ysoserial icon indicating copy to clipboard operation
ysoserial copied to clipboard
verified publisher icon frohoff

Make AnnotationInvocationHandler usage dynamic

Open drosenbauer opened this issue 9 years ago • 0 comments

Right now, there are five different ways (in various branches and pull requests) to use AIH as part of a payload.

  1. The original way, patched in Java 7 and 8 earlier this year
  2. BadAttributeValueExpException (CC5), requires no SecurityManager present
  3. ACC's ListOrderedMap (my CC6: https://github.com/drosenbauer/ysoserial/blob/cli-improvements/src/main/java/ysoserial/payloads/CommonsCollections6.java)
  4. ConcurrentHashMap (@jasinner's CC6: https://github.com/jasinner/ysoserial/commit/f1e23cca46ee3bd70cd541c8b362e2621996ead3, proposed by @matthiaskaiser in #17)
  5. Another (?) CC6 in #50 by @matthiaskaiser, unless that's the same as his proposal in #17

Once #45 is done to everybody's satisfaction and merged in, these should all be combined back into the four original payloads, using a (defaulted) command line switch to select among them at generation time.

drosenbauer avatar May 19 '16 20:05 drosenbauer