Skip to content

Lonely-night/fastjsonVul

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

fastjson <= 1.2.80 RCE 漏洞复现

##利用条件

  • fastjson版本: 1.2.76 <= fastjson < 1.2.83
  • 存在groovy依赖

##复现步骤 1.编译attack 模块为 attack-1.jar包

2.在attack-1.jar包所在的目录下执行启用http服务。

python -m SimpleHTTPServer 8433

3.运行poc

image

About

fastjson 80 远程代码执行漏洞复现

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages