Site updated: 2024-10-27 12:21:17

CyanM0un · Oct 27, 2024 · 7a2e7d5 · 7a2e7d5
1 parent 9c64620
commit 7a2e7d5
Showing 1 changed file with 4 additions and 7 deletions.
diff --git a/2024/10/27/New-Gadget-Chains-of-Vaadin7/index.html b/2024/10/27/New-Gadget-Chains-of-Vaadin7/index.html
@@ -6,14 +6,13 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
     <meta name="HandheldFriendly" content="True">
     <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=5" />
-    <meta name="description" content="前言分享一下在Vaadin7找到的两条新Gadget Chain，可以造成JNDI注入或JDBC攻击 Gadget Chain 分析我们还是从PropertysetItem#toString()开始看    这里getItemProperty可以返回Property子类，已有链使用的是NestedMethodProperty类触发getter方法，我们这里看看其他类方法如：AbstractSele">
+    <meta name="description" content="前言分享一下在Vaadin7找到的两条新Gadget Chain，可以造成JNDI注入或JDBC攻击 Gadget Chain 分析我们还是从PropertysetItem#toString()开始看  这里getItemProperty可以返回Property子类，已有链使用的是NestedMethodProperty类触发getter方法，我们这里看看其他类方法如：AbstractSelect">
 <meta property="og:type" content="article">
 <meta property="og:title" content="New Gadget Chains of Vaadin7">
 <meta property="og:url" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/index.html">
 <meta property="og:site_name" content="CyanM0un">
-<meta property="og:description" content="前言分享一下在Vaadin7找到的两条新Gadget Chain，可以造成JNDI注入或JDBC攻击 Gadget Chain 分析我们还是从PropertysetItem#toString()开始看    这里getItemProperty可以返回Property子类，已有链使用的是NestedMethodProperty类触发getter方法，我们这里看看其他类方法如：AbstractSele">
+<meta property="og:description" content="前言分享一下在Vaadin7找到的两条新Gadget Chain，可以造成JNDI注入或JDBC攻击 Gadget Chain 分析我们还是从PropertysetItem#toString()开始看  这里getItemProperty可以返回Property子类，已有链使用的是NestedMethodProperty类触发getter方法，我们这里看看其他类方法如：AbstractSelect">
 <meta property="og:locale" content="en_US">
-<meta property="og:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927143804644.png">
 <meta property="og:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927143804644.png">
 <meta property="og:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927144126438.png">
 <meta property="og:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927144601528.png">
@@ -25,10 +24,10 @@
 <meta property="og:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927145251752.png">
 <meta property="og:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927145332951.png">
 <meta property="article:published_time" content="2024-10-27T03:50:02.000Z">
-<meta property="article:modified_time" content="2024-10-27T04:18:24.317Z">
+<meta property="article:modified_time" content="2024-10-27T04:21:05.565Z">
 <meta property="article:author" content="CyanM0un">
 <meta name="twitter:card" content="summary">
-<meta name="twitter:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927143804644.png">
+<meta name="twitter:image" content="http://example.com/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927143804644.png">
 
 
 
@@ -166,8 +165,6 @@ <h1 class="posttitle p-name" itemprop="name headline">
   <div class="content e-content" itemprop="articleBody">
     <h2 id="前言"><a href="#前言" class="headerlink" title="前言"></a>前言</h2><p>分享一下在Vaadin7找到的两条新Gadget Chain，可以造成JNDI注入或JDBC攻击</p>
 <h2 id="Gadget-Chain-分析"><a href="#Gadget-Chain-分析" class="headerlink" title="Gadget Chain 分析"></a>Gadget Chain 分析</h2><p>我们还是从<code>PropertysetItem#toString()</code>开始看</p>
-<img src="/2024/10/27/New-Gadget-Chains-of-Vaadin7/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927143804644.png" class title="toString">
-
 <p><img src="/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927143804644.png"></p>
 <p>这里<code>getItemProperty</code>可以返回<code>Property</code>子类，已有链使用的是<code>NestedMethodProperty</code>类触发getter方法，我们这里看看其他类方法如：<code>AbstractSelect#getValue</code></p>
 <p><img src="/2024/10/27/New-Gadget-Chains-of-Vaadin7/image-20240927144126438.png"></p>