adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Clean up formatting and wording in the final section

Browse Source
This commit is contained in:
Aaron Soto
2018-12-19 11:23:52 -06:00
parent 6090d8a627
commit d2d8bcbc31
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Generating-`ysoserial`-Java-serialized-objects.md
+2 -1
View File
@@ -38,9 +38,10 @@ The function takes two parameters, a template name and a command:
<details>
<summary>Click to expand</summary>
On occasion, Metasploit maintainers may want to re-run the script generation to incorporate new Java serialized objects from the ysoserial tool.
To avoid invoking Java (and all its dependencies), the serialized objects are generated based on a JSON file. The JSON file can be refreshed using a standalone Ruby script, which comes prepackaged with a Docker image that handles downloading `ysoserial`. For more information, refer to `tools/payloads/ysoserial`. An example run looks like:
To avoid invoking Java (and all its dependencies) at runtime, the serialized objects are generated and cached within a JSON file. The JSON file can be refreshed using a standalone Ruby script, which comes prepackaged with a Docker image that handles downloading `ysoserial` and necessary dependencies. The script, `Dockerimage` and a high-level `runme.sh` script is stored within `tools/payloads/ysoserial`. An example run looks like:
```
$ cd ~/git/r7/metasploit-framework/tools/payloads/ysoserial