File tree Expand file tree Collapse file tree 1 file changed +18
-0
lines changed
Expand file tree Collapse file tree 1 file changed +18
-0
lines changed Original file line number Diff line number Diff line change 1+ # Jetty Echo
2+ ## 说明
3+ 直接参考 ``` c0ny1 ``` 文章中的截图,找到 ``` httpConnection ``` 对象,编写代码实现回显
4+ ![ img1] ( https://github.com/feihong-cs/deserizationEcho/blob/master/Jetty/img/001.png?raw=true )
5+ ![ img2] ( https://github.com/feihong-cs/deserizationEcho/blob/master/Jetty/img/20200628003.png?raw=true )
6+
7+ ## 效果
8+ ![ img3] ( https://github.com/feihong-cs/deserizationEcho/blob/master/Jetty/img/20200628002.png )
9+
10+ ## 踩坑
11+ 当拿到 ``` httpConnection ``` 对象时,想直接调用其 ``` send ``` 方法实现回显,发现报错。进一步测试发现,对拿到的 ``` httpConnection ``` 执行 ``` instanceof HttpConnection ``` 时返回 ``` false ``` ,
12+ 经过询问朋友 ``` Pine.lin ``` 才得知,我拿到的 ``` httpConnection ``` 对象和 ``` import ``` 进来的对象竟然使用的是不同的类加载器(很奇怪),从而导致了这个问题,导致我在这里卡了很久,
13+ 非常感谢 ``` Pine.lin ``` 的帮忙。
14+ ![ img4] ( https://github.com/feihong-cs/deserizationEcho/blob/master/Jetty/img/20200628001.png?raw=true )
15+
16+ ## 参考
17+ * [ 半自动化挖掘request实现多种中间件回显] ( https://mp.weixin.qq.com/s/uWyHRexDZWQwp81lWjmqqw )
18+ * [ https://www.eclipse.org/jetty/javadoc/current/org/eclipse/jetty/server/HttpConnection.html ] ( https://www.eclipse.org/jetty/javadoc/current/org/eclipse/jetty/server/HttpConnection.html )
You can’t perform that action at this time.
0 commit comments