git
ask
hub
Privacy
Terms
Sign in with GitHub
vulhub/yaml-payload
↗
Simplify and Visualize This Repo
Scan the safety of this repo
Self Host this repo
Check out more work of Developer: vulhub
Ask anything about this repo to start.
I have cloned the yaml-payload repo. Walk me through the steps to customize the Java source file with my own commands, compile it into a JAR, and host it so a vulnerable SnakeYAML application will fetch and execute it.
Help me set up a simple local web server to host the compiled JAR file from yaml-payload so I can test a Java application that processes untrusted YAML input.
Show me the exact YAML snippet I should send to a target application that uses SnakeYAML for configuration so it downloads and runs my payload JAR from my web server.
Explain how I can use yaml-payload to safely test my own Java microservice for SnakeYAML deserialization vulnerabilities in a local development environment.
Full explanation on explaingit →
📎
Send
By chatting or signing in you agree to the
Terms
and chat-message logging (revocable in
History
).