Interface IPayloadProvider

  • All Known Implementing Classes:
    DefaultProvider

    public interface IPayloadProvider
    The IPayloadProvider interface is used during all rmg actions that send payload objects to the remote server. This includes all actions that perform deserialization attacks, but also the bind, rebind and unbind actions. Implementors are expected to implement the getPayloadObject function, that is called to obtain the actual payload object. The function takes the current rmg action (in case you want to provide different gadgets for different calls) and the gadget name and gadget arguments that were specified on the command line. This interface is implemented by rmg's DefaultProvider class by default.
    Author:
    Tobias Neitzel (@qtc_de)
    • Method Detail

      • getPayloadObject

        Object getPayloadObject​(Operation action,
                                String name,
                                String args)
        Provide a payload object for deserialization attacks.
        Parameters:
        action - the current RMG action that requested the gadget
        name - the name of the gadget being requested
        args - the arguments provided for the gadget
        Returns:
        a payload object to use for deserialization attacks