From 8d2834a5aafe8405112c0778873223f17e14a419 Mon Sep 17 00:00:00 2001 From: Eric Gruber Date: Tue, 8 Mar 2016 13:19:06 -0600 Subject: [PATCH 1/2] Update README.md --- README.md | 23 ++++++++++++++++++++++- 1 file changed, 22 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 7224ec2..0c1d095 100644 --- a/README.md +++ b/README.md @@ -1 +1,22 @@ -# JavaSerialKiller \ No newline at end of file +# Java Serial Killer +========= + +Burp extension to perform Java Deserialization Attacks using the ysoserial payload generator tool. + +Blog https://blog.netspi.com/java-deserialization-attacks-burp/ + +Chris Frohoff's ysoserial (https://github.com/frohoff/ysoserial) + +Requirements: Java 8 + +Download from the Releases tab: https://github.com/NetSPI/Burp-Extensions/releases + +Right-click on a request and select Send to Java Serial Killer + +![alt tag](https://blog.netspi.com/wp-content/uploads/2016/03/img_56d5dddfa31e3.png) + +Select the payload that you want, type in the command, and press Serialize + +![alt tag](https://blog.netspi.com/wp-content/uploads/2016/03/img_56d5de37cf801.png) + +From here you can press Go button to send the request or right-click and send it to another tool. From db1e6e045f91d77a94253c6fd7087a97d9cea45e Mon Sep 17 00:00:00 2001 From: Eric Gruber Date: Tue, 8 Mar 2016 13:19:14 -0600 Subject: [PATCH 2/2] Update README.md --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index 0c1d095..a150509 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,4 @@ # Java Serial Killer -========= Burp extension to perform Java Deserialization Attacks using the ysoserial payload generator tool.