메뉴
Java deserialization payload generator for common gadget chains (CommonsBeanutils, CC1-CC6). Used as a helper skill to produce serialized Java payloads for delivery via other exploit skills.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Fast HTTP probing and lightweight fingerprinting using ProjectDiscovery httpx. Use for web recon with redirect-awareness and JSON output.
V5 样板 Micro-Skill：Pydantic 入参、micro_executor SDK、落盘 parsed.json、stderr S-06、stdout Agent 摘要 JSON（嵌入 raw_stdout）。
Build a basic understanding of the current project by scanning source code and available docs. Use when user asks for /init, project onboarding, quick repo familiarization, or initial architecture context.
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
Raw HTTP probing with curl. Use for custom method, headers and body requests in recon and validation.
Advanced web path scanner using multithreaded brute-force. Use for discovering hidden files, directories, and endpoints on web servers.
| name | ysoserial |
| description | Java deserialization payload generator for common gadget chains (CommonsBeanutils, CC1-CC6). Used as a helper skill to produce serialized Java payloads for delivery via other exploit skills. |
| metadata | {"openclaw":{"emoji":"🔧","requires":{"bins":["java"],"env":[]},"primaryEnv":null}} |
Generates serialized Java deserialization payloads using ysoserial for a range of common gadget chains.
Any Java application with a vulnerable deserialization endpoint and one of: Commons Collections 1-6, Commons BeanUtils 1, Spring, Groovy, or other supported gadget chain libraries.
Provide params.chain (gadget chain name) and params.cmd (command to embed). Returns a base64-encoded serialized payload ready for delivery.
| Param | Type | Required | Description |
|---|---|---|---|
| chain | string | yes | Gadget chain name (e.g. CommonsBeanutils1, CC6) |
| cmd | string | yes | OS command to embed in the payload |
| format | string | no | Output format: base64 (default) or raw |
| timeout | int | no | Timeout in seconds (default: 30) |
Commonly paired with shiro_exploit, exploit-weblogic, or any raw deserialization endpoint. The generated payload must be delivered over the appropriate protocol (HTTP body, cookie, T3, etc.).
