diff --git a/src/main/java/me/gv7/woodpecker/yso/payloads/util/DirtyDataWrapper.java b/src/main/java/me/gv7/woodpecker/yso/payloads/util/DirtyDataWrapper.java index 8eee7fb..5ab3f18 100644 --- a/src/main/java/me/gv7/woodpecker/yso/payloads/util/DirtyDataWrapper.java +++ b/src/main/java/me/gv7/woodpecker/yso/payloads/util/DirtyDataWrapper.java @@ -6,6 +6,12 @@ import java.io.ObjectOutputStream; import java.util.*; +/** + * @author c0ny1 + * @reference: + * Java反序列化数据绕WAF之加大量脏数据 + * https://gv7.me/articles/2021/java-deserialize-data-bypass-waf-by-adding-a-lot-of-dirty-data/ + */ public class DirtyDataWrapper { private int dirtyDataSize; //脏数据大小 private String dirtyData; //脏数据内容