gitea-mirror/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-12-27 21:23:33 -08:00
Code Issues Packages Projects Releases Wiki Activity

Oracle SQL

Browse Source
This commit is contained in:
Swissky
2022-09-13 22:04:21 +02:00
parent 0ca060c049
commit c7dd67986c
3 changed files with 38 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
Insecure Deserialization/Java.md
View File

@@ -2,10 +2,12 @@
## Detection
- "AC ED 00 05" in Hex
- "rO0" in Base64
- `"AC ED 00 05"` in Hex
* `AC ED`: STREAM_MAGIC. Specifies that this is a serialization protocol.
* `00 05`: STREAM_VERSION. The serialization version.
- `"rO0"` in Base64
- Content-type = "application/x-java-serialized-object"
- "H4sIAAAAAAAAAJ" in gzip(base64)
- `"H4sIAAAAAAAAAJ"` in gzip(base64)
## Exploit