CommonsCollections5分析

CommonsCollections5
调用链

BadAttributeValueExpException.readObject()
|
TiedMapEntry.toString()
|
LazyMap.get()
|
ChainedTransformer.transform()
|
ConstantTransformer.transform()
|
InvokerTransformer.transform()
|
Runtime.exec()

Ysoserial调用链

/*
Gadget chain:
ObjectInputStream.readObject()
BadAttributeValueExpException.readObject()
TiedMapEntry.toString()
LazyMap.get()

CommonsCollections5分析最先出现在Python成神之路。