCollections8.java │ │ ├── CommonsCollections9.java │ │ ├── DynamicDependencies.java │ │ ├── FileUpload1.java │ │ ├── Groovy1.java │ │ ├── Hibernate1.java │ │ ├── Hibernate2.java │ │ ├── JBossInterceptors1.java │ │ ├── JRMPClient.java │ │ ├── JRMPClient1.java │ │ ├── JRMPListener.java │ │ ├── JSON1.java │ │ ├── JavassistWeld1.java │ │ ├── Jdk7u21.java │ │ ├── Jdk8u20.java │ │ ├── Jython1.java │ │ ├── MozillaRhino1.java │ │ ├── MozillaRhino2.java │ │ ├── Myfaces1.java │ │ ├── Myfaces2.java │ │ ├── ObjectPayload.java │ │ ├── ROME.java │ │ ├── ReleaseableObjectPayload.java │ │ ├── Spring1.java │ │ ├── Spring2.java │ │ ├── TomcatEchoInject.java │ │ ├── TomcatShellInject.java │ │ ├── URLDNS.java │ │ ├── Vaadin1.java │ │ ├── Wicket1.java │ │ ├── annotation │ │ │ ├── Authors.java │ │ │ ├── Dependencies.java │ │ │ └── PayloadTest.java │ │ └── util │ │ │ ├── ClassFiles.java │ │ │ ├── Converter.java │ │ │ ├── Gadgets.java │ │ │ ├── JavaVersion.java │ │ │ ├── PayloadRunner.java │ │ │ └── Reflections.java │ │ └── secmgr │ │ ├── DelegateSecurityManager.java │ │ └── ExecCheckingSecurityManager.java ├── resources │ ├── R-命令执行-绕过jsm.java │ ├── R-命令执行.java │ ├── R3读文件.java │ └── R4-枚举目录.java └── test │ └── java │ └── ysoserial │ ├── CiTest.java │ └── test │ ├── CustomDeserializer.java │ ├── CustomPayloadArgs.java │ ├── CustomTest.java │ ├── WrappedTest.java │ ├── exploit │ └── RMIRegistryExploitTest.java │ ├── payloads │ ├── CommandExecTest.java │ ├── FileUploadTest.java │ ├── JRMPReverseConnectSMTest.java │ ├── JRMPReverseConnectTest.java │ ├── MyfacesTest.java │ ├── PayloadsTest.java │ ├── RemoteClassLoadingTest.java │ └── TestHarnessTest.java │ └── util │ ├── Callables.java │ ├── Files.java │ ├── OS.java │ └── Throwables.java └── ysoserial.png /.editorconfig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/.editorconfig -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/.gitignore -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/.travis.yml -------------------------------------------------------------------------------- /DISCLAIMER.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/DISCLAIMER.txt -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/LICENSE.txt -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/README.md -------------------------------------------------------------------------------- /appveyor.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/appveyor.yml -------------------------------------------------------------------------------- /assembly.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/assembly.xml -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/pom.xml -------------------------------------------------------------------------------- /src/main/java/ysoserial/Deserializer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/Deserializer.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/GadgetsHelper.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/GadgetsHelper.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/GeneratePayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/GeneratePayload.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/Serializer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/Serializer.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/Strings.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/Strings.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/SuidLookup.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/SuidLookup.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JBoss.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JBoss.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JMXInvokeMBean.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JMXInvokeMBean.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JRMPClassLoadingListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JRMPClassLoadingListener.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JRMPClient.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JRMPClient.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JRMPListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JRMPListener.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JSF.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JSF.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JenkinsCLI.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JenkinsCLI.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JenkinsListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JenkinsListener.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/JenkinsReverse.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/JenkinsReverse.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/RMIRegistryExploit.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/RMIRegistryExploit.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/RMIRegistryExploit2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/RMIRegistryExploit2.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/TomcatSessionClusterExploit.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/TomcatSessionClusterExploit.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/ChannelData.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/ChannelData.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/ChannelMessage.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/ChannelMessage.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/ClusterMessage.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/ClusterMessage.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/ClusterMessageBase.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/ClusterMessageBase.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/Member.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/Member.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/MemberImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/MemberImpl.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/SessionMessage.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/SessionMessage.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/SessionMessageImpl.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/SessionMessageImpl.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/UUIDGenerator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/UUIDGenerator.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/exploit/tomcat/XByteBuffer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/exploit/tomcat/XByteBuffer.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/BeanShell1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/BeanShell1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/C3P0.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/C3P0.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CheckClassURLDNS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CheckClassURLDNS.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Clojure.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Clojure.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsBeanutils1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsBeanutils1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections10.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections10.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections10ForLoadJar.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections10ForLoadJar.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections11.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections11.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections11ForTomcatEchoInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections11ForTomcatEchoInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections11ForTomcatShellInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections11ForTomcatShellInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections12.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections12.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections2.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections2ForTomcatEchoInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections2ForTomcatEchoInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections2ForTomcatShellInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections2ForTomcatShellInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections3.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections3.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections3ForLoadJar.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections3ForLoadJar.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections3ForTomcatEchoInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections3ForTomcatEchoInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections3ForTomcatShellInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections3ForTomcatShellInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections4.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections4.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections4ForTomcatEchoInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections4ForTomcatEchoInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections4ForTomcatShellInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections4ForTomcatShellInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections5.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections5.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections5ForLoadJar.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections5ForLoadJar.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections6.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections6.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections6ForLoadJar.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections6ForLoadJar.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections7.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections7.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections8.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections8.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/CommonsCollections9.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/CommonsCollections9.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/DynamicDependencies.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/DynamicDependencies.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/FileUpload1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/FileUpload1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Groovy1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Groovy1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Hibernate1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Hibernate1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Hibernate2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Hibernate2.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/JBossInterceptors1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/JBossInterceptors1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/JRMPClient.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/JRMPClient.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/JRMPClient1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/JRMPClient1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/JRMPListener.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/JRMPListener.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/JSON1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/JSON1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/JavassistWeld1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/JavassistWeld1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Jdk7u21.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Jdk7u21.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Jdk8u20.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Jdk8u20.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Jython1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Jython1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/MozillaRhino1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/MozillaRhino1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/MozillaRhino2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/MozillaRhino2.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Myfaces1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Myfaces1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Myfaces2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Myfaces2.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/ObjectPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/ObjectPayload.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/ROME.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/ROME.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/ReleaseableObjectPayload.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/ReleaseableObjectPayload.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Spring1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Spring1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Spring2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Spring2.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/TomcatEchoInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/TomcatEchoInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/TomcatShellInject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/TomcatShellInject.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/URLDNS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/URLDNS.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Vaadin1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Vaadin1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/Wicket1.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/Wicket1.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/annotation/Authors.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/annotation/Authors.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/annotation/Dependencies.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/annotation/Dependencies.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/annotation/PayloadTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/annotation/PayloadTest.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/util/ClassFiles.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/util/ClassFiles.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/util/Converter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/util/Converter.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/util/Gadgets.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/util/Gadgets.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/util/JavaVersion.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/util/JavaVersion.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/util/PayloadRunner.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/util/PayloadRunner.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/payloads/util/Reflections.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/payloads/util/Reflections.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/secmgr/DelegateSecurityManager.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java -------------------------------------------------------------------------------- /src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java -------------------------------------------------------------------------------- /src/resources/R-命令执行-绕过jsm.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/resources/R-命令执行-绕过jsm.java -------------------------------------------------------------------------------- /src/resources/R-命令执行.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/resources/R-命令执行.java -------------------------------------------------------------------------------- /src/resources/R3读文件.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/resources/R3读文件.java -------------------------------------------------------------------------------- /src/resources/R4-枚举目录.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/resources/R4-枚举目录.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/CiTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/CiTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/CustomDeserializer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/CustomDeserializer.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/CustomPayloadArgs.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/CustomPayloadArgs.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/CustomTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/CustomTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/WrappedTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/WrappedTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/exploit/RMIRegistryExploitTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/exploit/RMIRegistryExploitTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/CommandExecTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/CommandExecTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/FileUploadTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/FileUploadTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/JRMPReverseConnectSMTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/JRMPReverseConnectSMTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/JRMPReverseConnectTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/JRMPReverseConnectTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/MyfacesTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/MyfacesTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/PayloadsTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/PayloadsTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/payloads/TestHarnessTest.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/payloads/TestHarnessTest.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/util/Callables.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/util/Callables.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/util/Files.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/util/Files.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/util/OS.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/util/OS.java -------------------------------------------------------------------------------- /src/test/java/ysoserial/test/util/Throwables.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/src/test/java/ysoserial/test/util/Throwables.java -------------------------------------------------------------------------------- /ysoserial.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/threedr3am/ysoserial/HEAD/ysoserial.png --------------------------------------------------------------------------------