Skip to content

Releases: qi4L/JYso

v1.3.5

01 Nov 08:47
Compare
Choose a tag to compare
v1.3.5 Pre-release
Pre-release
  • Jdbc1、jdbc2路由,可在最新版JDK1.8 - 19利用;
  • 对输出UI做了优化;
  • RMI可以正常使用ELProcessor和basic路由;
  • 增加XStream、SnakeYaml、MemoryXXE、ldap2rmi路由;

v1.3.4

16 Sep 09:28
Compare
Choose a tag to compare
  • 增加Marshalsec output pr57
  • dnslog探测新增jdk版本探测和jndi注入类探测
  • 修复basic无法使用的BUG

v1.3.3

26 Aug 04:35
Compare
Choose a tag to compare
  • 新增cc 14 15 16 c3p0jndi c3p0jndi2 c3p0JDBC groovy2 pr57
  • XStream Payload pr53
  • 新增ldaps协议利用 参考
  • 修复BUG若干

v1.3.2

24 Jul 07:43
Compare
Choose a tag to compare

v1.3.1

29 May 08:17
Compare
Choose a tag to compare

给回显类添加构造函数写法版本

类加载时,同名类只会执行一次静态代码,搞得每次执行都要打一遍
如果打的构造类方法,就可以打一次就一直用

修复JNDI模式下TomcatBypass路由失效问题

v1.3.0

v1.2.9

29 Apr 07:16
Compare
Choose a tag to compare
  • 新增一条适配CB1.6.1的链子

v1.2.8

25 Mar 11:46
Compare
Choose a tag to compare
  • 修复BUG
  • 代码优化
  • RMI打内存马和回显类
  • Gadget不区分大小写
  • BeanShell2 适配 bsh2.0b1

v1.2.7

11 Mar 04:11
Compare
Choose a tag to compare

v1.2.63

08 Mar 11:07
Compare
Choose a tag to compare
  • 修复BUG