BcelPayloadGenerator

BcelPayloadGenerator:-- A fastjson payload generator.

The payload uses the BasicDataSource in tomcat-dbcp, which can trigger the fastjson vulnerability without the need for ldap or RMI.

1. Prepare the EvilConstructor .class file and put it in any file.
2. Execute generated payload.

Download: -

https://github.com/OneSourceCat/BcelPayloadGenerator


blog comments powered by Disqus