frohoff / frohoff/ysoserial

Make AnnotationInvocationHandler usage dynamic

Open
#46 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
9.1k
Forks
1.9k
PR merge metrics
No merged PRs in 30d

Description

Right now, there are five different ways (in various branches and pull requests) to use AIH as part of a payload.
1. The original way, patched in Java 7 and 8 earlier this year
2. BadAttributeValueExpException (CC5), requires no SecurityManager present
3. ACC's ListOrderedMap (my CC6: https://github.com/drosenbauer/ysoserial/blob/cli-improvements/src/main/java/ysoserial/payloads/CommonsCollections6.java)
4. ConcurrentHashMap (@jasinner's CC6: https://github.com/jasinner/ysoserial/commit/f1e23cca46ee3bd70cd541c8b362e2621996ead3, proposed by @matthiaskaiser in #17)
5. Another (?) CC6 in #50 by @matthiaskaiser, unless that's the same as his proposal in #17

Once #45 is done to everybody's satisfaction and merged in, these should all be combined back into the four original payloads, using a (defaulted) command line switch to select among them at generation time.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.