Share
## https://sploitus.com/exploit?id=26AE20C8-15D8-5558-9FCD-6240861D3FC4
# Fastjson 1.2.83 RCE PoC  
Fastjson 1.2.66โ€“1.2.83: Script for verifying remote code execution vulnerabilities | AutoType is still vulnerable even when disabled by default | Compatible with JDK 8/17/21  
Does the damage-minimization test detect this vulnerability?  
The test process report is in the.docx file; Iโ€™m too lazy to write it again.  

**POC Overview:**  
The poc.py script causes the target server to send a request to our own server. Our server must have a listening port enabled (remember to turn on the firewall). If our server responds with data, it indicates that there is a vulnerability on the target server. If there is no response, itโ€™s likely that there is no vulnerability, or there are other reasons.