NAXG / Shiro_LoadClass

shiro漏洞利用

Shiro_LoadClass

Fooo8VtwSYFU.java 为shiro回显、Demo.java 为写shell

加载任意java代码

python shiro_LoadClass.py codefile:XXXXXXXXXXX.class http://127.0.0.1

参考

https://github.com/jas502n/Shiro_Xray

https://blog.csdn.net/fnmsd/article/details/79534877

https://github.com/zema1/ysoserial/