lufeirider / CVE-2019-2725

CVE-2019-2725 命令回显

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

javassist.CannotCompileException: [source error] no such class: weblogic.work.ExecuteThred

hktalent opened this issue · comments

commented

image


Error while generating or serializing payload
javassist.CannotCompileException: [source error] no such class: weblogic.work.ExecuteThred
	at javassist.CtBehavior.insertAfter(CtBehavior.java:877)

image

没有这个类哦

weblogic.work.ExecuteThred

commented

@lufeirider

 public static String getBase64()
    {
    	String s = "", szNm = ResultBaseExec.class.getName().replace('.', '/') + ".class";
    	try {
	    	InputStream stream = ResultBaseExec.class.getClassLoader().getResourceAsStream(szNm);
	    	ByteArrayOutputStream bi = new ByteArrayOutputStream(); 
	    	byte []xx = new byte[1024];
	    	int i = 0;
	    	while(-1 < (i = stream.read(xx, 0, 1024)))
	    	{
	    		bi.write(xx, 0, i);
	    	}
	    	sun.misc.BASE64Encoder encoder = new sun.misc.BASE64Encoder();
	    	s = encoder.encode(bi.toByteArray());
    	}catch(Exception e) {}
    	return s;
    }

commented

fixed: weblogic.work.ExecuteThred

<plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-install-plugin</artifactId>
                <executions>
					<execution>
						<id>install-weblogic</id>
						<phase>clean</phase>
						<configuration>
							<file>${basedir}/external/weblogic_1.0.jar</file>
							<repositoryLayout>default</repositoryLayout>
							<groupId>weblogic</groupId>
							<artifactId>weblogic</artifactId>
							<version>1.0</version>
							<packaging>jar</packaging>
							<generatePom>true</generatePom>
						</configuration>
						<goals>
							<goal>install-file</goal>
						</goals>
					</execution>
					<execution>
						<id>install-weblogic_spring-jndi</id>
						<phase>clean</phase>
						<configuration>
							<file>${basedir}/external/weblogic_spring-jndi_10.3.6.0.jar</file>
							<repositoryLayout>default</repositoryLayout>
							<groupId>weblogic</groupId>
							<artifactId>spring-jndi</artifactId>
							<version>10.3.6.0</version>
							<packaging>jar</packaging>
							<generatePom>true</generatePom>
						</configuration>
						<goals>
							<goal>install-file</goal>
						</goals>
					</execution>
				</executions>
			</plugin>

是weblogic.work.ExecuteThread,你少了一个a