https://github.com/OneSourceCat/XxlJob-Hessian-RCE

XxlJob<=2.1.2配置不当情况下反序列化RCE
https://github.com/OneSourceCat/XxlJob-Hessian-RCE

Last synced: 22 days ago
JSON representation

XxlJob<=2.1.2配置不当情况下反序列化RCE

• Host: GitHub
• URL: https://github.com/OneSourceCat/XxlJob-Hessian-RCE
• Owner: OneSourceCat
• Created: 2020-11-02T05:39:06.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2020-11-02T05:43:56.000Z (about 4 years ago)
• Last Synced: 2024-08-05T17:28:52.812Z (4 months ago)
• Language: Java
• Size: 3.91 KB
• Stars: 63
• Watchers: 4
• Forks: 6
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - OneSourceCat/XxlJob-Hessian-RCE - XxlJob&lt;=2.1.2配置不当情况下反序列化RCE (Java)

README

        
# XxlJob-Hessian-RCE

此漏洞为Xxljob配置不当情况下反序列化RCE

XxlJob<=2.1.2，需要利用Hessian触发。

XxlJob >= 2.2.0 会支持RESTFUL API，直接打公开的POC过去即可。

该项目主要是探讨Hessian触发方式。