PrototypeCommon
threedr3am/tomcat-cluster-session-sync-exp
tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484是session持久化的洞，这个是session集群同步的洞！
- Owner
- threedr3am (personal account)
- Stars
- Stars: 214
- Forks
- Forks: 37
- Language
- Java
- License
- None
- Created
- 2020
- Tier
- Prototype (100 to 249 ★) What this tier means
More repos by threedr3am
All 6 repos by threedr3am- threedr3am/learnjavabugStars: 2,682JavaRC
- threedr3am/JSP-WebShellsStars: 1,394JavaBeta
- threedr3am/ZhouYuStars: 615JavaAlpha
- threedr3am/dubbo-expStars: 162JavaPrototype
- threedr3am/log-agentStars: 123JavaPrototype
Nearby in Java
All Java repos- ayunami2000/ayunpictojavaStars: 214JavaPrototype
- safa-yesilyurt/spring-boot-microservicesStars: 214JavaPrototype
- chsami/MicrobotStars: 214JavaPrototype
- ajsutton/disruptorWizardStars: 214JavaPrototype
- Ninja-Squad/DbSetupStars: 214JavaPrototype
- koreader/kpvbookletStars: 214JavaPrototype