-
Notifications
You must be signed in to change notification settings - Fork 282
Description
目标靶机是vulhub CVE-2016-4437
使用kali 与 windows 尝试过以下方法:
首先双击没反应,尝试 java 旧版本,把本项目 issue 中提到的都试过了,8u202、8u111,双击没反应
用命令行运行报 UI 错误,
尝试 javafx SDK,以java --module-path [lib目录] --add-modules javafx.controls,javafx.fxml -jar [jar文件路径] 运行
面板能打开了,但无法爆破密钥,无法检测利用链。终端报如下错误
Picked up _JAVA_OPTIONS: -Dawt.useSystemAAFontSettings=on -Dswing.aatext=true
MESA: error: ZINK: failed to choose pdev
glx: failed to create drisw screen
SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
SLF4J: Defaulting to no-operation (NOP) logger implementation
SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.
MLog initialization issue: slf4j found no binding or threatened to use its (dangerously silent) NOPLogger. We consider the slf4j library not found.
Exception in thread "Thread-2" java.lang.NoClassDefFoundError: javax/xml/bind/DatatypeConverter
at com.summersec.attack.deser.frame.Shiro.sendpayload(Shiro.java:33)
at com.summersec.attack.core.AttackService$1.run(AttackService.java:335)
at java.base/java.lang.Thread.run(Thread.java:1583)
Caused by: java.lang.ClassNotFoundException: javax.xml.bind.DatatypeConverter
at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:641)
at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:188)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:526)
... 3 more
Nov 10, 2025 2:07:14 PM com.mchange.v2.log.MLog
INFO: MLog clients using java 1.4+ standard logging.
windows与 kali 均如此。java 版本 21、23 (低版本8u202、8u111等均无法运行)