feat: support hessian packer (#36)

This commit is contained in:
ReaJason
2025-02-20 22:28:34 +08:00
parent 4a7301c7f0
commit f3ced55d8a
22 changed files with 349 additions and 49 deletions
@@ -78,6 +78,7 @@ public class ShellAssertionTool {
} else {
content = packer.getInstance().pack(generateResult);
assertInjectIsOk(url, shellType, shellTool, content, packer, container);
log.info("send inject payload successfully");
}
switch (shellTool) {
@@ -247,6 +248,8 @@ public class ShellAssertionTool {
case JavaCommonsBeanutils18 -> VulTool.postData(url + "/java_deserialize/cb183", content);
case JavaCommonsBeanutils19 -> VulTool.postData(url + "/java_deserialize/cb194", content);
case JavaCommonsBeanutils110 -> VulTool.postData(url + "/java_deserialize/cb110", content);
case HessianDeserialize -> VulTool.postData(url + "/hessian", content);
case Hessian2Deserialize -> VulTool.postData(url + "/hessian2", content);
case Base64 -> VulTool.postData(url + "/b64", content);
case XxlJob -> VulTool.xxlJobExecutor(url + "/run", content);
default -> throw new IllegalStateException("Unexpected value: " + packer);