ysoserial:概念证明工具，用于生成利用不安全的Java对象反序列化的有效负载

[{"title":"（ 88 个子文件 143KB ） ysoserial:概念证明工具，用于生成利用不安全的Java对象反序列化的有效负载","children":[{"title":"ysoserial-master","children":[{"title":"LICENSE.txt <span style='color:#111;'> 1.04KB </span>","children":null,"spread":false},{"title":"assembly.xml <span style='color:#111;'> 1.02KB </span>","children":null,"spread":false},{"title":"src","children":[{"title":"test","children":[{"title":"java","children":[{"title":"ysoserial","children":[{"title":"CiTest.java <span style='color:#111;'> 257B </span>","children":null,"spread":false},{"title":"test","children":[{"title":"CustomDeserializer.java <span style='color:#111;'> 139B </span>","children":null,"spread":false},{"title":"CustomPayloadArgs.java <span style='color:#111;'> 129B </span>","children":null,"spread":false},{"title":"util","children":[{"title":"Throwables.java <span style='color:#111;'> 234B </span>","children":null,"spread":false},{"title":"Files.java <span style='color:#111;'> 349B </span>","children":null,"spread":false},{"title":"OS.java <span style='color:#111;'> 689B </span>","children":null,"spread":false},{"title":"Callables.java <span style='color:#111;'> 926B </span>","children":null,"spread":false}],"spread":true},{"title":"payloads","children":[{"title":"CommandExecTest.java <span style='color:#111;'> 1.17KB </span>","children":null,"spread":false},{"title":"TestHarnessTest.java <span style='color:#111;'> 1.98KB </span>","children":null,"spread":false},{"title":"JRMPReverseConnectTest.java <span style='color:#111;'> 1.13KB </span>","children":null,"spread":false},{"title":"RemoteClassLoadingTest.java <span style='color:#111;'> 3.44KB </span>","children":null,"spread":false},{"title":"MyfacesTest.java <span style='color:#111;'> 5.69KB </span>","children":null,"spread":false},{"title":"JRMPReverseConnectSMTest.java <span style='color:#111;'> 1.46KB </span>","children":null,"spread":false},{"title":"FileUploadTest.java <span style='color:#111;'> 2.33KB </span>","children":null,"spread":false},{"title":"PayloadsTest.java <span style='color:#111;'> 12.97KB </span>","children":null,"spread":false}],"spread":true},{"title":"exploit","children":[{"title":"RMIRegistryExploitTest.java <span style='color:#111;'> 579B </span>","children":null,"spread":false}],"spread":true},{"title":"CustomTest.java <span style='color:#111;'> 212B </span>","children":null,"spread":false},{"title":"WrappedTest.java <span style='color:#111;'> 228B </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}],"spread":true},{"title":"main","children":[{"title":"java","children":[{"title":"ysoserial","children":[{"title":"secmgr","children":[{"title":"ExecCheckingSecurityManager.java <span style='color:#111;'> 2.21KB </span>","children":null,"spread":false},{"title":"DelegateSecurityManager.java <span style='color:#111;'> 4.42KB </span>","children":null,"spread":false}],"spread":true},{"title":"payloads","children":[{"title":"JRMPListener.java <span style='color:#111;'> 1.82KB </span>","children":null,"spread":false},{"title":"ObjectPayload.java <span style='color:#111;'> 3.72KB </span>","children":null,"spread":false},{"title":"URLDNS.java <span style='color:#111;'> 3.44KB </span>","children":null,"spread":false},{"title":"Wicket1.java <span style='color:#111;'> 4.60KB </span>","children":null,"spread":false},{"title":"DynamicDependencies.java <span style='color:#111;'> 103B </span>","children":null,"spread":false},{"title":"CommonsCollections3.java <span style='color:#111;'> 2.38KB </span>","children":null,"spread":false},{"title":"Jdk7u21.java <span style='color:#111;'> 3.00KB </span>","children":null,"spread":false},{"title":"Myfaces1.java <span style='color:#111;'> 3.77KB </span>","children":null,"spread":false},{"title":"Spring2.java <span style='color:#111;'> 2.71KB </span>","children":null,"spread":false},{"title":"annotation","children":[{"title":"Dependencies.java <span style='color:#111;'> 993B </span>","children":null,"spread":false},{"title":"Authors.java <span style='color:#111;'> 1.24KB </span>","children":null,"spread":false},{"title":"PayloadTest.java <span style='color:#111;'> 361B </span>","children":null,"spread":false}],"spread":false},{"title":"ReleaseableObjectPayload.java <span style='color:#111;'> 180B </span>","children":null,"spread":false},{"title":"Groovy1.java <span style='color:#111;'> 1.29KB </span>","children":null,"spread":false},{"title":"CommonsBeanutils1.java <span style='color:#111;'> 1.53KB </span>","children":null,"spread":false},{"title":"JBossInterceptors1.java <span style='color:#111;'> 4.06KB </span>","children":null,"spread":false},{"title":"CommonsCollections6.java <span style='color:#111;'> 3.93KB </span>","children":null,"spread":false},{"title":"Jython1.java <span style='color:#111;'> 4.49KB </span>","children":null,"spread":false},{"title":"Clojure.java <span style='color:#111;'> 2.34KB </span>","children":null,"spread":false},{"title":"Myfaces2.java <span style='color:#111;'> 2.38KB </span>","children":null,"spread":false},{"title":"JSON1.java <span style='color:#111;'> 5.37KB </span>","children":null,"spread":false},{"title":"util","children":[{"title":"JavaVersion.java <span style='color:#111;'> 1.23KB </span>","children":null,"spread":false},{"title":"Reflections.java <span style='color:#111;'> 2.52KB </span>","children":null,"spread":false},{"title":"PayloadRunner.java <span style='color:#111;'> 2.03KB </span>","children":null,"spread":false},{"title":"Gadgets.java <span style='color:#111;'> 6.35KB </span>","children":null,"spread":false},{"title":"ClassFiles.java <span style='color:#111;'> 1.15KB </span>","children":null,"spread":false}],"spread":false},{"title":"JavassistWeld1.java <span style='color:#111;'> 4.11KB </span>","children":null,"spread":false},{"title":"Hibernate2.java <span style='color:#111;'> 2.03KB </span>","children":null,"spread":false},{"title":"JRMPClient.java <span style='color:#111;'> 2.63KB </span>","children":null,"spread":false},{"title":"ROME.java <span style='color:#111;'> 1.32KB </span>","children":null,"spread":false},{"title":"CommonsCollections7.java <span style='color:#111;'> 3.24KB </span>","children":null,"spread":false},{"title":"FileUpload1.java <span style='color:#111;'> 4.60KB </span>","children":null,"spread":false},{"title":"MozillaRhino2.java <span style='color:#111;'> 4.78KB </span>","children":null,"spread":false},{"title":"C3P0.java <span style='color:#111;'> 2.99KB </span>","children":null,"spread":false},{"title":"CommonsCollections4.java <span style='color:#111;'> 2.21KB </span>","children":null,"spread":false},{"title":"CommonsCollections1.java <span style='color:#111;'> 3.00KB </span>","children":null,"spread":false},{"title":"Spring1.java <span style='color:#111;'> 3.13KB </span>","children":null,"spread":false},{"title":"Hibernate1.java <span style='color:#111;'> 8.35KB </span>","children":null,"spread":false},{"title":"CommonsCollections2.java <span style='color:#111;'> 1.78KB </span>","children":null,"spread":false},{"title":"CommonsCollections5.java <span style='color:#111;'> 3.73KB </span>","children":null,"spread":false},{"title":"Vaadin1.java <span style='color:#111;'> 3.53KB </span>","children":null,"spread":false},{"title":"BeanShell1.java <span style='color:#111;'> 2.13KB </span>","children":null,"spread":false},{"title":"MozillaRhino1.java <span style='color:#111;'> 3.35KB </span>","children":null,"spread":false}],"spread":false},{"title":"exploit","children":[{"title":"JRMPListener.java <span style='color:#111;'> 9.87KB </span>","children":null,"spread":false},{"title":"RMIRegistryExploit.java <span style='color:#111;'> 3.40KB </span>","children":null,"spread":false},{"title":"JMXInvokeMBean.java <span style='color:#111;'> 1.40KB </span>","children":null,"spread":false},{"title":"JSF.java <span style='color:#111;'> 2.40KB </span>","children":null,"spread":false},{"title":"JenkinsListener.java <span style='color:#111;'> 7.48KB </span>","children":null,"spread":false},{"title":"JenkinsReverse.java <span style='color:#111;'> 2.42KB </span>","children":null,"spread":false},{"title":"JRMPClient.java <span style='color:#111;'> 4.08KB </span>","children":null,"spread":false},{"title":"JenkinsCLI.java <span style='color:#111;'> 4.49KB </span>","children":null,"spread":false},{"title":"JRMPClassLoadingListener.java <span style='color:#111;'> 1.60KB </span>","children":null,"spread":false},{"title":"JBoss.java <span style='color:#111;'> 14.94KB </span>","children":null,"spread":false}],"spread":true},{"title":"Strings.java <span style='color:#111;'> 1.89KB </span>","children":null,"spread":false},{"title":"GeneratePayload.java <span style='color:#111;'> 2.49KB </span>","children":null,"spread":false},{"title":"Serializer.java <span style='color:#111;'> 791B </span>","children":null,"spread":false},{"title":"Deserializer.java <span style='color:#111;'> 1.05KB </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}],"spread":true},{"title":"Dockerfile <span style='color:#111;'> 413B </span>","children":null,"spread":false},{"title":"DISCLAIMER.txt <span style='color:#111;'> 327B </span>","children":null,"spread":false},{"title":".travis.yml <span style='color:#111;'> 1.24KB </span>","children":null,"spread":false},{"title":"README.md <span style='color:#111;'> 7.17KB </span>","children":null,"spread":false},{"title":"ysoserial.png <span style='color:#111;'> 42.48KB </span>","children":null,"spread":false},{"title":"pom.xml <span style='color:#111;'> 11.63KB </span>","children":null,"spread":false},{"title":"appveyor.yml <span style='color:#111;'> 1.05KB </span>","children":null,"spread":false},{"title":".editorconfig <span style='color:#111;'> 201B </span>","children":null,"spread":false},{"title":".gitignore <span style='color:#111;'> 110B </span>","children":null,"spread":false}],"spread":false}],"spread":true}]