Skip to content

Commit fb52cf8

Browse files
committed
Updated README.md
1 parent 16d07ba commit fb52cf8

File tree

1 file changed

+19
-4
lines changed

1 file changed

+19
-4
lines changed

README.md

Lines changed: 19 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,13 @@ $ ./ysoserial -h
2727
ysoserial.net generates deserialization payloads for a variety of .NET formatters.
2828
2929
Available formatters:
30+
ActivitySurrogateDisableTypeCheck (ActivitySurrogateDisableTypeCheck Gadget by Nick Landers. Disables 4.8+ type protections for ActivitySurrogateSelector, command is ignored.)
31+
Formatters:
32+
BinaryFormatter
33+
ObjectStateFormatter
34+
SoapFormatter
35+
NetDataContractSerializer
36+
LosFormatter
3037
ActivitySurrogateSelectorFromFile (ActivitySurrogateSelector gadget by James Forshaw. This gadget interprets the command parameter as path to the .cs file that should be compiled as exploit class. Use semicolon to separate the file from additionally required assemblies, e. g., '-c ExploitClass.cs;System.Windows.Forms.dll'.)
3138
Formatters:
3239
BinaryFormatter
@@ -48,7 +55,7 @@ Available formatters:
4855
XmlSerializer
4956
DataContractSerializer
5057
YamlDotNet < 5.0.0
51-
TextFormattingRunProperties (TextFormattingRunProperties Gadget by Oleksandr Mirosh and Alvaro Munoz.)
58+
TextFormattingRunProperties (TextFormattingRunProperties Gadget by Oleksandr Mirosh and Alvaro Munoz)
5259
Formatters:
5360
BinaryFormatter
5461
ObjectStateFormatter
@@ -68,23 +75,31 @@ Available formatters:
6875
ObjectStateFormatter
6976
NetDataContractSerializer
7077
LosFormatter
78+
TypeConfuseDelegateMono (TypeConfuseDelegate gadget by James Forshaw - Tweaked to work with Mono)
79+
Formatters:
80+
BinaryFormatter
81+
ObjectStateFormatter
82+
NetDataContractSerializer
83+
LosFormatter
7184
WindowsIdentity (WindowsIdentity Gadget by Levi Broderick)
7285
Formatters:
7386
BinaryFormatter
7487
Json.Net
7588
DataContractSerializer
89+
SoapFormatter
7690
7791
Available plugins:
78-
altserialization (Generates payload for HttpStaticObjectsCollection or SessionStateItemCollection)
92+
ActivatorUrl (Sends a generated payload to an activated, presumably remote, object)
93+
Altserialization (Generates payload for HttpStaticObjectsCollection or SessionStateItemCollection)
7994
ApplicationTrust (Generates XML payload for the ApplicationTrust class)
8095
Clipboard (Generates payload for DataObject and copy it into the clipboard - ready to be pasted in affected apps)
8196
DotNetNuke (Generates payload for DotNetNuke CVE-2017-9822)
8297
Resx (Generates RESX files)
8398
SessionSecurityTokenHandler (Generates XML payload for the SessionSecurityTokenHandler class)
84-
SharePoint (Generates poayloads for SharePoint CVEs: CVE-2019-0604, CVE-2018-8421)
99+
SharePoint (Generates poayloads for the following SharePoint CVEs: CVE-2019-0604, CVE-2018-8421)
85100
TransactionManagerReenlist (Generates payload for the TransactionManager.Reenlist method)
86101
ViewState (Generates a ViewState using known MachineKey parameters)
87-
102+
88103
Usage: ysoserial.exe [options]
89104
Options:
90105
-p, --plugin=VALUE the plugin to be used

0 commit comments

Comments
 (0)