https://baozongwi.xyz/tags/hutool/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/ciscn-2023-deserbug/Fri, 14 Nov 2025 00:53:01 +0800https://baozongwi.xyz/p/ciscn-2023-deserbug/cn.hutool.json.JSONObject.put->com.app.Myexpect#getAnyexcept jdk8u202 题目提示了类，jdk8u202 和 8u66 我感觉是一样的 commons-collections-3.2.2.jar hutool-all-5.8.18.jar 先准备恶意类 …