一些Java RCE 回显测试代码笔记
2023-5-31 09:24:39 Author: Ots安全(查看原文) 阅读量:26 收藏

支持的回显测试代码

  •  Linux通用回显

  •  Windows通用回显

  •  Spring回显

  •  Tomcat通用回显 (Tested on 6.0.10/6.0.53/7.0.34/7.0.54/7.0.70/7.0.96/7.0.104/8.0.18/8.0.32/8.0.48/8.5.12/8.5.30/8.5.56/9.0.16/9.0.33, failed on 7.0.10/7.0.22)

  •  Weblogic (Tested on 10.3.6.0, 12.1.3.0.0)

  •  Websphere (Tested on AppServer V8.5(8.5.5.18), AppServer V9.0(9.0.5.5))

  •  JBoss(Wildfly) (Testd on 8.0.0.Final, 18.0.0.Final, 21.0.0.Beta1)

  •  Resin (Tested on pro-4.0.64, pro-4.0.57, pro-4.0.45, pro-4.0.32, failed on pro-3.1.15)

  •  Jetty (Tested on 9.4.30.v20200611, 9.3.28.v20191105, 9.2.29.v20191105, 9.0.7.v20131107, 8.1.21.v20160908, 7.6.21.v20160908, failed on 8.0.3.v20160908, 7.2.1.v20101111)

  •  全自动挖掘 request 回显

  •  写文件回显

项目地址:https://github.com/feihong-cs/Java-Rce-Echo

感谢您抽出

.

.

来阅读本文

点它,分享点赞在看都在这里


文章来源: http://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247498258&idx=1&sn=456228ec288b8adb4cc9146bf26d67bd&chksm=9badb359acda3a4f0f36ca6b4d636ad688d5386afa681be03a72b4c1f4a6227c92827fea6857#rd
如有侵权请联系:admin#unsafe.sh