说明payload影响版本信息不一定正确问题

This commit is contained in:
c0ny1
2019-07-20 14:10:32 +08:00
parent 361a5cd049
commit 8f2274d29c
2 changed files with 20 additions and 37 deletions

54
.gitignore vendored
View File

@@ -1,4 +1,20 @@
# Created by .ignore support plugin (hsz.mobi)
# Ant
local.properties
# Maven
target/
release.properties
# IntelliJ
*.iml
*.ipr
*.iws
.idea/
out/
# Mac
.DS_Store
### Java template
# Compiled class file
*.class
@@ -20,39 +36,3 @@
*.zip
*.tar.gz
*.rar
# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
hs_err_pid*
### Example user template template
### Example user template
# IntelliJ project files
.idea
*.iml
out
gen
target
# Mac os
.DS_Store
README.md
pom.xml
target/archive-tmp/
target/classes/BasicDataSource1.tpl
target/classes/BasicDataSource2.tpl
target/classes/JdbcRowSetImpl1.tpl
target/classes/JdbcRowSetImpl2.tpl
target/classes/JdbcRowSetImpl3.tpl
target/classes/JdbcRowSetImpl4.tpl
target/classes/JdbcRowSetImpl5.tpl
target/classes/JndiDataSourceFactory1.tpl
target/classes/SimpleJndiBeanFactory1.tpl
target/classes/TemplatesImpl1.tpl
target/classes/TemplatesImpl2.tpl
target/classes/banner
target/generated-sources/
target/maven-archiver/
target/maven-status/
src/test/

View File

@@ -53,6 +53,9 @@ Available payload types:
TemplatesImpl2 local 1.2.2.1-1.2.2.4 xalan:2.7.2(need Feature.SupportNonPublicField)
```
## 0x04 Notice
* 帮助信息所说明的payload可利用的Fastjson版本不一定正确。后续测试更正
## 0x04 Reference
* https://github.com/frohoff/ysoserial
* https://github.com/mbechler/marshalsec