deserialization

func GenerateDotNetGadget ¶ added in v0.8.5

func GenerateDotNetGadget(gadget, cmd, formatter, encoding string) string

GenerateDotNetGadget generates a .NET deserialization gadget with a command/URL, formatter and encoding.

Gadgets (Command-based): windows-identity, claims-principal, dataset, dataset-type-spoof, object-data-provider, text-formatting-runproperties, type-confuse-delegate Gadgets (URL-based): object-ref, veeam-crypto-keyinfo Gadgets (XML-based): dataset-xmldiffgram Gadgets (DLL-based): axhost-state-dll, dll-reflection Gadgets (ViewState): viewstate - format: "base64_inner_payload:machineKey:generator" Gadgets (Prebuilt): Any other name loads via ReadGadget

Formatters: binary/binaryformatter (default), soap/soapformatter, soapwithexceptions/soap-exceptions, los/losformatter Encodings: raw, hex, gzip, gzip-base64, base64-raw, default (URL-safe base64)

func GenerateJavaGadget ¶

func GenerateJavaGadget(gadget, cmd, encoding string) string

GenerateJavaGadget generates a gadget with a command and encoding. If blank, by default gadgets are returned base64 encoded.