Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Neoreg 连接提示Base64 decode error #19

Closed
0berry opened this issue May 21, 2024 · 7 comments
Closed

Neoreg 连接提示Base64 decode error #19

0berry opened this issue May 21, 2024 · 7 comments

Comments

@0berry
Copy link

0berry commented May 21, 2024

内存马类:org.apache.commons.lang.WebSocketUpgradeEidwInterceptor
注入器类:ch.qos.logback.xa.ReflectUtil

前面提示正常
[INFO ] [Ask NeoGeorg] Checking if NeoGeorg is ready
[INFO ] [Ask NeoGeorg] NeoGeorg says, 'All seems fine'

(更换key或者请求头,握手提示不对,说明注入是成功的)

代理流量时,返回包base64解码错误
[ERROR ] [HTTP] [NeoregReponseFormatError] Base64 decode error

@pen4uin
Copy link
Owner

pen4uin commented May 26, 2024

可以提供更详细的信息吗,中间件,中间件版本,NeoGeorg客户端版本,方便我复现。

@Lengso
Copy link

Lengso commented May 26, 2024

目测 NeoGeorg客户端版本 版本不是最新的

@Lengso
Copy link

Lengso commented May 26, 2024

目前jmg用的neogeorg对应哪个版本呢?

@0berry
Copy link
Author

0berry commented May 30, 2024

一开始我客户端用 NeoGeorg旧版本3.8.1,提示是key不对,换了NeoGeorg 5.2.0版本,就出现上面的情况了。

jMG v1.0.8

目标是jeecgboot应用(jeecgboot 3.4.4),fatJar形式的。启动是 java -jar jeecg-system-start-3.4.4
https://github.com/jeecgboot/jeecg-boot/tree/v3.4.4

@pen4uin
Copy link
Owner

pen4uin commented Jun 1, 2024

一开始我客户端用 NeoGeorg旧版本3.8.1,提示是key不对,换了NeoGeorg 5.2.0版本,就出现上面的情况了。

jMG v1.0.8

目标是jeecgboot应用(jeecgboot 3.4.4),fatJar形式的。启动是 java -jar jeecg-system-start-3.4.4 https://github.com/jeecgboot/jeecg-boot/tree/v3.4.4

使用 NeoGeorg 5.1.0 再试试(已更新 README),我这边测试没问题,可以正常工作

@pen4uin
Copy link
Owner

pen4uin commented Jun 1, 2024

推荐使用 Listener,使用 Interceptor 需要去找到同时支持 GET 和 POST 的接口

@0berry
Copy link
Author

0berry commented Jun 3, 2024

确实,我本地试了NeoGeorg 5.1.0 / 5.2.0 都没问题,但需要加上--skip参数。可能那次碰到的目标被有些师傅先打过内存马了。

@0berry 0berry closed this as completed Jun 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants