LuckyC4t/shiro-urldns

shiro反序列化检测(只是个玩具23333)

shiro-urldns 检测

用于检测是否存在shiro反序列化漏洞

新增PrincipalCollection检测

构建

mvn clean package -DskipTests

效果

致谢

https://github.com/frohoff/ysoserial

https://blog.paranoidsoftware.com/triggering-a-dns-lookup-using-java-deserialization/

https://github.com/sv3nbeast/ShiroScan

https://mp.weixin.qq.com/s/do88_4Td1CSeKLmFqhGCuQ