LuckyC4t / shiro-urldns Public

Notifications You must be signed in to change notification settings
Fork 2
Star 9

shiro反序列化检测(只是个玩具23333)

9 stars 2 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 8 Commits
src/main/java/luckycat/shirourldns		src/main/java/luckycat/shirourldns
.gitignore		.gitignore
README.md		README.md
pom.xml		pom.xml

Repository files navigation

shiro-urldns 检测

用于检测是否存在shiro反序列化漏洞

新增PrincipalCollection检测

构建

mvn clean package -DskipTests

效果

致谢

https://github.com/frohoff/ysoserial

https://blog.paranoidsoftware.com/triggering-a-dns-lookup-using-java-deserialization/

https://github.com/sv3nbeast/ShiroScan

https://mp.weixin.qq.com/s/do88_4Td1CSeKLmFqhGCuQ

About

shiro反序列化检测(只是个玩具23333)

Report repository

Releases

No releases published

Packages

No packages published

Contributors 2

Languages

Java 100.0%