Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Java 反序列化漏洞(四) - FileUpload/Wicket/MozillaRhino/Myfaces | 素十八 #32

Open
su18 opened this issue Aug 4, 2021 · 2 comments

Comments

@su18
Copy link
Owner

su18 commented Aug 4, 2021

https://su18.org/post/ysoserial-su18-4/#mozillarhino1

你救赎的人 终将成为你的光

@75ACOL
Copy link

75ACOL commented Dec 20, 2022

你好 没有demo 和完整的POC 尝试下么

@su18
Copy link
Owner Author

su18 commented Dec 27, 2022

@75ACOL
你好 没有demo 和完整的POC 尝试下么

漏洞利用项目在: https://github.com/su18/ysoserial
漏洞环境网上有很多,随便搭一个就行

# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

2 participants