feat: support deserialize packer (but only CB4)

2026-09-26 00:41:52 +08:00 · 2024-12-10 21:07:41 +08:00
parent 9360408f6d
commit 6020e5eaa9
37 changed files with 690 additions and 62 deletions
@@ -29,6 +29,17 @@
        <url-pattern>/upload</url-pattern>
    </servlet-mapping>

+    <!-- 用于测试 Java 反序列化 -->
+    <servlet>
+        <servlet-name>java-deserialize</servlet-name>
+        <servlet-class>JavaReadObjServlet</servlet-class>
+    </servlet>
+    <servlet-mapping>
+        <servlet-name>java-deserialize</servlet-name>
+        <url-pattern>/java_deserialize</url-pattern>
+    </servlet-mapping>
+
+

    <!-- 用于调试 filter 内存马 -->
    <!--    <filter>-->