Mirrors_Framework/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2026-05-27 17:55:33 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

GP-6719 Improved Ghidra Server RMI deserialization filter and added client-side module-based RMI deserialization filter.

Browse Source
This commit is contained in:
ghidra1
2026-05-04 10:22:51 -04:00
parent 3366060868
commit e04d9ec716
45 changed files with 1981 additions and 692 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Ghidra/RuntimeScripts/Common/server/server.conf
+9 -11
View File
@@ -87,17 +87,15 @@ wrapper.java.additional.11=-Ddb.buffers.DataBuffer.compressedOutput=true
# timeouts to their maximum values.
#wrapper.java.debug.port=18200
# Uncomment to allow VisualVM Profiling to avoid "Rejected class serialization..." errors
# NOTE: A Java class serialization filter is added for RMI security assurance and should remain
# enabled during normal use.
#wrapper.java.additional.16=-Dghidra.server.serialization.filter.disabled=true
# Uncomment to enable remote use of VisualVM for profiling
# See JMX documentation for more information: http://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html
#wrapper.java.additional.17=-Dcom.sun.management.jmxremote.port=9010
#wrapper.java.additional.18=-Dcom.sun.management.jmxremote.local.only=false
#wrapper.java.additional.19=-Dcom.sun.management.jmxremote.authenticate=false
#wrapper.java.additional.20=-Dcom.sun.management.jmxremote.ssl=false
# Uncomment additional java properties below to enable remote use of VisualVM for profiling.
# See JMX documentation for more information:
# http://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html
# When JMX over RMI is in use the Ghidra Server serialization filters defined by
# file Ghidra/GhidraServer/data/serial.filter may need adjustment.
#wrapper.java.additional.16=-Dcom.sun.management.jmxremote.port=9010
#wrapper.java.additional.17=-Dcom.sun.management.jmxremote.local.only=false
#wrapper.java.additional.18=-Dcom.sun.management.jmxremote.authenticate=false
#wrapper.java.additional.19=-Dcom.sun.management.jmxremote.ssl=false
# YAJSW will by default assume a POSIX spawn for Linux and Mac OS X systems, unfortunately it has
# not yet been implemented for Mac OS X. The default process support within YAJSW for Mac OS X is