JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).
Outdated documentation can be found at
- http://schierlm.users.sourceforge.net/JavaPayload/
- http://schierlm.users.sourceforge.net/J2EEPayload/
- http://schierlm.users.sourceforge.net/SpawnJavaPayload/
and inside this repo.
The current home of this project is http://javapayload.sourceforge.net/ and its source is at http://javapayload.svn.sourceforge.net/.
Since Git does not perform well with huge libraries inside the repository, the required libraries have been left out. They are available as a separate download at
http://github.com/downloads/schierlm/JavaPayload/LibsBundle.zip
You can contact me at [email protected]. Or, just fork and send pull requests. I will try my very best to get them merged into SVN (still a git newbie), or may even switch over to GitHub if contributions get overwhelming :-)