Skip to content

OneSourceCat/XxlJob-Hessian-RCE

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 

Repository files navigation

XxlJob-Hessian-RCE

此漏洞为Xxljob配置不当情况下反序列化RCE

XxlJob<=2.1.2,需要利用Hessian触发。

XxlJob >= 2.2.0 会支持RESTFUL API,直接打公开的POC过去即可。

该项目主要是探讨Hessian触发方式。

About

XxlJob<=2.1.2配置不当情况下反序列化RCE

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages