You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+19-4Lines changed: 19 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,6 +27,13 @@ $ ./ysoserial -h
27
27
ysoserial.net generates deserialization payloads for a variety of .NET formatters.
28
28
29
29
Available formatters:
30
+
ActivitySurrogateDisableTypeCheck (ActivitySurrogateDisableTypeCheck Gadget by Nick Landers. Disables 4.8+ type protections for ActivitySurrogateSelector, command is ignored.)
31
+
Formatters:
32
+
BinaryFormatter
33
+
ObjectStateFormatter
34
+
SoapFormatter
35
+
NetDataContractSerializer
36
+
LosFormatter
30
37
ActivitySurrogateSelectorFromFile (ActivitySurrogateSelector gadget by James Forshaw. This gadget interprets the command parameter as path to the .cs file that should be compiled as exploit class. Use semicolon to separate the file from additionally required assemblies, e. g., '-c ExploitClass.cs;System.Windows.Forms.dll'.)
31
38
Formatters:
32
39
BinaryFormatter
@@ -48,7 +55,7 @@ Available formatters:
48
55
XmlSerializer
49
56
DataContractSerializer
50
57
YamlDotNet < 5.0.0
51
-
TextFormattingRunProperties (TextFormattingRunProperties Gadget by Oleksandr Mirosh and Alvaro Munoz.)
58
+
TextFormattingRunProperties (TextFormattingRunProperties Gadget by Oleksandr Mirosh and Alvaro Munoz)
52
59
Formatters:
53
60
BinaryFormatter
54
61
ObjectStateFormatter
@@ -68,23 +75,31 @@ Available formatters:
68
75
ObjectStateFormatter
69
76
NetDataContractSerializer
70
77
LosFormatter
78
+
TypeConfuseDelegateMono (TypeConfuseDelegate gadget by James Forshaw - Tweaked to work with Mono)
79
+
Formatters:
80
+
BinaryFormatter
81
+
ObjectStateFormatter
82
+
NetDataContractSerializer
83
+
LosFormatter
71
84
WindowsIdentity (WindowsIdentity Gadget by Levi Broderick)
72
85
Formatters:
73
86
BinaryFormatter
74
87
Json.Net
75
88
DataContractSerializer
89
+
SoapFormatter
76
90
77
91
Available plugins:
78
-
altserialization (Generates payload for HttpStaticObjectsCollection or SessionStateItemCollection)
92
+
ActivatorUrl (Sends a generated payload to an activated, presumably remote, object)
93
+
Altserialization (Generates payload for HttpStaticObjectsCollection or SessionStateItemCollection)
79
94
ApplicationTrust (Generates XML payload for the ApplicationTrust class)
80
95
Clipboard (Generates payload for DataObject and copy it into the clipboard - ready to be pasted in affected apps)
81
96
DotNetNuke (Generates payload for DotNetNuke CVE-2017-9822)
82
97
Resx (Generates RESX files)
83
98
SessionSecurityTokenHandler (Generates XML payload for the SessionSecurityTokenHandler class)
84
-
SharePoint (Generates poayloads for SharePoint CVEs: CVE-2019-0604, CVE-2018-8421)
99
+
SharePoint (Generates poayloads for the following SharePoint CVEs: CVE-2019-0604, CVE-2018-8421)
85
100
TransactionManagerReenlist (Generates payload for the TransactionManager.Reenlist method)
86
101
ViewState (Generates a ViewState using known MachineKey parameters)
0 commit comments