You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
101 lines
5.8 KiB
XML
101 lines
5.8 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!-- serialkiller.conf -->
|
|
<config>
|
|
<refresh>6000</refresh>
|
|
<mode>
|
|
<!-- set to 'false' for blocking mode -->
|
|
<profiling>false</profiling>
|
|
</mode>
|
|
<!-- if you're changing the logging settings, restart your app -->
|
|
<logging>
|
|
<enabled>true</enabled>
|
|
<logfile>/tmp/serialkiller.log</logfile>
|
|
</logging>
|
|
<blacklist>
|
|
<!-- ysoserial's BeanShell1 payload -->
|
|
<regexp>bsh\.XThis$</regexp>
|
|
<regexp>bsh\.Interpreter$</regexp>
|
|
<!-- ysoserial's C3P0 payload -->
|
|
<regexp>com\.mchange\.v2\.c3p0\.impl\.PoolBackedDataSourceBase$</regexp>
|
|
<!-- ysoserial's CommonsBeanutils1 payload -->
|
|
<regexp>org\.apache\.commons\.beanutils\.BeanComparator$</regexp>
|
|
<!-- ysoserial's CommonsCollections1,3,5,6 payload -->
|
|
<regexp>org\.apache\.commons\.collections\.Transformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections\.functors\.InvokerTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections\.functors\.ChainedTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections\.functors\.ConstantTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections\.functors\.InstantiateTransformer$</regexp>
|
|
<!-- ysoserial's CommonsCollections2,4 payload -->
|
|
<regexp>org\.apache\.commons\.collections4\.functors\.InvokerTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections4\.functors\.ChainedTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections4\.functors\.ConstantTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections4\.functors\.InstantiateTransformer$</regexp>
|
|
<regexp>org\.apache\.commons\.collections4\.comparators\.TransformingComparator$</regexp>
|
|
<!-- ysoserial's FileUpload1,Wicket1 payload -->
|
|
<regexp>org\.apache\.commons\.fileupload\.disk\.DiskFileItem$</regexp>
|
|
<regexp>org\.apache\.wicket\.util\.upload\.DiskFileItem$</regexp>
|
|
<!-- ysoserial's Groovy payload -->
|
|
<regexp>org\.codehaus\.groovy\.runtime\.ConvertedClosure$</regexp>
|
|
<regexp>org\.codehaus\.groovy\.runtime\.MethodClosure$</regexp>
|
|
<!-- ysoserial's Hibernate1,2 payload -->
|
|
<regexp>org\.hibernate\.engine\.spi\.TypedValue$</regexp>
|
|
<regexp>org\.hibernate\.tuple\.component\.AbstractComponentTuplizer$</regexp>
|
|
<regexp>org\.hibernate\.tuple\.component\.PojoComponentTuplizer$</regexp>
|
|
<regexp>org\.hibernate\.type\.AbstractType$</regexp>
|
|
<regexp>org\.hibernate\.type\.ComponentType$</regexp>
|
|
<regexp>org\.hibernate\.type\.Type$</regexp>
|
|
<regexp>com\.sun\.rowset\.JdbcRowSetImpl$</regexp>
|
|
<!-- ysoserial's JBossInterceptors1, JavassistWeld1 payload -->
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.builder\.InterceptionModelBuilder$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.builder\.MethodReference$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.proxy\.DefaultInvocationContextFactory$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.proxy\.InterceptorMethodHandler$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.reader\.ClassMetadataInterceptorReference$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.reader\.DefaultMethodMetadata$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.reader\.ReflectiveClassMetadata$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.reader\.SimpleInterceptorMetadata$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.spi\.instance\.InterceptorInstantiator$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.spi\.metadata\.InterceptorReference$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.spi\.metadata\.MethodMetadata$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.spi\.model\.InterceptionModel$</regexp>
|
|
<regexp>org\.jboss\.(weld\.)?interceptor\.spi\.model\.InterceptionType$</regexp>
|
|
<!-- ysoserial's JRMPClient payload -->
|
|
<regexp>java\.rmi\.registry\.Registry$</regexp>
|
|
<regexp>java\.rmi\.server\.ObjID$</regexp>
|
|
<regexp>java\.rmi\.server\.RemoteObjectInvocationHandler$</regexp>
|
|
<!-- ysoserial's JSON1 payload -->
|
|
<regexp>net\.sf\.json\.JSONObject$</regexp>
|
|
<!-- ysoserial's Jdk7u21 payload -->
|
|
<regexp>javax\.xml\.transform\.Templates$</regexp>
|
|
<!-- ysoserial's Jython1 payload -->
|
|
<regexp>org\.python\.core\.PyObject$</regexp>
|
|
<regexp>org\.python\.core\.PyBytecode$</regexp>
|
|
<regexp>org\.python\.core\.PyFunction$</regexp>
|
|
<!-- ysoserial's MozillaRhino1 payload -->
|
|
<regexp>org\.mozilla\.javascript\..*$</regexp>
|
|
<!-- ysoserial's Myfaces1,2 payload -->
|
|
<regexp>org\.apache\.myfaces\.context\.servlet\.FacesContextImpl$</regexp>
|
|
<regexp>org\.apache\.myfaces\.context\.servlet\.FacesContextImplBase$</regexp>
|
|
<regexp>org\.apache\.myfaces\.el\.CompositeELResolver$</regexp>
|
|
<regexp>org\.apache\.myfaces\.el\.unified\.FacesELContext$</regexp>
|
|
<regexp>org\.apache\.myfaces\.view\.facelets\.el\.ValueExpressionMethodExpression$</regexp>
|
|
<!-- ysoserial's ROME payload -->
|
|
<regexp>com\.sun\.syndication\.feed\.impl\.ObjectBean$</regexp>
|
|
<!-- ysoserial's Spring1,2 payload -->
|
|
<regexp>org\.springframework\.beans\.factory\.ObjectFactory$</regexp>
|
|
<regexp>org\.springframework\.core\.SerializableTypeWrapper\$MethodInvokeTypeProvider$</regexp>
|
|
<regexp>org\.springframework\.aop\.framework\.AdvisedSupport$</regexp>
|
|
<regexp>org\.springframework\.aop\.target\.SingletonTargetSource$</regexp>
|
|
<regexp>org\.springframework\.aop\.framework\.JdkDynamicAopProxy$</regexp>
|
|
<regexp>org\.springframework\.core\.SerializableTypeWrapper\$TypeProvider$</regexp>
|
|
<!-- other trigger gadgets or payloads -->
|
|
<regexp>java\.util\.PriorityQueue$</regexp>
|
|
<regexp>java\.lang\.reflect\.Proxy$</regexp>
|
|
<regexp>java\.util\.Comparator$</regexp>
|
|
<regexp>org\.reflections\.Reflections$</regexp>
|
|
</blacklist>
|
|
<whitelist>
|
|
<regexp>.*</regexp>
|
|
</whitelist>
|
|
</config>
|