Pyke-Shiro icon indicating copy to clipboard operation
Pyke-Shiro copied to clipboard

复杂请求下的Shiro反序列化利用工具

Results 7 Pyke-Shiro issues
Sort by recently updated
recently updated
newest added

大佬为什么利用链爆破就爆破两个链子就不爆破了 ![Snipaste_2024-11-17_14-26-48](https://github.com/user-attachments/assets/90ab4db2-40b5-4c58-b183-50cc4207e81e)

https://github.com/sma11new/Pyke-Shiro/blob/334c46b0a3b5d00c9da154113e7b5e601b2e0666/src/main/java/com/sma11new/exp/shiro/util/ShiroGCM.java#L37 这里用的是shiro1.2.4的cbc加密方式

利用链使用出错 ![微信图片_20240622003906](https://github.com/sma11new/Pyke-Shiro/assets/102362771/6b30c2c0-5054-4228-87f8-57a11ccfb40d)

![image](https://github.com/sma11new/Pyke-Shiro/assets/124274009/fdbfe098-7471-4bb5-a67a-a9a47b6b0ed9) ![image](https://github.com/sma11new/Pyke-Shiro/assets/124274009/7121ed7a-84b6-4e09-8eb2-343ea137cc25)

java -jar Pyke-Shiro_0.3.jar SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder". SLF4J: Defaulting to no-operation (NOP) logger implementation SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details. MLog initialization issue: slf4j found no binding or...

, zy1KJFZ6eucDxK6nGW0xcQ==]Q==7a36 SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder". SLF4J: Defaulting to no-operation (NOP) logger implementation SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details. MLog initialization issue: slf4j found no binding or threatened...

![image](https://github.com/sma11new/Pyke-Shiro/assets/93892809/8150fb36-16d4-40a7-842a-e7edfd71d94c) 原版的shiro4.7可以正常利用