2、shiro反序列化漏洞

• 实验环境
  • 从github上获取 Apache Shiro 存在漏洞的源代码。地址：https://github.com/apache/shiro/releases/tag/shiro-root-1.2.4

ps:反序列化漏洞原理

• https://www.cnblogs.com/lcxblogs/p/13539535.html
• https://www.cnblogs.com/bmjoker/p/13742666.html
• https://www.cnblogs.com/bmjoker/p/13831713.html

shiro反序列化漏洞整理