JNDI-Injection-Bypass icon indicating copy to clipboard operation
JNDI-Injection-Bypass copied to clipboard

推荐一个更通用的groovy shell script

Open feihong-cs opened this issue 4 years ago • 0 comments

在参考您的代码进行测试时,测试失败,仔细看了下,发现您的payload似乎只能针对linux,所以我在windows下进行测试自然无法测试成功。但是通过搜索资料,我发现似乎有一种更为通用的方法,可以兼容windows,代码如下,希望对您有用

if (System.properties['os.name'].toLowerCase().contains('windows')) {
    ['cmd','/C', '${cmd}'].execute();
} else {
    ['/bin/sh','-c', '${cmd}'].execute();
}

参考链接: https://my.oschina.net/jjyuangu/blog/1815945 https://stackoverflow.com/questions/4689240/detecting-the-platform-window-or-linux-by-groovy-grails

feihong-cs avatar Nov 20 '20 02:11 feihong-cs