Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prepare v5.0.0 Release #53

Merged
merged 60 commits into from
Dec 19, 2023
Merged

Prepare v5.0.0 Release #53

merged 60 commits into from
Dec 19, 2023

Conversation

qtc-de
Copy link
Owner

@qtc-de qtc-de commented Dec 19, 2023

Added

  • Add support for dynamically created socket factory classes (docs)
  • Add support for method guessing on spring-remoting endpoints (docs)
  • Add a Spring Remoting example server (src, package)

Changed

  • Changed the namespace of the project from de.qtc to eu.tneitzel
  • Fix leak of local ysoserial path (e30f52c)
  • The GenericPrint plugin is now included in rmg per default (b09e9a5)
  • Stream corruption errors during method guessing are only displayed if --verbose is used

qtc-de added 30 commits September 29, 2023 18:37
@qtc-de
Add support for dynamic socket factory classes
c4dd959 
remote-method-guesser now attempts to create missing socket factory
classes dynamically.
@qtc-de
Add author to manifest
ab7f099
@qtc-de
Add documentation for dynamic socket factories
01da3be
@qtc-de
Improve dynamic socket factory creation
d397005
@qtc-de
Small formatting changes
aa9637a
@qtc-de
Add spring remoting server
5bb6761 
Added a spring remoting server.
@qtc-de
Add spring remoting to known endpoints
f9b96b5
@qtc-de
Update pom.xml
c7d1dc9
@qtc-de
Reformat MethodGuesser
b02e388
@qtc-de
Reformat RemoteObjectClient
11a30b3
@qtc-de
Add missing java.desktop dependency for spring
d1604c4
@qtc-de
Fix method parameters for spring remoting
92c63c3
@qtc-de
Update logging of SpringRemotingService
ff187a7
@qtc-de
Add spring-remoting as dependency
e3ca60a
@qtc-de
Reformat MethodCandidate
5d2ddf8
@qtc-de
Start to add spring-remoting support
6779571
@qtc-de
Refactor Spring Remoting implementation
e6ec810
@qtc-de
Start to implement spring-remoting guessing
abe2892
@qtc-de
Implement support for spring remoting method guess
d81ee6d 
First working draft.
@qtc-de
Improve method guessing for spring-remoting
cb150ad
@qtc-de
Prevent leakage of local ysoserial path
e30f52c 
When using remote-method-guessers ysoserial integration, gadget objects
created by ysoserial were annotated by the marshaloutput stream. This
annotation included the absoulte file system path of the ysoserial
library, which represents a low impact information disclosure. Since
remote-method-guesser already overrides the default RMIClassLoader, this
behavior was now changed by always returning null as result of the
getClassAnnotation method.
@qtc-de
Add custom socket factory obj to ExampleServer
298f003 
A new RemoteObject was added to port 9010 of the ExampleServer. This
remote object is registred with a custom RMISocketFactory to allow tests
of the dynamic SockerFactory creation feature of remote-method-guesser.
@qtc-de
Add comments
522d868
@qtc-de
Add spring-remoting documentation
a839948
@qtc-de
Add notes on inline-gadgets
3e223f2
@qtc-de
Add GenericPrint to codebase
b09e9a5 
The GenericPrint plugin is now included into rmg per default and can be
activated by using the --return-value option.
@qtc-de
Switch namespace
c93d6b8 
Switch namespace from de.qtc to eu.tneitzel. The initial namespace was
chosen without further thinking about it. From version v5.0.0 it is
planned to expose remote-method-guesser also via maven repositories.
Therefore, we switch now to a namespace that is actually owned by the
author.
@qtc-de
Rename files
2148aaf
@qtc-de
Update test cases
5fc7b01
@qtc-de
Update dependencies
399557f
qtc-de added 29 commits December 10, 2023 08:22
@qtc-de
Fix snakeyaml constructor
99ff078
@qtc-de
Small formatting changes
5d69627
@qtc-de
Update dockerfiles of example-server
c17dbdc
@qtc-de
Update spring-remoting container
9a8dabc
@qtc-de
Smal formatting change
7acec03
@qtc-de
Update ssrf-example-server docker files
b6f79e9
@qtc-de
Small formatting changes
b1f6a1f
@qtc-de
Fix missing exception handling on ConnectException
801a8e9
@qtc-de
Improve handling of unknown ConnectException
4d83fc5
@qtc-de
Update test cases
a116f37
@qtc-de
Add missing newline on ConnectException
504f0c5 
Related to #52
@qtc-de
Increase max lookup-loop count
d917492 
When remote-method-guesser performs a lookup operation, classes may be
created dynamically to handle custom socket factories or RMI stubs. The
serialVersionUid of these classes need to match the incomming class.
remote-method-guesser hadles this using an error based appraoch, where
the required serialVersionUid is obtained from an exception message.

Up to this commit, the above mentioned mechanism only triggered once.
This causes problems if you have e.g. a RMI stub class that uses a
custom socket factory too. With this commit, the count is increased to
five (probably more than required, but it won't hurt).
@qtc-de
Update test cases
1297455
@qtc-de
Remove Missing Route test
06412a1
@qtc-de
Add client socket factory class name to enum
9356f11
@qtc-de
Small formatting change
430dee4
@qtc-de
Formatting changes
f9bc967
@qtc-de
Small bugfixes
025e244
@qtc-de
Adjust test cases
0072ef3
@qtc-de
Update test cases
122bd53
@qtc-de
Small test bugfix
a8fdafd
@qtc-de
Improve formatting of spring-remoting enum
cbdf2b2
@qtc-de
Fix progress bar for guessing spring-remoting
116bbbf
@qtc-de
Add test cases for Spring Remoting
f24fb73
@qtc-de
Improve exception handling during method guessing
779e4b0 
In some configurations, stream corruptions can occur during method
guessing with multiple threads. This behavior seems to be non
deterministically and was not fully understood yet. However, even on
affected configurations, the miss rate is roughly at 1/3000 methods that
fail. For this reason, we catch the resulting exceptions for now and
only display warnings if running in verbose mode.
@qtc-de
Update CHANGELOG.md
ddb5102
@qtc-de
Add README.md for spring-remoting server
a1e270a
@qtc-de
Make pom.xml maven compliant
b82bf6f
@qtc-de
Adjust group ID
f6ea9b0
@qtc-de qtc-de merged commit 8d0fd45 into master Dec 19, 2023
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@qtc-de