1.4.0

Added

• Integrated some FastjsonPayload @iSafeBlue
• Added the following Expression Injection Payloads:
  • FreeMarker
  • JXPath @unam4
  • Thymeleaf @unam4
  • Aviator @ReaJason
  • JINJava @ReaJason
  • Velocity @ReaJason
• When exploit modules are generated, they automatically check if the service port is open, and if not, automatically
  start it.

Changed

• java-chains migrated to the vulhub project.
• Project renamed from web-chains to java-chains.
• class-obf obfuscation project updated from v1.4.0 to v1.5.0.
• Removed WriteFile bytecode.
• Removed the "delete" option from DownloadExec and WriteFileExec bytecode gadgets.
• Gadget IP parameter now defaults to 127.0.0.1.

中文 CHANGELOG

https://github.com/vulhub/java-chains/blob/main/CHANGELOG.zh-cn.md