Skip to content

Releases: woodpecker-framework/ysoserial-for-woodpecker

ysoserial-for-woodpecker 0.5.2

21 Jun 12:13
Compare
Choose a tag to compare
  1. 解决FindClassByDNS makeClass报错frozen class (cannot edit)
  2. 添加CommonsBeanutils3_183
  3. JRMPListener添加大量脏数据功能
  4. 解决CommonsBeanutils1_183 class is frozen问题和CommonsBeanutils3版本错乱问题
  5. 添加FindGadgetByDNS

ysoserial-for-woodpecker 0.5.1

23 Mar 10:14
Compare
Choose a tag to compare
  1. 强制设置所有javassist生成的字节码为jdk 1.5版本

ysoserial-for-woodpecker 0.5.0

25 Jan 04:32
Compare
Choose a tag to compare
  1. 添加FindClassByDNS和FindClassByBomb gadget
  2. 解决C3P0低版本suid冲突问题,添加通过java反序列化炸弹探测class gadget
  3. 添加JRMPClient3添加ObjID参数
  4. 删除JRMPClient3,给JRMPClient/JRMPClient2加上ObjID参数
  5. 解决CommonsCollections系列gaget在某些场景下,由于Integer导致不兼容问题 (thx @Ppsoft1991 )

ysoserial-for-woodpecker 0.4.4

24 Oct 08:22
Compare
Choose a tag to compare
  1. 添加URLDNSFindClass gadget
  2. 让CommonsBeanutils系列gadget支持1.8.3版本
  3. 添加Templates系列gadget的压缩功能
  4. 去除原ysoserial templates gadget序列化数据带有生成jar的包名
  5. 解决javassist frozen class (cannot edit)问题和toClass attempted duplicate class definition for name问题

ysoserial-for-woodpecker 0.4.3

13 Sep 16:28
Compare
Choose a tag to compare
  1. 修复BeanShell1泄漏当前运行路径bug(可能会泄漏你的id)
  2. 添加CommonsCollections6Lite gadget

ysoserial-for-woodpecker 0.4.2

04 Aug 07:05
Compare
Choose a tag to compare
  1. 修正TemplatesImplUtil中COMMAND_LINUX_CMD命令以COMMAND_AUTO_CMD长度分割命令bug
  2. 修正加脏数据功能一直使用TreeMap做包裹类bug

ysoserial-for-woodpecker 0.4.1

02 Aug 15:34
Compare
Choose a tag to compare
  1. 实现添加大量脏数据Bypass WAF功能

ysoserial-for-woodpecker 0.4.0

11 Jun 13:03
Compare
Choose a tag to compare
  1. 添加CommonsBeanutils3 gadget
  2. 规范CommonsBeanutils3 gadget的命令格式
  3. 去除对sun.misc.BASE64Decoder的依赖,兼容到JDK15

ysoserial-for-woodpecker 0.3.3

24 May 18:10
Compare
Choose a tag to compare
  1. 给Templates和CommonsCollections3/4系列gadget添加bcel_with_args和bcel_class_file_with_args命令

ysoserial-for-woodpecker 0.3.2

24 May 15:40
Compare
Choose a tag to compare
  1. 添加code_file和code_base64命令