说明payload影响版本信息不一定正确问题
This commit is contained in:
54
.gitignore
vendored
54
.gitignore
vendored
@@ -1,4 +1,20 @@
|
||||
# Created by .ignore support plugin (hsz.mobi)
|
||||
# Ant
|
||||
local.properties
|
||||
|
||||
# Maven
|
||||
target/
|
||||
release.properties
|
||||
|
||||
# IntelliJ
|
||||
*.iml
|
||||
*.ipr
|
||||
*.iws
|
||||
.idea/
|
||||
out/
|
||||
|
||||
# Mac
|
||||
.DS_Store
|
||||
|
||||
### Java template
|
||||
# Compiled class file
|
||||
*.class
|
||||
@@ -20,39 +36,3 @@
|
||||
*.zip
|
||||
*.tar.gz
|
||||
*.rar
|
||||
|
||||
# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
|
||||
hs_err_pid*
|
||||
|
||||
|
||||
### Example user template template
|
||||
### Example user template
|
||||
|
||||
# IntelliJ project files
|
||||
.idea
|
||||
*.iml
|
||||
out
|
||||
gen
|
||||
target
|
||||
|
||||
# Mac os
|
||||
.DS_Store
|
||||
README.md
|
||||
pom.xml
|
||||
target/archive-tmp/
|
||||
target/classes/BasicDataSource1.tpl
|
||||
target/classes/BasicDataSource2.tpl
|
||||
target/classes/JdbcRowSetImpl1.tpl
|
||||
target/classes/JdbcRowSetImpl2.tpl
|
||||
target/classes/JdbcRowSetImpl3.tpl
|
||||
target/classes/JdbcRowSetImpl4.tpl
|
||||
target/classes/JdbcRowSetImpl5.tpl
|
||||
target/classes/JndiDataSourceFactory1.tpl
|
||||
target/classes/SimpleJndiBeanFactory1.tpl
|
||||
target/classes/TemplatesImpl1.tpl
|
||||
target/classes/TemplatesImpl2.tpl
|
||||
target/classes/banner
|
||||
target/generated-sources/
|
||||
target/maven-archiver/
|
||||
target/maven-status/
|
||||
src/test/
|
||||
|
||||
@@ -53,6 +53,9 @@ Available payload types:
|
||||
TemplatesImpl2 local 1.2.2.1-1.2.2.4 xalan:2.7.2(need Feature.SupportNonPublicField)
|
||||
```
|
||||
|
||||
## 0x04 Notice
|
||||
* 帮助信息所说明的payload可利用的Fastjson版本,不一定正确。后续测试更正!
|
||||
|
||||
## 0x04 Reference
|
||||
* https://github.com/frohoff/ysoserial
|
||||
* https://github.com/mbechler/marshalsec
|
||||
|
||||
Reference in New Issue
Block a user