add shiro-exploit-Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial…

…，生成回显Payload&update shiro keys

README.md

@@ -666,7 +666,8 @@
 - [SpringBoot 持久化 WebShell](https://github.com/threedr3am/ZhouYu)
 - [nuclei引擎的exp库](https://github.com/projectdiscovery/nuclei-templates)
 - [smarGate-内网穿透，c++实现，无需公网IP，小巧，易用，快速，安全，最好的多链路聚合（p2p+proxy）模式](https://github.com/lazy-luo/smarGate)
-- [297个shiro key 来自lscteam的分享](./shiro_keys_297.txt)
+- [200个shiro key 来自lscteam的分享](./shiro_keys_200.txt)
+- [shiro-exploit-Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload](https://github.com/Ares-X/shiro-exploit)
 
 ## <span id="head8"> 文章/书籍/教程相关</span>
 

shiro_keys_297.txt → shiro_keys_200.txt

@@ -1,148 +1,99 @@
 0AvVhmFLUs0KTA3Kprsdag==
-0AvVhmFLUs0KTA3Kprsdag==
-1AvVhdsgUs0FSA3SDFAdag==
 1AvVhdsgUs0FSA3SDFAdag==
 1QWLxg+NYmxraMoxAXu/Iw==
-1QWLxg+NYmxraMoxAXu/Iw==
-1tC/xrDYs8ey+sa3emtiYw==
 1tC/xrDYs8ey+sa3emtiYw==
 25BsmdYwjnfcWmnhAciDDg==
-25BsmdYwjnfcWmnhAciDDg==
-2A2V+RFLUs+eTA3Kpr+dag==
 2A2V+RFLUs+eTA3Kpr+dag==
 2AvVCXsxUs0FSA7SYFjdQg==
 2AvVhdsgERdsSA3SDFAdag==
 2AvVhdsgUs0FSA3SDFAdag==
-2AvVhdsgUs0FSA3SDFAdag==
 2AvVhdsgUs0FSA3SDFAder==
 2AvVhdsgUs0FSA3SaFAdfg==
 2AvVhdsgUsOFSA3SDFAdag==
 2AvVhmFLUs0KTA3Kprsdag==
 2AvVidsaUSofSA3SDFAdog==
 2adsfasdqerqerqewradsf==
 2cVtiE83c4lIrELJwKGJUw==
-2cVtiE83c4lIrELJwKGJUw==
-2itfW92XazYRi5ltW0M2yA==
 2itfW92XazYRi5ltW0M2yA==
 3Av2hmFLAs0BTA3Kprsd6E==
 3AvVhMFLIs0KTA3Kprsdag==
 3AvVhdAgUs0FSA4SDFAdBg==
 3AvVhdAgUs1FSA4SDFAdBg==
 3AvVhmFLUs0KTA3KaTHGFg==
 3AvVhmFLUs0KTA3Kprsdag==
-3AvVhmFLUs0KTA3Kprsdag==
-3AvVhmFLUs0KTA3Kprsdag==
-3JvYhmBLUs0ETA5Kprsdag==
 3JvYhmBLUs0ETA5Kprsdag==
 3qDVdLawoIr1xFd6ietnsg==
 3qDVdLawoIr1xFd6ietnwg==
-3qDVdLawoIr1xFd6ietnwg==
 3rvVhmFLUs0KAT3Kprsdag==
 4AvVhdsgUs0F563SDFAdag==
 4AvVhm2LUs0KTA3Kprsdag==
 4AvVhmFLUs0KTA3KAAAAAA==
 4AvVhmFLUs0KTA3Kprsdag==
-4AvVhmFLUs0KTA3Kprsdag==
 4AvVhmFLUs0KTA3Kprseaf==
 4AvVhmFLUs0TTA3Kprsdag==
 4AvVhmFLUs5KTA1Kprsdag==
 4AvVhmFLUsOKTA3Kprsdag==
 4BvVhmFLUs0KTA3Kprsdag==
-4BvVhmFLUs0KTA3Kprsdag==
 4WCZSJyqdUQsije93aQIRg==
 4rvVhmFLUs0KAT3Kprsdag==
 5AvVhCsgUs0FSA3SDFAdag==
 5AvVhmFLUS0ATA4Kprsdag==
-5AvVhmFLUS0ATA4Kprsdag==
 5AvVhmFLUs0KTA3Kprsdag==
-5AvVhmFLUs0KTA3Kprsdag==
-5J7bIJIV0LQSN3c9LPitBQ==
 5J7bIJIV0LQSN3c9LPitBQ==
 5RC7uBZLkByfFfJm22q/Zw==
 5aaC5qKm5oqA5pyvAAAAAA==
-5aaC5qKm5oqA5pyvAAAAAA==
 5oiR5piv5p2h5ZK46bG8IQ==
 66v1O8keKNV3TTcGPK1wzg==
-66v1O8keKNV3TTcGPK1wzg==
-6AvVhmFLUs0KTA3Kprsdag==
 6AvVhmFLUs0KTA3Kprsdag==
 6NfXkC7YVCV5DASIrEm1Rg==
-6NfXkC7YVCV5DASIrEm1Rg==
 6Zm+6I2j5Y+R5aS+5ZOlAA==
-6Zm+6I2j5Y+R5aS+5ZOlAA==
-6ZmI6I2j3Y+R1aSn5BOlAA==
 6ZmI6I2j3Y+R1aSn5BOlAA==
 6ZmI6I2j5Y+R5aSn5ZOlAA==
-6ZmI6I2j5Y+R5aSn5ZOlAA==
-7AvVhmFLUs0KTA3Kprsdag==
 7AvVhmFLUs0KTA3Kprsdag==
 8AvVhdsgUs0FSA3SDFAdag==
 8AvVhmFLUs0KTA3Kprsdag==
-8AvVhmFLUs0KTA3Kprsdag==
-8BvVhmFLUs0KTA3Kprsdag==
 8BvVhmFLUs0KTA3Kprsdag==
 9AVvhnFLuS3KTV8KprsdAg==
 9Ami6v2G5Y+r5aPnE4OlBB==
 9AvVhmFLUs0KTA3Kprsdag==
-9AvVhmFLUs0KTA3Kprsdag==
-9FvVhtFLUs0KnA3Kprsdyg==
 9FvVhtFLUs0KnA3Kprsdyg==
 A+kWR7o9O0/G/W6aOGesRA==
 A7UzJgh1+EWj5oBFi+mSgw==
-A7UzJgh1+EWj5oBFi+mSgw==
 AF05JAuyuEB1ouJQ9Y9Phg==
 AztiX2RUqhc7dhOzl1Mj8Q==
 B9rPF8FHhxKJZ9k63ik7kQ==
 Bf7MfkNR0axGGptozrebag==
-Bf7MfkNR0axGGptozrebag==
 Cj6LnKZNLEowAZrdqyH/Ew==
 ClLk69oNcA3m+s0jIMIkpg==
-ClLk69oNcA3m+s0jIMIkpg==
 FJoQCiz0z5XWz2N2LyxNww==
 FL9HL9Yu5bVUJ0PDU1ySvg==
 FP7qKJzdJOGkzoQzo2wTmA==
 FjbNm1avvGmWE9CY2HqV75==
 GAevYnznvgNCURavBhCr1w==
-GAevYnznvgNCURavBhCr1w==
 GHxH6G3LFh8Zb3NwoRgfFA==
 GhrF5zLfq1Dtadd1jlohhA==
 GsHaWo4m1eNbE0kNSMULhg==
 HOlg7NHb9potm0n5s4ic0Q==
 HWrBltGvEZc14h9VpMvZWw==
-HWrBltGvEZc14h9VpMvZWw==
 HeUZ/LvgkO7nsa18ZyVxWQ==
 HoTP07fJPKIRLOWoVXmv+Q==
 IduElDUpDDXE677ZkhhKnQ==
-IduElDUpDDXE677ZkhhKnQ==
-Is9zJ3pzNh2cgTHB4ua3+Q==
 Is9zJ3pzNh2cgTHB4ua3+Q==
 Jt3C93kMR9D5e8QzwfsiMw==
-Jt3C93kMR9D5e8QzwfsiMw==
 KU471rVNQ6k7PQL4SqxgJg==
 L7RioUULEFhRyxM7a2R/Yg==
-L7RioUULEFhRyxM7a2R/Yg==
 M2djA70UBBUPDibGZBRvrA==
 MPdCMZ9urzEA50JDlDYYDg==
-MPdCMZ9urzEA50JDlDYYDg==
 MTIzNDU2Nzg5MGFiY2RlZg==
-MTIzNDU2Nzg5MGFiY2RlZg==
-MTIzNDU2NzgxMjM0NTY3OA==
 MTIzNDU2NzgxMjM0NTY3OA==
 MzVeSkYyWTI2OFVLZjRzZg==
-MzVeSkYyWTI2OFVLZjRzZg==
-NGk/3cQ6F5/UNPRh8LpMIg==
 NGk/3cQ6F5/UNPRh8LpMIg==
 NoIw91X9GSiCrLCF03ZGZw==
 NsZXjXVklWPZwOfkvk6kUA==
-NsZXjXVklWPZwOfkvk6kUA==
-O4pdf+7e+mZe8NyxMTPJmQ==
 O4pdf+7e+mZe8NyxMTPJmQ==
 OUHYQzxQ/W9e/UjiAGu6rg==
-OUHYQzxQ/W9e/UjiAGu6rg==
-OY//C4rhfwNxCQAQCrQQ1Q==
 OY//C4rhfwNxCQAQCrQQ1Q==
 Q01TX0JGTFlLRVlfMjAxOQ==
-Q01TX0JGTFlLRVlfMjAxOQ==
 QAk0rp8sG0uJC4Ke2baYNA==
 QDFCnfkLUs0KTA3Kprsdag==
 QF5HMyZAWDZYRyFnSGhTdQ==
@@ -152,33 +103,21 @@ R29yZG9uV2ViAAAAAAAAAA==
 RVZBTk5JR0hUTFlfV0FPVQ==
 Rb5RN+LofDWJlzWAwsXzxg==
 SDKOLKn2J1j/2BHjeZwAoQ==
-SDKOLKn2J1j/2BHjeZwAoQ==
-SkZpbmFsQmxhZGUAAAAAAA==
 SkZpbmFsQmxhZGUAAAAAAA==
 SrpFBcVD89eTQ2icOD0TMg==
 TGMPe7lGO/Gbr38QiJu1/w==
 U0hGX2d1bnMAAAAAAAAAAA==
 U3BAbW5nQmxhZGUAAAAAAA==
-U3BAbW5nQmxhZGUAAAAAAA==
-U3ByaW5nQmxhZGUAAAAAAA==
 U3ByaW5nQmxhZGUAAAAAAA==
 UGlzMjAxNiVLeUVlXiEjLw==
 Us0KvVhTeasAm43KFLAeng==
 V2hhdCBUaGUgSGVsbAAAAA==
-V2hhdCBUaGUgSGVsbAAAAA==
-WcfHGU25gNnTxTlmJMeSpw==
 WcfHGU25gNnTxTlmJMeSpw==
 WkhBTkdYSUFPSEVJX0NBVA==
-WkhBTkdYSUFPSEVJX0NBVA==
 WuB+y2gcHRnY2Lg9+Aqmqg==
-WuB+y2gcHRnY2Lg9+Aqmqg==
-XTx6CKLo/SdSgub+OPHSrw==
 XTx6CKLo/SdSgub+OPHSrw==
 XgGkgqGqYrix9lI6vxcrRw==
-XgGkgqGqYrix9lI6vxcrRw==
 Y1JxNSPXVwMkyvES/kJGeQ==
-Y1JxNSPXVwMkyvES/kJGeQ==
-YI1+nBV//m7ELrIyDHm6DQ==
 YI1+nBV//m7ELrIyDHm6DQ==
 YVd4dmRtVjViM1UlM0QIdn==
 YWJjZGRjYmFhYmNkZGNiYQ==
@@ -187,79 +126,51 @@ Ymx1ZXdoYWxlAAAAAAAAAA==
 YnlhdnMAAAAAAAAAAAAAAA==
 YystomRZLMUjiK0Q1+LFdw==
 Z3VucwAAAAAAAAAAAAAAAA==
-Z3VucwAAAAAAAAAAAAAAAA==
 Z3VucwAAAAAAAAAAAAABBB==
 Z3VucwACAOVAKALACAADSA==
 ZAvph3dsQs0FSL3SDFAdag==
-ZAvph3dsQs0FSL3SDFAdag==
 ZGdmdwAAAAAAAAAAAAAAAA
 ZUdsaGJuSmxibVI2ZHc9PQ
 ZUdsaGJuSmxibVI2ZHc9PQ==
-ZUdsaGJuSmxibVI2ZHc9PQ==
 ZjQyMTJiNTJhZGZmYjFjMQ==
 ZmFsYWRvLnh5ei5zaGlybw==
-ZmFsYWRvLnh5ei5zaGlybw==
 ZnJlc2h6Y24xMjM0NTY3OA==
-ZnJlc2h6Y24xMjM0NTY3OA==
-a2VlcE9uR29pbmdBbmRGaQ==
 a2VlcE9uR29pbmdBbmRGaQ==
 a3dvbmcAAAAAAAAAAAAAAA==
-a3dvbmcAAAAAAAAAAAAAAA==
 a69ec781563b1a5d791f7b2bdd117a36
 aG91c2Vob3VzZWhvdXNlMg==
 aU1pcmFjbGVpTWlyYWNsZQ==
-aU1pcmFjbGVpTWlyYWNsZQ==
 b2EAAAAAAAAAAAAAAAAAAA==
 bWljcm9zAAAAAAAAAAAAAA==
-bWljcm9zAAAAAAAAAAAAAA==
-bWluZS1hc3NldC1rZXk6QQ==
 bWluZS1hc3NldC1rZXk6QQ==
 bXRvbnMAAAAAAAAAAAAAAA==
-bXRvbnMAAAAAAAAAAAAAAA==
 bXdrXl9eNjY2KjA3Z2otPQ==
 bya2HkYo57u6fWh5theAWw==
-bya2HkYo57u6fWh5theAWw==
-c+3hFGPjbgzGdrC+MHgoRQ==
 c+3hFGPjbgzGdrC+MHgoRQ==
 c2hpcm9fYmF0aXMzMgAAAA==
-c2hpcm9fYmF0aXMzMgAAAA==
 c2hvdWtlLXBsdXMuMjAxNg==
 cGhyYWNrY3RmREUhfiMkZA==
-cGhyYWNrY3RmREUhfiMkZA==
-cGljYXMAAAAAAAAAAAAAAA==
 cGljYXMAAAAAAAAAAAAAAA==
 cmVtZW1iZXJNZQAAAAAAAA==
-cmVtZW1iZXJNZQAAAAAAAA==
-d2ViUmVtZW1iZXJNZUtleQ==
 d2ViUmVtZW1iZXJNZUtleQ==
 duhfin37x6chw29jsne45m==
 eXNmAAAAAAAAAAAAAAAAAA==
 empodDEyMwAAAAAAAAAAAA==
-empodDEyMwAAAAAAAAAAAA==
 ertVhmFLUs0KTA3Kprsdag==
-ertVhmFLUs0KTA3Kprsdag==
-f/SY5TIve5WWzT4aQlABJA==
 f/SY5TIve5WWzT4aQlABJA==
 fCq+/xW488hMTCD+cmJ3aQ==
-fCq+/xW488hMTCD+cmJ3aQ==
 fCq+/xW488hMTCE+cmJ3FF==
 fdCEiK9YvLC668sS43CJ6A==
 fsHspZw/92PrS3XrPW+vxw==
-fsHspZw/92PrS3XrPW+vxw==
-hBlzKg78ajaZuTE0VLzDDg==
 hBlzKg78ajaZuTE0VLzDDg==
 i45FVt72K2kLgvFrJtoZRw==
-i45FVt72K2kLgvFrJtoZRw==
 iycgIIyCatQofd0XXxbzEg==
 kPH+bIxk5D2deZiIxcaaaA==
-kPH+bIxk5D2deZiIxcaaaA==
 kPH+bIxk5D2deZiIxcabaA==
 kPH+bIxk5D2deZiIxcacaA==
 kPv59vyqzj00x11LXJZTjJ2UHW48jzHN
-kPv59vyqzj00x11LXJZTjJ2UHW48jzHN
 l8cc6d2xpkT1yFtLIcLHCg==
 lT2UvDUmQwewm6mMoiw4Ig==
-lT2UvDUmQwewm6mMoiw4Ig==
 lt181dcQVz/Bo9Wb8ws/Cg==
 m0/5ZZ9L4jjQXn7MREr/bw==
 mIccZhQt6EBHrZIyw1FAXQ==
@@ -268,30 +179,20 @@ pbnA+Qzen1vjV3rNqQBLHg==
 pyyX1c5x2f0LZZ7VKZXjKO==
 qQFtSnnj/sx7vu51ixAyEQ==
 r0e3c16IdVkouZgk1TKVMg==
-r0e3c16IdVkouZgk1TKVMg==
-rPNqM6uKFCyaL10AK51UkQ==
 rPNqM6uKFCyaL10AK51UkQ==
 s0KTA3mFLUprK4AvVhsdag==
-s0KTA3mFLUprK4AvVhsdag==
 s2SE9y32PvLeYo+VGFpcKA==
 sBv2t3okbdm3U0r2EVcSzB==
 sHdIjUN6tzhl8xZMG3ULCQ==
-sHdIjUN6tzhl8xZMG3ULCQ==
 sgIQrqUVxa1OZRRIK3hLZw==
 tiVV6g3uZBGfgshesAQbjA==
 vXP33AonIp9bFwGl7aT7rA==
-vXP33AonIp9bFwGl7aT7rA==
 w793pPq5ZVBKkj8OhV4KaQ==
 wGiHplamyXlVB11UXWol8g==
-wGiHplamyXlVB11UXWol8g==
 wrjUh2ttBPQLnT4JVhriug==
 wyLZMDifwq3sW1vhhHpgKA==
 xVmmoltfpb8tTceuT5R7Bw==
-xVmmoltfpb8tTceuT5R7Bw==
-yNeUgSzL/CfiWw1GALg6Ag==
 yNeUgSzL/CfiWw1GALg6Ag==
 yeAAo1E8BOeAYfBlm4NG9Q==
-yeAAo1E8BOeAYfBlm4NG9Q==
 zIiHplamyXlVB11UXWol8g==
-zSyK5Kp6PZAAjlT+eeNMlg==
 zSyK5Kp6PZAAjlT+eeNMlg==