3.0增加了几种回显payload，增加了基于Filter（需要对冰蝎客户端pageContext进行改造）和servlet（部分环境需要把参数据进行URL转码）内存冰蝎的支持。(release提供下载)
2.0增加了回显，及100keys,20keys扫描选项，
利用了burp内置的 dnslog api（Collaborator） 基于ysoserial的Gadgets URLDNS进行DNS查询验证此漏洞!
#release中提供下载
-
Notifications
You must be signed in to change notification settings - Fork 18
bigsizeme/shiro-check
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Shiro反序列化回显利用、内存shell、检查 Burp插件
Resources
Stars
Watchers
Forks
Packages 0
No packages published