Skip to content
Permalink
Browse files

Update CommonsCollections5.java

real Gadget chain:
  • Loading branch information...
jax777 committed May 6, 2019
1 parent 55f1e7c commit 863dc87f786839916154ce19d8b32c5e98dbf452
Showing with 15 additions and 16 deletions.
  1. +15 −16 src/main/java/ysoserial/payloads/CommonsCollections5.java
@@ -24,22 +24,21 @@

/*
Gadget chain:
ObjectInputStream.readObject()
AnnotationInvocationHandler.readObject()
Map(Proxy).entrySet()
AnnotationInvocationHandler.invoke()
LazyMap.get()
ChainedTransformer.transform()
ConstantTransformer.transform()
InvokerTransformer.transform()
Method.invoke()
Class.getMethod()
InvokerTransformer.transform()
Method.invoke()
Runtime.getRuntime()
InvokerTransformer.transform()
Method.invoke()
Runtime.exec()
ObjectInputStream.readObject()
BadAttributeValueExpException.readObject()
TiedMapEntry.toString()
LazyMap.get()
ChainedTransformer.transform()
ConstantTransformer.transform()
InvokerTransformer.transform()
Method.invoke()
Class.getMethod()
InvokerTransformer.transform()
Method.invoke()
Runtime.getRuntime()
InvokerTransformer.transform()
Method.invoke()
Runtime.exec()
Requires:
commons-collections

0 comments on commit 863dc87

Please sign in to comment.
You can’t perform that action at this time.