GitHub - Lonely-night/fastjson_gadgets_scanner
2019-09-17 09:30:01 Author: github.com(查看原文) 阅读量:240 收藏

Join GitHub today

GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.

Sign up

No description, website, or topics provided.

Python Java PureBasic

Permalink

Type Name Latest commit message Commit time
Failed to load latest commit information.
.idea first commit Sep 1, 2019
src/main/java/poc first commit Sep 1, 2019
2.py first commit Sep 1, 2019
README.md first commit Sep 1, 2019
__init__.py first commit Sep 1, 2019
decomplie_jar.py first commit Sep 1, 2019
fastjson_gadgets_scanner.iml first commit Sep 1, 2019
lib.py first commit Sep 1, 2019
pom.xml first commit Sep 1, 2019
scanner.py first commit Sep 1, 2019

##python decomplie_jar 反编译本地jar

scanner 扫描反编译生成的源文件

fastjosn 两个 RCE gadgets

###CommonsConfiguration poc CommonsConfiguration 依赖

   <dependency>
        <groupId>commons-configuration</groupId>
       <artifactId>commons-configuration</artifactId>
        <version>1.10</version>
   </dependency>

Ojdbc14

Ojdbc14 依赖

  <dependency>
       <groupId>oracle</groupId>
      <artifactId>ojdbc14</artifactId>
      <version>10.2.0.2</version>
  </dependency>
   <dependency>
       <groupId>javax.resource</groupId>
       <artifactId>javax.resource-api</artifactId>
       <version>1.7.1</version>
  </dependency>

文章来源: https://github.com/Lonely-night/fastjson_gadgets_scanner
如有侵权请联系:admin#unsafe.sh