https://ctf.org.cn/2020/04/24/%E4%B9%8B%E5%89%8D%E7%9A%84/Apache-Shiro-1-2-4%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2016-4437%EF%BC%89%E5%A4%8D%E7%8E%B0%E9%81%87%E5%88%B0%E7%9A%84%E5%9D%91/
不使用JRMPListener实现Apache Shiro 1.2.4反序列化漏洞（CVE-2016-4437）反弹shell
shiro