The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Lab: Exploiting Java deserialization with Apache Commons

Oriola | Last updated: May 31, 2023 02:11PM UTC

I downloaded ysoserial-all.jar and im using java version 17. Anytime i try running the payload i get this error Error while generating or serializing payload java.lang.IllegalAccessError: class ysoserial.payloads.util.Gadgets (in unnamed module @0x4015e7ec) cannot access class com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl (in module java.xml) because module java.xml does not export com.sun.org.apache.xalan.internal.xsltc.trax to unnamed module @0x4015e7ec

Ben, PortSwigger Agent | Last updated: May 31, 2023 04:40PM UTC