Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

小白发问,这是怎么回事呢 #88

Open
2938466314 opened this issue Feb 11, 2023 · 3 comments
Open

小白发问,这是怎么回事呢 #88

2938466314 opened this issue Feb 11, 2023 · 3 comments

Comments

@2938466314
Copy link

0624e166979042187bcddc95559db0f

@BeichenDream
Copy link
Owner

php?

@2938466314
Copy link
Author

jsp和php都会

@BeichenDream
Copy link
Owner

对于php来说,通常是因为某些原因导致session_start后没有生成set-cookie,这种情况可以在php代码添加

session_id("a3dcb4d229de6fde0db5686dee");

对于JSP,通常是目标开启了session持久化,并且我们向session存入了不可被反序列化的数据,导致后续使用此session我们无法获取到之前存入的数据,如Payload,解决此问题的版本,你只需把生成的shell中的session替换成application

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants