diff --git a/README.md b/README.md index 84fb79d..c10cbaa 100644 --- a/README.md +++ b/README.md @@ -1,16 +1,16 @@ -
-
+
+
-
-
-
+
+
+
+
-
可以同时当做 ysoserial 与 JNDIExploit 使用的工具,同时具备多种JNDI高版本、WAF、RASP的Bypass功能
+可以同时当做 ysoserial 与 JNDIExploit 使用的工具,同时具备多种JNDI高版本、WAF、RASP的Bypass功能
-中文文档 | English
+中文文档 | English
## 🚀 上手指南 @@ -53,7 +53,7 @@ ## ✨ CTStack -
+
JYso 现已加入 [CTStack](https://stack.chaitin.com/tool/detail/1303) 社区
diff --git a/src/main/java/com/qi4l/JYso/controllers/BasicController.java b/src/main/java/com/qi4l/JYso/controllers/BasicController.java
index d418aea..c80222c 100644
--- a/src/main/java/com/qi4l/JYso/controllers/BasicController.java
+++ b/src/main/java/com/qi4l/JYso/controllers/BasicController.java
@@ -5,7 +5,6 @@ import com.qi4l.JYso.exceptions.IncorrectParamsException;
import com.qi4l.JYso.exceptions.UnSupportedPayloadTypeException;
import com.qi4l.JYso.gadgets.Config.Config;
import com.qi4l.JYso.gadgets.utils.Gadgets;
-import com.qi4l.JYso.gadgets.utils.InjShell;
import com.qi4l.JYso.gadgets.utils.Utils;
import com.qi4l.JYso.gadgets.utils.handle.ClassNameHandler;
import com.qi4l.JYso.template.Meterpreter;
diff --git a/src/main/java/com/qi4l/JYso/exploit/RMIBindExploit.java b/src/main/java/com/qi4l/JYso/exploit/RMIBindExploit.java
index a852c36..48f0db7 100644
--- a/src/main/java/com/qi4l/JYso/exploit/RMIBindExploit.java
+++ b/src/main/java/com/qi4l/JYso/exploit/RMIBindExploit.java
@@ -18,7 +18,7 @@ import java.rmi.server.Operation;
import java.rmi.server.RemoteObject;
import java.rmi.server.RemoteRef;
import java.util.*;
-
+@SuppressWarnings({"rawtypes", "unchecked","unused"})
public class RMIBindExploit {
diff --git a/src/main/java/com/qi4l/JYso/gadgets/AspectJWeaver.java b/src/main/java/com/qi4l/JYso/gadgets/AspectJWeaver.java
index 7462522..c6e03cc 100644
--- a/src/main/java/com/qi4l/JYso/gadgets/AspectJWeaver.java
+++ b/src/main/java/com/qi4l/JYso/gadgets/AspectJWeaver.java
@@ -11,11 +11,11 @@ import org.apache.commons.collections.map.LazyMap;
import java.io.Serializable;
import java.lang.reflect.Constructor;
-import java.lang.reflect.Field;
-import java.util.HashMap;
-import java.util.HashSet;
import java.util.Map;
+import static com.qi4l.JYso.gadgets.AspectJWeaver2.getSerializableCC6;
+
+
/**
* Gadget chain:
* HashSet.readObject()
@@ -37,10 +37,9 @@ import java.util.Map;
* ...
*/
-@SuppressWarnings({"rawtypes", "unchecked"})
+@SuppressWarnings("unused")
@Dependencies({"org.aspectj:aspectjweaver:1.9.2", "commons-collections:commons-collections:3.2.2"})
@Authors({Authors.JANG})
-
public class AspectJWeaver implements ObjectPayload