From 2fa7b51a03af455b6f6c56550cb39cfd927df718 Mon Sep 17 00:00:00 2001 From: Alex Lauerman Date: Fri, 28 Oct 2016 08:43:07 -0500 Subject: [PATCH 1/2] Updated usage to include RMI exploit Updated usage output... $java -jar target/ysoserial-0.0.5-SNAPSHOT-all.jar Y SO SERIAL? Generate Payload: java -jar ysoserial-[version]-all.jar [payload type] '[command to execute]' RMI Exploit: java -jar ysoserial-[version]-all.jar ysoserial.exploit.RMIRegistryExploit [targetIP] 1099 [payload type] '[command to execute]' Available payload types: ... --- src/main/java/ysoserial/GeneratePayload.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/ysoserial/GeneratePayload.java b/src/main/java/ysoserial/GeneratePayload.java index 092d7ead..7162b0e3 100644 --- a/src/main/java/ysoserial/GeneratePayload.java +++ b/src/main/java/ysoserial/GeneratePayload.java @@ -49,7 +49,8 @@ public static void main(final String[] args) { private static void printUsage() { System.err.println("Y SO SERIAL?"); - System.err.println("Usage: java -jar ysoserial-[version]-all.jar [payload type] '[command to execute]'"); + System.err.println("Generate Payload: java -jar ysoserial-[version]-all.jar [payload type] '[command to execute]'"); + System.err.println("RMI Exploit: java -jar ysoserial-[version]-all.jar ysoserial.exploit.RMIRegistryExploit [targetIP] 1099 [payload type] '[command to execute]'"); System.err.println("\tAvailable payload types:"); final List> payloadClasses = new ArrayList>(ObjectPayload.Utils.getPayloadClasses()); From 0e8c297826f392974f6bac83cc6d61c659bf1246 Mon Sep 17 00:00:00 2001 From: Alex Lauerman Date: Sun, 30 Oct 2016 20:37:58 -0500 Subject: [PATCH 2/2] Updated usage Changed -jar to -cp. --- src/main/java/ysoserial/GeneratePayload.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/ysoserial/GeneratePayload.java b/src/main/java/ysoserial/GeneratePayload.java index 7162b0e3..716bde64 100644 --- a/src/main/java/ysoserial/GeneratePayload.java +++ b/src/main/java/ysoserial/GeneratePayload.java @@ -50,7 +50,7 @@ public static void main(final String[] args) { private static void printUsage() { System.err.println("Y SO SERIAL?"); System.err.println("Generate Payload: java -jar ysoserial-[version]-all.jar [payload type] '[command to execute]'"); - System.err.println("RMI Exploit: java -jar ysoserial-[version]-all.jar ysoserial.exploit.RMIRegistryExploit [targetIP] 1099 [payload type] '[command to execute]'"); + System.err.println("RMI Exploit: java -cp ysoserial-[version]-all.jar ysoserial.exploit.RMIRegistryExploit [targetIP] 1099 [payload type] '[command to execute]'"); System.err.println("\tAvailable payload types:"); final List> payloadClasses = new ArrayList>(ObjectPayload.Utils.getPayloadClasses());