Skip to content

Releases: qi4L/JYso

v1.2.62

05 Mar 14:37
Compare
Choose a tag to compare
  • 修复urldns使用utf-8编码时的报错;
  • fastjson1链子适配1.2.83

v1.2.61

04 Mar 09:43
Compare
Choose a tag to compare
v3.5.6

BUG cc10

v1.2.6

02 Mar 14:33
Compare
Choose a tag to compare
  • 新增UTF-8 Overlong Encoding Bypass waf

v1.2.5

01 Mar 10:23
Compare
Choose a tag to compare
  • JBoss
  • JenkinsCLI
  • JenkinsListener
  • JenkinsReverse
  • JMXInvokeMBean
  • JRMPClassLoadingListener
  • JRMPClient
  • JRMPListener
  • JSF
  • RMIBindExploit

v1.2.42

28 Feb 09:14
Compare
Choose a tag to compare
  • 修复BUG
  • Payload不区分大小写

v1.2.41

23 Feb 09:06
Compare
Choose a tag to compare
v3.5.2

BUG + base64Two

v1.2.4

30 Jan 09:31
Compare
Choose a tag to compare
  1. 修复若干BUG;
  2. URLDNS中新增fastjson,jackson,ROME,SpringAOP的探测;

v1.2.3

25 Oct 03:13
Compare
Choose a tag to compare

新增一条用来绕过TemplatesImpl黑名单的链子,JacksonLdapAttr。
来自 Y4Sec-Team

v1.2.2

11 Aug 10:41
Compare
Choose a tag to compare

新增websocket内存马:
1、绕过Nginx、CDN代理限制的 WebSocket 马;
2、Tomcat、Spring、Jetty、Resin、Weblogic、Websphere 的 WebSocket 马;

v1.2.12

04 Aug 06:01
Compare
Choose a tag to compare
v3.3

修复BUG +2