banner
lca

lca

真正的不自由，是在自己的心中设下牢笼。
HomeArchives图文

fastjson

cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover

fastjson漏洞复现-1268-jdbc

启动环境，访问站点，抓取登陆处的包 删除右括号，报错 报错探测 fastjson 的版本 Copy { "@type": "java.lang.AutoCloseable" 版本为 1.2.68 此环境可以配合 Mysql-JDBC 反序列化打 fastjson 参考…
漏洞复现
Ownership of this blog data is guaranteed by blockchain and smart contracts to the creator alone.