Skip to content

Commit d61cef6

Browse files
committed
🆕 新增 log4j2,fastjson,以及 base64 脚本
1 parent 31c90e4 commit d61cef6

4 files changed

Lines changed: 3 additions & 3 deletions

File tree

‎JavaSecurity/Log4j/BypassRc1/src/main/java/BypassRc1EXP.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88

99
import java.util.function.LongFunction;
1010

11-
// 绕过 rc1 的 EXP,Windows 无法触发
11+
// 鸡肋绕过 rc1 的 EXP,Windows 无法触发
1212
public class BypassRc1EXP {
1313
public static void main(String[] args) {
1414
Logger logger = LogManager.getLogger(LongFunction.class);

‎JavaSecurity/base64Convert.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
import base64
22

3-
# base64 encode EXP
3+
# base64 encode EXP, easy to attack
44
temp_file = open("ser.bin", "rb+")
55
f = temp_file.read()
66
result = base64.b64encode(f)

‎JavaSecurity/ser.bin‎

-1.1 KB
Binary file not shown.

‎README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,7 @@ LDAP 是包含在 JNDI 里面的
109109

110110
## Log4j2
111111

112-
112+
- [Log4j2复现](https://drun1baby.github.io/2022/08/09/Log4j2复现/)
113113

114114
## Weblogic
115115

0 commit comments

Comments
 (0)