2、shiro反序列化漏洞
- 实验环境
- 从github上获取 Apache Shiro 存在漏洞的源代码。地址:https://github.com/apache/shiro/releases/tag/shiro-root-1.2.4
ps:反序列化漏洞原理
- https://www.cnblogs.com/lcxblogs/p/13539535.html
- https://www.cnblogs.com/bmjoker/p/13742666.html
- https://www.cnblogs.com/bmjoker/p/13831713.html