Skip to content

Commit 29ba250

Browse files
committed
Add parameterized payloads
- Add supplementary arguments for internal translet based payloads - Add supplementary arguments for Transformer payloads - Make CommonsBeanutils1 silent using NullComparator
1 parent 778e4e2 commit 29ba250

File tree

1 file changed

+19
-1
lines changed

1 file changed

+19
-1
lines changed

README.md

Lines changed: 19 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,12 +34,20 @@ for the development of effective defensive techniques, and is not intended to be
3434
used to attack systems except where explicitly authorized. Project maintainers
3535
are not responsible or liable for misuse of the software. Use responsibly.
3636

37+
## Dependencies issues
38+
39+
As stated in [BishopFox's fork](https://github.com/BishopFox/ysoserial-bf?tab=readme-ov-file#missing-javaxinterceptor-api-library),
40+
javax.interceptor-api library version 3.1 was a bump version typo and was removed from central repositories.
41+
As a result, artifacts cannot be downloaded anymore.
42+
43+
You can find this library and a workaround to fix this issue [here](https://github.com/BishopFox/ysoserial-bf?tab=readme-ov-file#missing-javaxinterceptor-api-library).
44+
3745
## Usage
3846

3947
```shell
4048
$ java -jar ysoserial.jar
4149
Y SO SERIAL?
42-
Usage: java -jar ysoserial.jar [payload] '[command]'
50+
Usage: java -jar ysoserial-[version]-all.jar [payload] [arguments ...]
4351
Available payload types:
4452
Payload Authors Dependencies
4553
------- ------- ------------
@@ -79,6 +87,16 @@ Usage: java -jar ysoserial.jar [payload] '[command]'
7987
Wicket1 @jacob-baines wicket-util:6.23.0, slf4j-api:1.6.4
8088
```
8189

90+
A few arguments were added to customize gadget chains relying on Translets or CommonsCollections Transformers:
91+
92+
```shell
93+
$ java -jar ysoserial.jar CommonsCollections1 --inline 'System.out.println("Hello world");'
94+
[...]
95+
96+
$ java -jar ysoserial.jar CommonsBeanutils1 --jar-file /path/to/app.jar --jar-main org.random.Main -- arg0 arg1 arg2
97+
[...]
98+
```
99+
82100
## Examples
83101

84102
```shell

0 commit comments

Comments
 (0)