search

federicodotta / Java-Deserialization-Scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
774 stars 178 forks source link

How to generate Apache Commons Collections 3 Alternate payload 3 (sleep)? #19

Closed alexfrancow closed 4 years ago

alexfrancow commented 4 years ago

Hello,

How did you manage to generate the payload for "Apache Commons Collections 3 Alternate payload 3"?

I'm trying to execute the example payload and I've seen that it works perfectly. What I mean by that is that the page keeps loading for 10 seconds. (Only with this payload).

I've also seen that the payload has been added in the following commit: https://github.com/federicodotta/Java-Deserialization-Scanner/commit/c47dda45965b4fa79f20bcae603f7375b06867b1

Best Regards, Alex