frohoff / frohoff/ysoserial

Option to override serialVersionUID

Open
#182 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
9.1k
Forks
1.9k
PR merge metrics
No merged PRs in 30d

Description

Provide CLI parameters to allow override of serialVersionUID on a per-class basis.

`java -jar ysoserial.jar -s BeanComparator=-3490850999041592962 ...`

Probably fairly easy to implement by extending `ObjectOutputStream` and `ObjectStreamClass`.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the CLI parameter parsing and the serialization path used to generate payloads. Read how ObjectOutputStream and ObjectStreamClass participate in serialVersionUID handling, then verify the example BeanComparator override and confirm that other classes retain their default values.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.