From 7c75b3fe207a2e9cda9e29add00a2a62cf7981af Mon Sep 17 00:00:00 2001 From: Mrxn Date: Fri, 2 Apr 2021 23:19:16 +0800 Subject: [PATCH] =?UTF-8?q?add=20shiro-exploit-Shiro=E5=8F=8D=E5=BA=8F?= =?UTF-8?q?=E5=88=97=E5=8C=96=E5=88=A9=E7=94=A8=E5=B7=A5=E5=85=B7=EF=BC=8C?= =?UTF-8?q?=E6=94=AF=E6=8C=81=E6=96=B0=E7=89=88=E6=9C=AC(AES-GCM)Shiro?= =?UTF-8?q?=E7=9A=84key=E7=88=86=E7=A0=B4=EF=BC=8C=E9=85=8D=E5=90=88ysoser?= =?UTF-8?q?ial=EF=BC=8C=E7=94=9F=E6=88=90=E5=9B=9E=E6=98=BEPayload&update?= =?UTF-8?q?=20shiro=20keys?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 3 +- shiro_keys_297.txt => shiro_keys_200.txt | 99 ------------------------ 2 files changed, 2 insertions(+), 100 deletions(-) rename shiro_keys_297.txt => shiro_keys_200.txt (66%) diff --git a/README.md b/README.md index 766559e2..24fa3e5f 100644 --- a/README.md +++ b/README.md @@ -666,7 +666,8 @@ - [SpringBoot 持久化 WebShell](https://github.com/threedr3am/ZhouYu) - [nuclei引擎的exp库](https://github.com/projectdiscovery/nuclei-templates) - [smarGate-内网穿透，c++实现，无需公网IP，小巧，易用，快速，安全，最好的多链路聚合（p2p+proxy）模式](https://github.com/lazy-luo/smarGate) -- [297个shiro key 来自lscteam的分享](./shiro_keys_297.txt) +- [200个shiro key 来自lscteam的分享](./shiro_keys_200.txt) +- [shiro-exploit-Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload](https://github.com/Ares-X/shiro-exploit) ## 文章/书籍/教程相关 diff --git a/shiro_keys_297.txt b/shiro_keys_200.txt similarity index 66% rename from shiro_keys_297.txt rename to shiro_keys_200.txt index c8ee47db..9fe5bd83 100755 --- a/shiro_keys_297.txt +++ b/shiro_keys_200.txt @@ -1,19 +1,12 @@ 0AvVhmFLUs0KTA3Kprsdag== -0AvVhmFLUs0KTA3Kprsdag== -1AvVhdsgUs0FSA3SDFAdag== 1AvVhdsgUs0FSA3SDFAdag== 1QWLxg+NYmxraMoxAXu/Iw== -1QWLxg+NYmxraMoxAXu/Iw== -1tC/xrDYs8ey+sa3emtiYw== 1tC/xrDYs8ey+sa3emtiYw== 25BsmdYwjnfcWmnhAciDDg== -25BsmdYwjnfcWmnhAciDDg== -2A2V+RFLUs+eTA3Kpr+dag== 2A2V+RFLUs+eTA3Kpr+dag== 2AvVCXsxUs0FSA7SYFjdQg== 2AvVhdsgERdsSA3SDFAdag== 2AvVhdsgUs0FSA3SDFAdag== -2AvVhdsgUs0FSA3SDFAdag== 2AvVhdsgUs0FSA3SDFAder== 2AvVhdsgUs0FSA3SaFAdfg== 2AvVhdsgUsOFSA3SDFAdag== @@ -21,8 +14,6 @@ 2AvVidsaUSofSA3SDFAdog== 2adsfasdqerqerqewradsf== 2cVtiE83c4lIrELJwKGJUw== -2cVtiE83c4lIrELJwKGJUw== -2itfW92XazYRi5ltW0M2yA== 2itfW92XazYRi5ltW0M2yA== 3Av2hmFLAs0BTA3Kprsd6E== 3AvVhMFLIs0KTA3Kprsdag== @@ -30,119 +21,79 @@ 3AvVhdAgUs1FSA4SDFAdBg== 3AvVhmFLUs0KTA3KaTHGFg== 3AvVhmFLUs0KTA3Kprsdag== -3AvVhmFLUs0KTA3Kprsdag== -3AvVhmFLUs0KTA3Kprsdag== -3JvYhmBLUs0ETA5Kprsdag== 3JvYhmBLUs0ETA5Kprsdag== 3qDVdLawoIr1xFd6ietnsg== 3qDVdLawoIr1xFd6ietnwg== -3qDVdLawoIr1xFd6ietnwg== 3rvVhmFLUs0KAT3Kprsdag== 4AvVhdsgUs0F563SDFAdag== 4AvVhm2LUs0KTA3Kprsdag== 4AvVhmFLUs0KTA3KAAAAAA== 4AvVhmFLUs0KTA3Kprsdag== -4AvVhmFLUs0KTA3Kprsdag== 4AvVhmFLUs0KTA3Kprseaf== 4AvVhmFLUs0TTA3Kprsdag== 4AvVhmFLUs5KTA1Kprsdag== 4AvVhmFLUsOKTA3Kprsdag== 4BvVhmFLUs0KTA3Kprsdag== -4BvVhmFLUs0KTA3Kprsdag== 4WCZSJyqdUQsije93aQIRg== 4rvVhmFLUs0KAT3Kprsdag== 5AvVhCsgUs0FSA3SDFAdag== 5AvVhmFLUS0ATA4Kprsdag== -5AvVhmFLUS0ATA4Kprsdag== 5AvVhmFLUs0KTA3Kprsdag== -5AvVhmFLUs0KTA3Kprsdag== -5J7bIJIV0LQSN3c9LPitBQ== 5J7bIJIV0LQSN3c9LPitBQ== 5RC7uBZLkByfFfJm22q/Zw== 5aaC5qKm5oqA5pyvAAAAAA== -5aaC5qKm5oqA5pyvAAAAAA== 5oiR5piv5p2h5ZK46bG8IQ== 66v1O8keKNV3TTcGPK1wzg== -66v1O8keKNV3TTcGPK1wzg== -6AvVhmFLUs0KTA3Kprsdag== 6AvVhmFLUs0KTA3Kprsdag== 6NfXkC7YVCV5DASIrEm1Rg== -6NfXkC7YVCV5DASIrEm1Rg== 6Zm+6I2j5Y+R5aS+5ZOlAA== -6Zm+6I2j5Y+R5aS+5ZOlAA== -6ZmI6I2j3Y+R1aSn5BOlAA== 6ZmI6I2j3Y+R1aSn5BOlAA== 6ZmI6I2j5Y+R5aSn5ZOlAA== -6ZmI6I2j5Y+R5aSn5ZOlAA== -7AvVhmFLUs0KTA3Kprsdag== 7AvVhmFLUs0KTA3Kprsdag== 8AvVhdsgUs0FSA3SDFAdag== 8AvVhmFLUs0KTA3Kprsdag== -8AvVhmFLUs0KTA3Kprsdag== -8BvVhmFLUs0KTA3Kprsdag== 8BvVhmFLUs0KTA3Kprsdag== 9AVvhnFLuS3KTV8KprsdAg== 9Ami6v2G5Y+r5aPnE4OlBB== 9AvVhmFLUs0KTA3Kprsdag== -9AvVhmFLUs0KTA3Kprsdag== -9FvVhtFLUs0KnA3Kprsdyg== 9FvVhtFLUs0KnA3Kprsdyg== A+kWR7o9O0/G/W6aOGesRA== A7UzJgh1+EWj5oBFi+mSgw== -A7UzJgh1+EWj5oBFi+mSgw== AF05JAuyuEB1ouJQ9Y9Phg== AztiX2RUqhc7dhOzl1Mj8Q== B9rPF8FHhxKJZ9k63ik7kQ== Bf7MfkNR0axGGptozrebag== -Bf7MfkNR0axGGptozrebag== Cj6LnKZNLEowAZrdqyH/Ew== ClLk69oNcA3m+s0jIMIkpg== -ClLk69oNcA3m+s0jIMIkpg== FJoQCiz0z5XWz2N2LyxNww== FL9HL9Yu5bVUJ0PDU1ySvg== FP7qKJzdJOGkzoQzo2wTmA== FjbNm1avvGmWE9CY2HqV75== GAevYnznvgNCURavBhCr1w== -GAevYnznvgNCURavBhCr1w== GHxH6G3LFh8Zb3NwoRgfFA== GhrF5zLfq1Dtadd1jlohhA== GsHaWo4m1eNbE0kNSMULhg== HOlg7NHb9potm0n5s4ic0Q== HWrBltGvEZc14h9VpMvZWw== -HWrBltGvEZc14h9VpMvZWw== HeUZ/LvgkO7nsa18ZyVxWQ== HoTP07fJPKIRLOWoVXmv+Q== IduElDUpDDXE677ZkhhKnQ== -IduElDUpDDXE677ZkhhKnQ== -Is9zJ3pzNh2cgTHB4ua3+Q== Is9zJ3pzNh2cgTHB4ua3+Q== Jt3C93kMR9D5e8QzwfsiMw== -Jt3C93kMR9D5e8QzwfsiMw== KU471rVNQ6k7PQL4SqxgJg== L7RioUULEFhRyxM7a2R/Yg== -L7RioUULEFhRyxM7a2R/Yg== M2djA70UBBUPDibGZBRvrA== MPdCMZ9urzEA50JDlDYYDg== -MPdCMZ9urzEA50JDlDYYDg== MTIzNDU2Nzg5MGFiY2RlZg== -MTIzNDU2Nzg5MGFiY2RlZg== -MTIzNDU2NzgxMjM0NTY3OA== MTIzNDU2NzgxMjM0NTY3OA== MzVeSkYyWTI2OFVLZjRzZg== -MzVeSkYyWTI2OFVLZjRzZg== -NGk/3cQ6F5/UNPRh8LpMIg== NGk/3cQ6F5/UNPRh8LpMIg== NoIw91X9GSiCrLCF03ZGZw== NsZXjXVklWPZwOfkvk6kUA== -NsZXjXVklWPZwOfkvk6kUA== -O4pdf+7e+mZe8NyxMTPJmQ== O4pdf+7e+mZe8NyxMTPJmQ== OUHYQzxQ/W9e/UjiAGu6rg== -OUHYQzxQ/W9e/UjiAGu6rg== -OY//C4rhfwNxCQAQCrQQ1Q== OY//C4rhfwNxCQAQCrQQ1Q== Q01TX0JGTFlLRVlfMjAxOQ== -Q01TX0JGTFlLRVlfMjAxOQ== QAk0rp8sG0uJC4Ke2baYNA== QDFCnfkLUs0KTA3Kprsdag== QF5HMyZAWDZYRyFnSGhTdQ== @@ -152,33 +103,21 @@ R29yZG9uV2ViAAAAAAAAAA== RVZBTk5JR0hUTFlfV0FPVQ== Rb5RN+LofDWJlzWAwsXzxg== SDKOLKn2J1j/2BHjeZwAoQ== -SDKOLKn2J1j/2BHjeZwAoQ== -SkZpbmFsQmxhZGUAAAAAAA== SkZpbmFsQmxhZGUAAAAAAA== SrpFBcVD89eTQ2icOD0TMg== TGMPe7lGO/Gbr38QiJu1/w== U0hGX2d1bnMAAAAAAAAAAA== U3BAbW5nQmxhZGUAAAAAAA== -U3BAbW5nQmxhZGUAAAAAAA== -U3ByaW5nQmxhZGUAAAAAAA== U3ByaW5nQmxhZGUAAAAAAA== UGlzMjAxNiVLeUVlXiEjLw== Us0KvVhTeasAm43KFLAeng== V2hhdCBUaGUgSGVsbAAAAA== -V2hhdCBUaGUgSGVsbAAAAA== -WcfHGU25gNnTxTlmJMeSpw== WcfHGU25gNnTxTlmJMeSpw== WkhBTkdYSUFPSEVJX0NBVA== -WkhBTkdYSUFPSEVJX0NBVA== WuB+y2gcHRnY2Lg9+Aqmqg== -WuB+y2gcHRnY2Lg9+Aqmqg== -XTx6CKLo/SdSgub+OPHSrw== XTx6CKLo/SdSgub+OPHSrw== XgGkgqGqYrix9lI6vxcrRw== -XgGkgqGqYrix9lI6vxcrRw== Y1JxNSPXVwMkyvES/kJGeQ== -Y1JxNSPXVwMkyvES/kJGeQ== -YI1+nBV//m7ELrIyDHm6DQ== YI1+nBV//m7ELrIyDHm6DQ== YVd4dmRtVjViM1UlM0QIdn== YWJjZGRjYmFhYmNkZGNiYQ== @@ -187,79 +126,51 @@ Ymx1ZXdoYWxlAAAAAAAAAA== YnlhdnMAAAAAAAAAAAAAAA== YystomRZLMUjiK0Q1+LFdw== Z3VucwAAAAAAAAAAAAAAAA== -Z3VucwAAAAAAAAAAAAAAAA== Z3VucwAAAAAAAAAAAAABBB== Z3VucwACAOVAKALACAADSA== ZAvph3dsQs0FSL3SDFAdag== -ZAvph3dsQs0FSL3SDFAdag== ZGdmdwAAAAAAAAAAAAAAAA ZUdsaGJuSmxibVI2ZHc9PQ ZUdsaGJuSmxibVI2ZHc9PQ== -ZUdsaGJuSmxibVI2ZHc9PQ== ZjQyMTJiNTJhZGZmYjFjMQ== ZmFsYWRvLnh5ei5zaGlybw== -ZmFsYWRvLnh5ei5zaGlybw== ZnJlc2h6Y24xMjM0NTY3OA== -ZnJlc2h6Y24xMjM0NTY3OA== -a2VlcE9uR29pbmdBbmRGaQ== a2VlcE9uR29pbmdBbmRGaQ== a3dvbmcAAAAAAAAAAAAAAA== -a3dvbmcAAAAAAAAAAAAAAA== a69ec781563b1a5d791f7b2bdd117a36 aG91c2Vob3VzZWhvdXNlMg== aU1pcmFjbGVpTWlyYWNsZQ== -aU1pcmFjbGVpTWlyYWNsZQ== b2EAAAAAAAAAAAAAAAAAAA== bWljcm9zAAAAAAAAAAAAAA== -bWljcm9zAAAAAAAAAAAAAA== -bWluZS1hc3NldC1rZXk6QQ== bWluZS1hc3NldC1rZXk6QQ== bXRvbnMAAAAAAAAAAAAAAA== -bXRvbnMAAAAAAAAAAAAAAA== bXdrXl9eNjY2KjA3Z2otPQ== bya2HkYo57u6fWh5theAWw== -bya2HkYo57u6fWh5theAWw== -c+3hFGPjbgzGdrC+MHgoRQ== c+3hFGPjbgzGdrC+MHgoRQ== c2hpcm9fYmF0aXMzMgAAAA== -c2hpcm9fYmF0aXMzMgAAAA== c2hvdWtlLXBsdXMuMjAxNg== cGhyYWNrY3RmREUhfiMkZA== -cGhyYWNrY3RmREUhfiMkZA== -cGljYXMAAAAAAAAAAAAAAA== cGljYXMAAAAAAAAAAAAAAA== cmVtZW1iZXJNZQAAAAAAAA== -cmVtZW1iZXJNZQAAAAAAAA== -d2ViUmVtZW1iZXJNZUtleQ== d2ViUmVtZW1iZXJNZUtleQ== duhfin37x6chw29jsne45m== eXNmAAAAAAAAAAAAAAAAAA== empodDEyMwAAAAAAAAAAAA== -empodDEyMwAAAAAAAAAAAA== ertVhmFLUs0KTA3Kprsdag== -ertVhmFLUs0KTA3Kprsdag== -f/SY5TIve5WWzT4aQlABJA== f/SY5TIve5WWzT4aQlABJA== fCq+/xW488hMTCD+cmJ3aQ== -fCq+/xW488hMTCD+cmJ3aQ== fCq+/xW488hMTCE+cmJ3FF== fdCEiK9YvLC668sS43CJ6A== fsHspZw/92PrS3XrPW+vxw== -fsHspZw/92PrS3XrPW+vxw== -hBlzKg78ajaZuTE0VLzDDg== hBlzKg78ajaZuTE0VLzDDg== i45FVt72K2kLgvFrJtoZRw== -i45FVt72K2kLgvFrJtoZRw== iycgIIyCatQofd0XXxbzEg== kPH+bIxk5D2deZiIxcaaaA== -kPH+bIxk5D2deZiIxcaaaA== kPH+bIxk5D2deZiIxcabaA== kPH+bIxk5D2deZiIxcacaA== kPv59vyqzj00x11LXJZTjJ2UHW48jzHN -kPv59vyqzj00x11LXJZTjJ2UHW48jzHN l8cc6d2xpkT1yFtLIcLHCg== lT2UvDUmQwewm6mMoiw4Ig== -lT2UvDUmQwewm6mMoiw4Ig== lt181dcQVz/Bo9Wb8ws/Cg== m0/5ZZ9L4jjQXn7MREr/bw== mIccZhQt6EBHrZIyw1FAXQ== @@ -268,30 +179,20 @@ pbnA+Qzen1vjV3rNqQBLHg== pyyX1c5x2f0LZZ7VKZXjKO== qQFtSnnj/sx7vu51ixAyEQ== r0e3c16IdVkouZgk1TKVMg== -r0e3c16IdVkouZgk1TKVMg== -rPNqM6uKFCyaL10AK51UkQ== rPNqM6uKFCyaL10AK51UkQ== s0KTA3mFLUprK4AvVhsdag== -s0KTA3mFLUprK4AvVhsdag== s2SE9y32PvLeYo+VGFpcKA== sBv2t3okbdm3U0r2EVcSzB== sHdIjUN6tzhl8xZMG3ULCQ== -sHdIjUN6tzhl8xZMG3ULCQ== sgIQrqUVxa1OZRRIK3hLZw== tiVV6g3uZBGfgshesAQbjA== vXP33AonIp9bFwGl7aT7rA== -vXP33AonIp9bFwGl7aT7rA== w793pPq5ZVBKkj8OhV4KaQ== wGiHplamyXlVB11UXWol8g== -wGiHplamyXlVB11UXWol8g== wrjUh2ttBPQLnT4JVhriug== wyLZMDifwq3sW1vhhHpgKA== xVmmoltfpb8tTceuT5R7Bw== -xVmmoltfpb8tTceuT5R7Bw== -yNeUgSzL/CfiWw1GALg6Ag== yNeUgSzL/CfiWw1GALg6Ag== yeAAo1E8BOeAYfBlm4NG9Q== -yeAAo1E8BOeAYfBlm4NG9Q== zIiHplamyXlVB11UXWol8g== -zSyK5Kp6PZAAjlT+eeNMlg== zSyK5Kp6PZAAjlT+eeNMlg== \ No newline at end of file