archive/java-memshell-generator
1
0
Fork 0
mirror of https://github.com/pen4uin/java-memshell-generator.git synced 2026-09-22 01:30:43 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

修复 snakeyaml loadJar 漏洞利用封装 bug（thx @Ch1ngg）

Browse Source
This commit is contained in:
pen4uin
2024-07-23 23:03:41 +08:00
parent ce1be0dda9
commit 70c7b7013d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
jmg-core/src/main/java/jmg/core/util/CtClassUtil.java
+1 -1
View File
@@ -62,6 +62,6 @@ public class CtClassUtil {
// snakeyaml loadJar 的利用需要实现 ScriptEngineFactory 接口 // snakeyaml loadJar 的利用需要实现 ScriptEngineFactory 接口
public void applySnakeYamlScriptEngineFactory() throws Exception { public void applySnakeYamlScriptEngineFactory() throws Exception {
config.setImplementsScriptEngineFactory(true); config.setImplementsScriptEngineFactory(true);
JavassistUtil.addAnnotation(ctClass, "javax.script.ScriptEngineFactory"); JavassistUtil.implementInterface(ctClass, "javax.script.ScriptEngineFactory");
} }
} }