feat: support deserialize packer (but only CB4)

2026-09-24 07:51:52 +08:00 · 2024-12-10 21:07:41 +08:00
parent 9360408f6d
commit 6020e5eaa9
37 changed files with 690 additions and 62 deletions
@@ -35,6 +35,15 @@
        <url-pattern>/js</url-pattern>
    </servlet-mapping>

+    <!-- 用于测试 Java 反序列化 -->
+    <servlet>
+        <servlet-name>java-deserialize</servlet-name>
+        <servlet-class>JavaReadObjServlet</servlet-class>
+    </servlet>
+    <servlet-mapping>
+        <servlet-name>java-deserialize</servlet-name>
+        <url-pattern>/java_deserialize</url-pattern>
+    </servlet-mapping>

    <!-- 测试 listener 内存马 -->
    <!--    <listener>-->