Altserialization
plugin
Generates payload for HttpStaticObjectsCollection or SessionStateItemCollection
Declared metadata, not a runtime result. How to read evidence.
.\ysonet.exe -p Altserialization -hTarget declarations
Runtime tokens: net-fx-2.0, net-fx-3.0, net-fx-3.5, net-fx-4.0, net-fx-4.5, net-fx-4.5.1, net-fx-4.5.2, net-fx-4.6, net-fx-4.6.1, net-fx-4.6.2, net-fx-4.7, net-fx-4.7.1, net-fx-4.7.2, net-fx-4.8, net-fx-4.8.1.
Structured formatter and requirement metadata is not declared. Read the description and option help for conditions.
Options (10)
| Option | Help | Default | Required |
|---|---|---|---|
M|mode= | the payload mode: HttpStaticObjectsCollection or SessionStateItemCollection. Default: HttpStaticObjectsCollection Suggested values: HttpStaticObjectsCollection, SessionStateItemCollection. | HttpStaticObjectsCollection | false |
o|output= | the output format (raw|base64). Suggested values: raw, base64. | Not declared | false |
c|command= | the command to be executed Required. | Not declared | true |
g|gadget= | a gadget chain that supports BinaryFormatter. Leave it empty to use the gadget each mode has always used: TextFormattingRunProperties for HttpStaticObjectsCollection, TypeConfuseDelegate for SessionStateItemCollection. Values: see --list gadgets. | Not declared | false |
t|test | whether to run payload locally. Default: false | false | false |
minify | Whether to minify the payloads where applicable (experimental). Default: false | false | false |
ust|usesimpletype | This is to remove additional info only when minifying and FormatterAssemblyStyle=Simple. Default: true | true | false |
rawcmd | Command will be executed as is without `cmd /c ` being appended (anything after the first space is an argument). Default value: "false". | false | false |
legacyfx | Target the .NET Framework 2.0/3.0/3.5 (CLR v2) generation. This reaches the GADGET only; both wire frames this plugin writes name no framework assembly, so they need no rewriting. Default: false | false | false |
i-understand-dos | Acknowledge that a denial-of-service gadget can disrupt or terminate the target process. It is required to generate one and is not needed by any other gadget. Default value: "false". | false | false |
Credit: Soroush Dalili