This project forked from chennqqi/shiromemshell
如何从Shiro反序列化到注入内存马以及解决请求头过大问题
工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责
关于Shiro反序列化如何在SpringBoot环境下注入Tomcat内存马以及请求头过大如何解决
这一系列过程网上很多文章都写地晦涩难懂，要么藏一手不写全，让Java安全小白难以学习，于是我把这一系列过程代码写出来
使用配套环境即可成功：https://github.com/EmYiQing/ShiroEnv
运行Exp.java即可注入，访问http://127.0.0.1/xxx(任何路径)?cmd=whoami
最后：感谢天下大木头师傅的帮助
未经授权许可使用该工具攻击目标是非法的
本程序应仅用于授权的安全测试与研究目的
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
