Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/LuckyC4t/shiro-urldns

shiro反序列化检测(只是个玩具23333)
https://github.com/LuckyC4t/shiro-urldns

Last synced: about 1 month ago
JSON representation

shiro反序列化检测(只是个玩具23333)

Host: GitHub
URL: https://github.com/LuckyC4t/shiro-urldns
Owner: LuckyC4t
Created: 2019-09-25T15:35:17.000Z (almost 5 years ago)
Default Branch: master
Last Pushed: 2024-01-16T20:45:18.000Z (8 months ago)
Last Synced: 2024-04-12T19:52:35.672Z (5 months ago)
Language: Java
Homepage:
Size: 9.77 KB
Stars: 9
Watchers: 1
Forks: 1
Open Issues: 1
Metadata Files:
- Readme: README.md

Awesome Lists containing this project

awesome-hacking-lists - LuckyC4t/shiro-urldns - shiro反序列化检测(只是个玩具23333) (Java)

README

        # shiro-urldns 检测

用于检测是否存在shiro反序列化漏洞

新增`PrincipalCollection`检测

## 构建

`mvn clean package -DskipTests`

## 效果

![](https://i.loli.net/2019/09/26/sJlDkEQUL2bjuP1.png)

![](https://i.loli.net/2020/07/31/v84FSBNpDyWHbxL.png)

## 致谢

https://github.com/frohoff/ysoserial

https://blog.paranoidsoftware.com/triggering-a-dns-lookup-using-java-deserialization/

https://github.com/sv3nbeast/ShiroScan

https://mp.weixin.qq.com/s/do88_4Td1CSeKLmFqhGCuQ