Giters

X1r0z / JNDIMap

JNDI 注入利用工具, 支持 RMI 和 LDAP 协议, 包含多种高版本 JDK 绕过方式 | A JNDI injection exploit tool that supports RMI and LDAP protocols, including a variety of methods to bypass higher-version JDK

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

TomcatJDBC路由下需补充Derby打法

B0T1eR opened this issue · comments

commented

TomcatJDBC：DataSourceFactory中的initSQL属性仅能执行单挑sql语句，所以Derby SQL RCE写法也要和HikariCP一样
image