Java RCE 回显

Linux通用回显
Windows通用回显
Spring回显
Tomcat通用回显 (Tested on 6.0.10/6.0.53/7.0.34/7.0.54/7.0.70/7.0.96/7.0.104/8.0.18/8.0.32/8.0.48/8.5.12/8.5.30/8.5.56/9.0.16/9.0.33, failed on 7.0.10/7.0.22)
Weblogic (Tested on 10.3.6.0, 12.1.3.0.0)
Websphere (Tested on AppServer V8.5(8.5.5.18), AppServer V9.0(9.0.5.5))
JBoss(Wildfly) (Testd on 8.0.0.Final, 18.0.0.Final, 21.0.0.Beta1)
Resin (Tested on pro-4.0.64, pro-4.0.57, pro-4.0.45, pro-4.0.32, failed on pro-3.1.15)
Jetty (Tested on 9.4.30.v20200611, 9.3.28.v20191105, 9.2.29.v20191105, 9.0.7.v20131107, 8.1.21.v20160908, 7.6.21.v20160908, failed on 8.0.3.v20160908, 7.2.1.v20101111)
全自动挖掘 request 回显
写文件回显

如果有好的建议，欢迎提 issue

Navigation Menu