wh1t3p1g / ysomap

A helpful Java Deserialization exploit framework.
Apache License 2.0
1.17k stars 150 forks source link

CommonsCollections3 生成POC时 出现 Bullet Type Not Match 错误 #57

Closed winezer0 closed 8 months ago

winezer0 commented 8 months ago

ysomap > use payload CommonsCollections3

You can choose bullets: [TransformerBullet, TransformerWithJNDIBullet, TransformerWithSleepBullet, TransformerWithURLClassLoaderBullet, TransformerWithFileWriteBullet]

ysomap payload(CommonsCollections3) > use bullet TransformerBullet ysomap payload(CommonsCollections3) bullet(TransformerBullet) > set command whoami ysomap payload(CommonsCollections3) bullet(TransformerBullet) > run

[+] generate CommonsCollections3 success, plz seepayload.CommonsCollections3.TransformerBullet.ser [+] generate payload(CommonsCollections3) started!

Bullet Type Not Match; Error TYPE: class [Lorg.apache.commons.collections.Transformer;

使用TransformerWithSleepBullet 和 TransformerBullet 都是提示错误 “Bullet Type Not Match”

image

winezer0 commented 8 months ago

当前版本是0.15

winezer0 commented 8 months ago

发现CC3这个要求的环境是CC4,需要set version 4,该错误是我的使用问题