ysoserial 图形化,探测 gadget,TomcatEcho,命令执行,冰蝎,哥斯拉内存马注入,加载字节码等
V1.0版本
"URLDNS", "ROME", "C3P0", "C3P0_LowVer", "C3P0Tomcat", "Ceylon", "Click1", "CommonsBeanutils1", "CommonsBeanutils183NOCC", "CommonsBeanutils192NOCC", "CommonsBeanutils192WithDualTreeBidiMap", "CommonsCollections1", "CommonsCollections2", "CommonsCollections3", "CommonsCollections4", "CommonsCollections5", "CommonsCollections6", "CommonsCollections6Lite", "CommonsCollections7", "CommonsCollections8", "CommonsCollections9", "CommonsCollections10", "CommonsCollections11", "CommonsCollectionsK1", "CommonsCollectionsK2", "CommonsCollectionsK3", "CommonsCollectionsK4", "Fastjson1", "Fastjson2", "FindGadgetByDNS", "FindClassByDNS", "FindClassByBomb", "Groovy1", "Hibernate1", "Jackson1", "Jackson2", "JacksonSignedObject", "JavassistWeld1", "JBossInterceptors1", "Jdk7u21", "Jdk8u20", "JSON1", "Spring1", "Spring2", "MozillaRhino1", "MozillaRhino2", "Vaadin1"
"RawCMD", "LinuxCMD", "WinCMD", "AutoCMD", "Dnslog", "Sleep", "HttpLog", "LoadClass", "LoadClassBase64", "LoadJar", "CodeFile", "CodeBase64", "Bcel", "BcelClassFile", "ScriptBase64", "ScriptFile", "JNDI", "Godzilla", "Behinder", "TomcatCmdEcho", "ZohoPMPTomcatEcho", "UploadFile", "UploadFileBase64"
"NORMAL","Base64", "Bin","GZIP+Base64"
"DIRTARRAY","DIRTLinkedList","DIRTTCRESET"
参考
https://github.com/frohoff/ysoserial
https://github.com/woodpecker-framework/ysoserial-for-woodpecker
https://github.com/pen4uin/java-memshell-generator