LdapBypassJndi.jar

Author: SummerSec

RMI JRMP JNDI/lib/LdapBypassJndi.jar

@@ -74,7 +74,22 @@
             <groupId>commons-beanutils</groupId>
             <artifactId>commons-beanutils</artifactId>
             <version>1.9.2</version>
+            <exclusions>
+                <exclusion>
+                    <artifactId>commons-collections</artifactId>
+                    <groupId>commons-collections</groupId>
+                </exclusion>
+            </exclusions>
         </dependency>
+
+<!--        <dependency>-->
+<!--            <groupId>org.apache.commons</groupId>-->
+<!--            <artifactId>commons-beanutils2</artifactId>-->
+<!--            <version>2.0.0</version>-->
+<!--        </dependency>-->
+
+
+
         <!-- https://mvnrepository.com/artifact/org.bytedeco/ffmpeg -->
         <dependency>
             <groupId>org.bytedeco</groupId>
@@ -83,11 +98,11 @@
         </dependency>
 
         <!--         添加commons-collections依赖作为 payload-->
-<!--&lt;!&ndash;        <dependency>&ndash;&gt;-->
-<!--            <groupId>org.apache.commons</groupId>-->
-<!--            <artifactId>commons-collections4</artifactId>-->
-<!--            <version>4.0</version>-->
-<!--        </dependency>-->
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-collections4</artifactId>
+            <version>4.0</version>
+        </dependency>
         <dependency>
             <groupId>org.javassist</groupId>
             <artifactId>javassist</artifactId>