https://github.com/feihong-cs/Java-Rce-Echo

Java RCE 回显测试代码
https://github.com/feihong-cs/Java-Rce-Echo

deseriazaiton-echo echo jboss-echo jetty-echo linux-echo rce-echo resin-echo spring-echo tomcat-echo weblogic-echo websphere-echo wildfly-echo

Last synced: 3 months ago
JSON representation

Java RCE 回显测试代码

• Host: GitHub
• URL: https://github.com/feihong-cs/Java-Rce-Echo
• Owner: feihong-cs
• Created: 2020-06-21T15:23:14.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2020-10-15T03:24:13.000Z (about 4 years ago)
• Last Synced: 2024-04-12T20:39:58.422Z (7 months ago)
• Topics: deseriazaiton-echo, echo, jboss-echo, jetty-echo, linux-echo, rce-echo, resin-echo, spring-echo, tomcat-echo, weblogic-echo, websphere-echo, wildfly-echo
• Language: Java
• Homepage:
• Size: 4.23 MB
• Stars: 959
• Watchers: 23
• Forks: 177
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - feihong-cs/Java-Rce-Echo - Java RCE 回显测试代码 (Java)

README

        
# Java RCE 回显

### 支持的回显测试代码

- [x] Linux通用回显

- [x] Windows通用回显

- [x] Spring回显

- [x] Tomcat通用回显 (Tested on 6.0.10/6.0.53/7.0.34/7.0.54/7.0.70/7.0.96/7.0.104/8.0.18/8.0.32/8.0.48/8.5.12/8.5.30/8.5.56/9.0.16/9.0.33, failed on 7.0.10/7.0.22)

- [x] Weblogic (Tested on 10.3.6.0, 12.1.3.0.0)

- [x] Websphere (Tested on AppServer V8.5(8.5.5.18), AppServer V9.0(9.0.5.5))

- [x] JBoss(Wildfly) (Testd on 8.0.0.Final, 18.0.0.Final, 21.0.0.Beta1)

- [x] Resin (Tested on pro-4.0.64, pro-4.0.57, pro-4.0.45, pro-4.0.32, failed on pro-3.1.15)

- [x] Jetty (Tested on 9.4.30.v20200611, 9.3.28.v20191105, 9.2.29.v20191105, 9.0.7.v20131107, 8.1.21.v20160908, 7.6.21.v20160908,

failed on 8.0.3.v20160908, 7.2.1.v20101111)

- [x] 全自动挖掘 request 回显

- [x] 写文件回显





如果有好的建议，欢迎提 ```issue```