pwntester / ysoserial.net

Deserialization payload generator for a variety of .NET formatters

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Gadgets for Mono?

gsuberland opened this issue · comments

Are there any gadgets out there for Mono? I'd be willing to implement them but I can't find any research into attacking deserialization on Mono, or Unity for that matter. Target platform is Windows.

Im afraid there are no mono gadgets at the moment. They are very welcome :)

commented

Just in case someone stumbles across this issue like I did, the solution is to tweak TypeConfuseDelegate to work with mono (and Unity!). I've detailed the patch here: https://gist.github.com/denandz/aa2b7bd145c95b430cfc0386a9e6ce40

@pwntester - I'll wrap this up into a new gadget and send you through a pull request when I get some spare time

Awesome, thanks

you can close #86

Actually no. Your gadget is just not working anymore.

The gadget had a bug which I am going to fix in the next release to work with the latest version of Mono.