Update

Signed-off-by: XhstormR <[email protected]>
XhstormR · Jul 14, 2020 · 520562a · 520562a
1 parent 650e9e5
commit 520562a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/proguard/proguard-rules.pro b/proguard/proguard-rules.pro
@@ -15,11 +15,15 @@
     public static **[] values();
 }
 
+-keepclassmembers class * implements java.io.Serializable {
+    static final long serialVersionUID;
+}
+
 -keepclasseswithmembers class * {
     public static void main(java.lang.String[]);
 }
 
--keepclasseswithmembers class org.apache.commons.** {
+-keepclasseswithmembernames class org.apache.commons.** {
     <fields>;
 }
 
@@ -30,4 +34,5 @@
 -dontwarn javax.**
 -dontwarn org.apache.catalina.**
 
+-printusage ../build/usage.txt
 -printmapping ../build/mapping.txt
diff --git a/src/main/kotlin/com/xhstormr/app/Main.kt b/src/main/kotlin/com/xhstormr/app/Main.kt
@@ -13,8 +13,8 @@ object App : CliktCommand(printHelpOnEmptyArgs = true) {
     private val payload by option(help = "Password: xhstormr").enum<Payload>().required()
 
     override fun run() {
-        // exploit(CommonsCollections2ObjectPayload, clazz<TemplatesImplPayload1>())
-        // exploit(CommonsCollections2ObjectPayload, clazz<TemplatesImplPayload2>())
+        // exploit(CommonsCollections2ObjectPayload, clazz<TomcatShellFilterTemplatesImpl>())
+        // exploit(CommonsCollections2ObjectPayload, clazz<TomcatBehinderFilterTemplatesImpl>())
 
         CommonsCollections2ObjectPayload
             .getObject(payload.clazz)