ermir 0.1.0 → 0.1.1

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 70a60a0d94448d7ca57eee0ea42b0aca52875c9f925c4ff652ee25842562af79
4
- data.tar.gz: 41209eb545542e9caebeb7e06d30a98f11dea69898c37ee6738bdd176306fab7
3
+ metadata.gz: 6b6619e86d16babbb612f54ed5ef9591f0126ecdeb96f1f045d088c0914c8f75
4
+ data.tar.gz: 38aa4bf436587593cda76c291735814bc112a56854153e08616763a78632f030
5
5
  SHA512:
6
- metadata.gz: c53e30e5aeb8a4d4f0772ac418bf874aa942afedb0287eab07fc301024e70926872bcd1bef69f0ca81a7c15b3ea62c7137590ecb04394ef5d04588ce90740837
7
- data.tar.gz: 666af55e2a7d2ae0c4fc0152c68a155549883c234da18f3745e2a3677c2e21d6a1abd79c73a93667680164bb04c3ac6504246a826e27a680c06978f670b33201
6
+ metadata.gz: f8341bb0f078b93b42a207a84a0392ab014df7a51b315a90f43ac0d8d73ba5663f2c0da85d8112cfbe580b3d41b3493ed19031118e90a37f4333c40205cfa824
7
+ data.tar.gz: aa8c74855ebffe5b5e3cf36714e5f034f27c96caac984bf3d555ead91633689c0e152b42ed7c68afe323f9bf5dfae851d7d739ccc795004c43ef79a16598f1c9
data/README.md CHANGED
@@ -22,7 +22,8 @@ or clone the repo and build the gem:
22
22
  Ermir is a cli gem, it comes with 2 cli files `ermir` and `gadgetmarshal`, `ermir` is the actual gem and the latter is just a pretty interface to [GadgetMarshaller.java](https://github.com/hakivvi/ermir/blob/main/helpers/gadgetmarshaller/GadgetMarshaller.java) file which rewrites the gadgets of [Ysoserial](https://github.com/frohoff/ysoserial) to match `MarshalInputStream` requirements, the output should be then piped into `ermir` or a file, in case of custom gadgets use `MarshalOutputStream` instead of `ObjectOutputStream` to write your serialized object to the output stream.
23
23
 
24
24
  `ermir` usage:
25
- ```text
25
+ ```console
26
+ ➜ ~ ermir
26
27
  Ermir by @hakivvi * https://github.com/hakivvi/ermir.
27
28
  Info:
28
29
  Ermir is a Rogue/Evil RMI Registry which exploits unsecure Java deserialization on any Java code calling standard RMI methods on it.
@@ -36,7 +37,8 @@ Example:
36
37
  $ gadgetmarshal /path/to/ysoserial.jar Groovy1 calc.exe | ermir --listen 127.0.0.1:1099 --pipe
37
38
  ```
38
39
  `gadgetmarshal` usage:
39
- ```text
40
+ ```console
41
+ ➜ ~ gadgetmarshal
40
42
  Usage: gadgetmarshal /path/to/ysoserial.jar Gadget1 cmd (optional)/path/to/output/file
41
43
  ```
42
44
 
data/ermir.gemspec CHANGED
@@ -11,7 +11,7 @@ Gem::Specification.new do |spec|
11
11
  spec.description = "Ermir is an Evil/Rogue RMI Registry, it exploits unsecure deserialization on any Java code calling standard RMI methods on it (list()/lookup()/bind()/rebind()/unbind())."
12
12
  spec.homepage = "https://github.com/hakivvi/ermir"
13
13
  spec.license = "MIT"
14
- spec.required_ruby_version = ">= 3.0.3"
14
+ spec.required_ruby_version = ">= 3.0.0"
15
15
 
16
16
  spec.metadata["homepage_uri"] = spec.homepage
17
17
  spec.metadata["source_code_uri"] = spec.homepage
data/lib/ermir/version.rb CHANGED
@@ -1,4 +1,4 @@
1
1
  # frozen_string_literal: true
2
2
  module Ermir
3
- VERSION = "0.1.0"
3
+ VERSION = "0.1.1"
4
4
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: ermir
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
4
+ version: 0.1.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - hakivvi
@@ -81,7 +81,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
81
81
  requirements:
82
82
  - - ">="
83
83
  - !ruby/object:Gem::Version
84
- version: 3.0.3
84
+ version: 3.0.0
85
85
  required_rubygems_version: !ruby/object:Gem::Requirement
86
86
  requirements:
87
87
  - - ">="