pwntester

Pure JRE 8 RCE Deserialization gadget

Based on Chris Frohoff and Wouter Coekaerts ideas:

• https://gist.github.com/frohoff/24af7913611f8406eaf3
• http://wouter.coekaerts.be/2015/annotationinvocationhandler

Full project (containing dependencies) can be found here:

• https://github.com/pwntester/JRE8u20_RCE_Gadget

shengoo

public class unzip extends Activity {
    /** Called when the activity is first created. */

    static final int BUFFER = 2048;
    TextView textView;

@Override
    public void onCreate(Bundle savedInstanceState) {

        textView = new TextView(this);

HarryR

#!/usr/bin/env python

from Crypto.Cipher import AES
from Crypto.Util.strxor import strxor
from binascii import hexlify

K = '0123456789abcdef'
cipher = AES.new(K, AES.MODE_ECB)

# Original Message

alexsleat

#!/usr/bin/python

import sys		#for cmd line argv

#take command line args as the input string
input_string = sys.argv
#remove the program name from the argv list
input_string.pop(0)

#convert to google friendly url (with + replacing spaces)

josiahcarlson

'''
Implementation of Poly1305-AES as described by Daniel J. Bernstein in
documents linked from: http://cr.yp.to/mac.html

Implemented by Josiah Carlson <[email protected]> on 2011-01-23,
released into the public domain.

Note: this implementation of Poly1305-AES uses Python's built-in long integer
implementation, so is not terribly performant, and likely suffers from a
side-channel attack related to the timing of bigint modulo. It also uses