{"id":478257,"date":"2023-08-09T09:29:53","date_gmt":"2023-08-09T09:29:53","guid":{"rendered":""},"modified":"2023-09-05T11:16:22","modified_gmt":"2023-09-05T11:16:22","slug":"ognl-injection","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/ar\/wiki\/ognl-injection\/","title":{"rendered":"\u062d\u0642\u0646 \u0627\u0648\u062c\u0646\u0644"},"content":{"rendered":"<p>\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0645\u062e\u062a\u0635\u0631\u0629 \u0639\u0646 \u062d\u0642\u0646 OGNL<\/p>\n<p>\u064a\u0639\u062f \u062d\u0642\u0646 OGNL (\u0644\u063a\u0629 \u0627\u0644\u062a\u0646\u0642\u0644 \u0641\u064a \u0627\u0644\u0631\u0633\u0645 \u0627\u0644\u0628\u064a\u0627\u0646\u064a \u0644\u0644\u0643\u0627\u0626\u0646\u0627\u062a) \u0623\u062d\u062f \u0623\u0646\u0648\u0627\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062a\u064a \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 \u062e\u0627\u062f\u0645 \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0648\u064a\u0628. \u064a\u062a\u0636\u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u0646\u0648\u0639 \u0645\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u0628\u0639\u0636 \u0623\u0637\u0631 \u0639\u0645\u0644 \u0627\u0644\u0648\u064a\u0628\u060c \u0648\u0623\u0628\u0631\u0632\u0647\u0627 Apache Struts. \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062f\u064a \u062d\u0642\u0646 OGNL \u0625\u0644\u0649 \u0627\u0644\u0643\u0634\u0641 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u0647 \u0639\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a\u060c \u0623\u0648 \u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a\u060c \u0623\u0648 \u062d\u062a\u0649 \u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0627\u0644\u0643\u0627\u0645\u0644.<\/p>\n<h2>\u062a\u0627\u0631\u064a\u062e \u0623\u0635\u0644 \u062d\u0642\u0646 OGNL \u0648\u0623\u0648\u0644 \u0630\u0643\u0631 \u0644\u0647\u0627<\/h2>\n<p>\u0623\u0635\u0628\u062d \u062d\u0642\u0646 OGNL \u0645\u0639\u0631\u0648\u0641\u064b\u0627 \u062c\u0646\u0628\u064b\u0627 \u0625\u0644\u0649 \u062c\u0646\u0628 \u0645\u0639 \u0646\u0645\u0648 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 \u0648\u0627\u0644\u0623\u0637\u0631 \u0627\u0644\u062a\u064a \u062a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL \u0644\u0623\u063a\u0631\u0627\u0636 \u0645\u062e\u062a\u0644\u0641\u0629\u060c \u0645\u062b\u0644 \u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0639\u0631\u0636 \u0648\u0627\u062c\u0647\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645. \u0623\u0635\u0628\u062d Apache Struts\u060c \u0648\u0647\u0648 \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 \u0645\u0641\u062a\u0648\u062d \u0627\u0644\u0645\u0635\u062f\u0631 \u0634\u0627\u0626\u0639 \u0644\u062a\u0637\u0648\u064a\u0631 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 Java\u060c \u0627\u0644\u0636\u062d\u064a\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629.<\/p>\n<p>\u0623\u0648\u0644 \u0630\u0643\u0631 \u0639\u0644\u0646\u064a \u0644\u062d\u0642\u0646 OGNL \u0643\u0627\u0646 \u0641\u064a \u0639\u0627\u0645 2011 \u0639\u0646\u062f\u0645\u0627 \u062d\u062f\u062f \u0623\u062d\u062f \u0627\u0644\u0628\u0627\u062d\u062b\u064a\u0646 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a Apache Struts2. \u064a\u0645\u062b\u0644 \u0647\u0630\u0627 \u0627\u0644\u0643\u0634\u0641 \u0628\u062f\u0627\u064a\u0629 \u0633\u0644\u0633\u0644\u0629 \u0645\u0646 \u0627\u0644\u062a\u062d\u0642\u064a\u0642\u0627\u062a \u0648\u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641\u0627\u062a \u0627\u0644\u0625\u0636\u0627\u0641\u064a\u0629 \u062d\u0648\u0644 \u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0648\u0646\u0648\u0627\u0642\u0644 \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0644\u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0640 OGNL.<\/p>\n<h2>\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062a\u0641\u0635\u064a\u0644\u064a\u0629 \u0639\u0646 \u062d\u0642\u0646 OGNL: \u062a\u0648\u0633\u064a\u0639 \u0645\u0648\u0636\u0648\u0639 \u062d\u0642\u0646 OGNL<\/h2>\n<p>\u0644\u0627 \u064a\u0642\u062a\u0635\u0631 \u062d\u0642\u0646 OGNL \u0639\u0644\u0649 Apache Struts \u0641\u062d\u0633\u0628\u060c \u0628\u0644 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0623\u0637\u0631 \u0627\u0644\u0639\u0645\u0644 \u0627\u0644\u0623\u062e\u0631\u0649 \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 OGNL \u0623\u064a\u0636\u064b\u0627. \u062a\u0645 \u062a\u0635\u0645\u064a\u0645 \u0644\u063a\u0629 \u0627\u0644\u062a\u0639\u0628\u064a\u0631 \u0627\u0644\u0642\u0648\u064a\u0629 \u0647\u0630\u0647 \u0644\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u062e\u0635\u0627\u0626\u0635 \u0643\u0627\u0626\u0646\u0627\u062a Java \u0648\u062a\u0639\u064a\u064a\u0646\u0647\u0627. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0625\u0646\u0634\u0627\u0621 \u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL \u0636\u0627\u0631\u0629 \u0648\u0627\u0644\u062a\u064a\u060c \u0639\u0646\u062f \u062a\u0642\u064a\u064a\u0645\u0647\u0627 \u0628\u0648\u0627\u0633\u0637\u0629 \u0627\u0644\u062e\u0627\u062f\u0645\u060c \u062a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 Java \u0639\u0634\u0648\u0627\u0626\u064a\u0629.<\/p>\n<h3>\u062e\u0637\u0648\u0631\u0629<\/h3>\n<p>\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062f\u064a \u062d\u0642\u0646 OGNL \u0625\u0644\u0649 \u062d\u062f\u0648\u062b \u0623\u0636\u0631\u0627\u0631 \u062c\u0633\u064a\u0645\u0629 \u0644\u0644\u062a\u0637\u0628\u064a\u0642 \u0623\u0648 \u0627\u0644\u0646\u0638\u0627\u0645. \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0642\u0648\u062f \u0625\u0644\u0649:<\/p>\n<ul>\n<li>\u062f\u062e\u0648\u0644 \u063a\u064a\u0631 \u0645\u0631\u062e\u0635<\/li>\n<li>\u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a<\/li>\n<li>\u0627\u0644\u0627\u0633\u062a\u064a\u0644\u0627\u0621 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645<\/li>\n<\/ul>\n<h3>\u0646\u0627\u0642\u0644\u0627\u062a \u0627\u0644\u0647\u062c\u0648\u0645<\/h3>\n<p>\u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0627\u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u063a\u064a\u0631 \u0627\u0644\u0622\u0645\u0646\u0629 \u0644\u0625\u062f\u062e\u0627\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u064a\u062a\u0644\u0627\u0639\u0628\u0648\u0646 \u0628\u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL. \u062a\u062a\u0636\u0645\u0646 \u0646\u0648\u0627\u0642\u0644 \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0644\u0646\u0645\u0648\u0630\u062c\u064a\u0629 \u0645\u0627 \u064a\u0644\u064a:<\/p>\n<ul>\n<li>\u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639 \u0637\u0644\u0628\u0627\u062a HTTP<\/li>\n<li>\u0635\u064a\u0627\u063a\u0629 \u0639\u0646\u0627\u0648\u064a\u0646 URL \u0627\u0644\u0636\u0627\u0631\u0629<\/li>\n<li>\u062a\u063a\u064a\u064a\u0631 \u0645\u0639\u0644\u0645\u0627\u062a \u0627\u0644\u0646\u0645\u0648\u0630\u062c<\/li>\n<\/ul>\n<h2>\u0627\u0644\u0647\u064a\u0643\u0644 \u0627\u0644\u062f\u0627\u062e\u0644\u064a \u0644\u062d\u0642\u0646 OGNL: \u0643\u064a\u0641 \u064a\u0639\u0645\u0644 \u062d\u0642\u0646 OGNL<\/h2>\n<p>\u064a\u062d\u062f\u062b \u062d\u0642\u0646 OGNL \u0639\u0646\u062f\u0645\u0627 \u064a\u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u0625\u062f\u062e\u0627\u0644 \u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL \u0627\u0644\u0636\u0627\u0631\u0629 \u0641\u064a \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642. \u0648\u0641\u064a\u0645\u0627 \u064a\u0644\u064a \u062a\u0641\u0635\u064a\u0644 \u062e\u0637\u0648\u0629 \u0628\u062e\u0637\u0648\u0629 \u0644\u0643\u064a\u0641\u064a\u0629 \u0639\u0645\u0644 \u062d\u0642\u0646 OGNL:<\/p>\n<ol>\n<li><strong>\u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639 \u0625\u062f\u062e\u0627\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645<\/strong>: \u064a\u062a\u0639\u0627\u0645\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0628\u0634\u0643\u0644 \u063a\u064a\u0631 \u0635\u062d\u064a\u062d \u0645\u0639 \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0630\u064a \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u062a\u0639\u0628\u064a\u0631 OGNL.<\/li>\n<li><strong>\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u0639\u0628\u064a\u0631<\/strong>: \u064a\u0642\u0648\u0645 \u0627\u0644\u062e\u0627\u062f\u0645 \u0628\u062a\u0648\u0632\u064a\u0639 \u0627\u0644\u062a\u0639\u0628\u064a\u0631 \u0627\u0644\u0636\u0627\u0631.<\/li>\n<li><strong>\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629<\/strong>: \u064a\u062a\u0645 \u062a\u0642\u064a\u064a\u0645 \u0627\u0644\u062a\u0639\u0628\u064a\u0631\u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u062e\u0627\u062f\u0645.<\/li>\n<li><strong>\u0646\u062a\u064a\u062c\u0629 \u0627\u0644\u0647\u062c\u0648\u0645<\/strong>: \u064a\u062d\u0635\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0644\u0649 \u0633\u064a\u0637\u0631\u0629 \u063a\u064a\u0631 \u0645\u0635\u0631\u062d \u0628\u0647\u0627 \u0623\u0648 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629.<\/li>\n<\/ol>\n<h2>\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0645\u064a\u0632\u0627\u062a \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u062d\u0642\u0646 OGNL<\/h2>\n<p>\u064a\u062a\u0645\u064a\u0632 \u062d\u0642\u0646 OGNL \u0628\u0639\u062f\u0629 \u0645\u064a\u0632\u0627\u062a:<\/p>\n<ul>\n<li><strong>\u0628\u0631\u0627\u0639\u0647<\/strong>: \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647 \u0644\u0623\u063a\u0631\u0627\u0636 \u0636\u0627\u0631\u0629 \u0645\u062e\u062a\u0644\u0641\u0629\u060c \u0628\u062f\u0621\u064b\u0627 \u0645\u0646 \u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u062d\u062a\u0649 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645.<\/li>\n<li><strong>\u062a\u0639\u0642\u064a\u062f<\/strong>: \u062a\u062a\u0637\u0644\u0628 \u0635\u064a\u0627\u063a\u0629 \u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL \u0627\u0644\u0636\u0627\u0631\u0629 \u0645\u0639\u0631\u0641\u0629 \u0628\u064a\u0626\u0629 Java \u0648\u0625\u0637\u0627\u0631 \u0627\u0644\u0639\u0645\u0644 \u0627\u0644\u0645\u062d\u062f\u062f.<\/li>\n<li><strong>\u062a\u0623\u062b\u064a\u0631 \u0639\u0627\u0644\u064a<\/strong>: \u0627\u0644\u0636\u0631\u0631 \u0627\u0644\u0645\u062d\u062a\u0645\u0644 \u0645\u0646 \u0647\u062c\u0648\u0645 \u0646\u0627\u062c\u062d \u0643\u0628\u064a\u0631.<\/li>\n<li><strong>\u0645\u0646 \u0627\u0644\u0635\u0639\u0628 \u0627\u0644\u062a\u062e\u0641\u064a\u0641<\/strong>: \u064a\u062a\u0637\u0644\u0628 \u062a\u0623\u0645\u064a\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d \u0636\u062f \u062d\u0642\u0646 OGNL \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u062f\u0642\u064a\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0625\u062f\u062e\u0627\u0644 \u0648\u0627\u0644\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u0645\u0646\u0627\u0633\u0628 \u0644\u0625\u0637\u0627\u0631 \u0627\u0644\u0639\u0645\u0644.<\/li>\n<\/ul>\n<h2>\u0623\u0646\u0648\u0627\u0639 \u062d\u0642\u0646 OGNL: \u0627\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062c\u062f\u0627\u0648\u0644 \u0648\u0627\u0644\u0642\u0648\u0627\u0626\u0645 \u0644\u0644\u0643\u062a\u0627\u0628\u0629<\/h2>\n<p>\u0647\u0646\u0627\u0643 \u0646\u0648\u0639\u0627\u0646 \u0623\u0633\u0627\u0633\u064a\u0627\u0646 \u0645\u0646 \u062d\u0642\u0646 OGNL:<\/p>\n<table>\n<thead>\n<tr>\n<th>\u064a\u0643\u062a\u0628<\/th>\n<th>\u0648\u0635\u0641<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u062d\u0642\u0646 OGNL \u0627\u0644\u0643\u0644\u0627\u0633\u064a\u0643\u064a<\/td>\n<td>\u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u063a\u064a\u0631 \u0627\u0644\u0622\u0645\u0646\u0629 \u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u062d\u0642\u0646 OGNL \u0627\u0644\u0623\u0639\u0645\u0649<\/td>\n<td>\u0646\u0648\u0639 \u0623\u0643\u062b\u0631 \u062a\u062e\u0641\u064a\u064b\u0627 \u062d\u064a\u062b \u064a\u0633\u062a\u0646\u062a\u062c \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0645\u0646 \u062e\u0644\u0627\u0644 \u0648\u0633\u0627\u0626\u0644 \u063a\u064a\u0631 \u0645\u0628\u0627\u0634\u0631\u0629\u060c \u0645\u062b\u0644 \u0645\u0631\u0627\u0642\u0628\u0629 \u0623\u0648\u0642\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0637\u0631\u0642 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062d\u0642\u0646 OGNL \u0648\u0645\u0634\u0627\u0643\u0644\u0647\u0627 \u0648\u062d\u0644\u0648\u0644\u0647\u0627 \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645<\/h2>\n<h3>\u0637\u0631\u0642 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645<\/h3>\n<ol>\n<li><strong>\u0627\u0644\u0625\u0641\u0635\u0627\u062d \u0639\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a<\/strong>: \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629 \u0645\u0646 \u0627\u0644\u062e\u0627\u062f\u0645.<\/li>\n<li><strong>\u062f\u062e\u0648\u0644 \u063a\u064a\u0631 \u0645\u0631\u062e\u0635<\/strong>: \u062a\u062c\u0627\u0648\u0632 \u0622\u0644\u064a\u0627\u062a \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629.<\/li>\n<li><strong>\u062a\u0633\u0648\u064a\u0629 \u0627\u0644\u0646\u0638\u0627\u0645<\/strong>: \u0627\u0644\u0627\u0633\u062a\u064a\u0644\u0627\u0621 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0623\u0643\u0645\u0644\u0647.<\/li>\n<\/ol>\n<h3>\u0627\u0644\u0645\u0634\u0627\u0643\u0644 \u0648\u0627\u0644\u062d\u0644\u0648\u0644<\/h3>\n<ul>\n<li><strong>\u0645\u0634\u0643\u0644\u0629<\/strong>: \u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u063a\u064a\u0631 \u0627\u0644\u0622\u0645\u0646 \u0645\u0639 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\n<ul>\n<li><strong>\u062d\u0644<\/strong>: \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u062d\u0642\u0642 \u0627\u0644\u0635\u0627\u0631\u0645 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0645\u062f\u062e\u0644\u0627\u062a \u0648\u0627\u0644\u062a\u0639\u0642\u064a\u0645.<\/li>\n<\/ul>\n<\/li>\n<li><strong>\u0645\u0634\u0643\u0644\u0629<\/strong>: \u0627\u0644\u062a\u0643\u0648\u064a\u0646 \u0627\u0644\u062e\u0627\u0637\u0626 \u0644\u0644\u0625\u0637\u0627\u0631\n<ul>\n<li><strong>\u062d\u0644<\/strong>: \u062a\u0637\u0628\u064a\u0642 \u062a\u0643\u0648\u064a\u0646\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u0646\u0627\u0633\u0628\u0629 \u0648\u062a\u062d\u062f\u064a\u062b \u0625\u0637\u0627\u0631 \u0627\u0644\u0639\u0645\u0644 \u0628\u0627\u0646\u062a\u0638\u0627\u0645 \u0625\u0644\u0649 \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0635\u062d\u062d\u0629.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2>\u0627\u0644\u062e\u0635\u0627\u0626\u0635 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0648\u0645\u0642\u0627\u0631\u0646\u0627\u062a \u0623\u062e\u0631\u0649 \u0645\u0639 \u0627\u0644\u0645\u0635\u0637\u0644\u062d\u0627\u062a \u0627\u0644\u0645\u0645\u0627\u062b\u0644\u0629 \u0641\u064a \u0634\u0643\u0644 \u0627\u0644\u062c\u062f\u0627\u0648\u0644 \u0648\u0627\u0644\u0642\u0648\u0627\u0626\u0645<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0645\u064a\u0632\u0629<\/th>\n<th>\u062d\u0642\u0646 \u0627\u0648\u062c\u0646\u0644<\/th>\n<th>\u062d\u0642\u0646 SQL<\/th>\n<th>\u062d\u0642\u0646 \u0627\u0644\u0623\u0648\u0627\u0645\u0631<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0647\u062f\u0641 \u0627\u0644\u0647\u062c\u0648\u0645<\/td>\n<td>\u062a\u0639\u0628\u064a\u0631\u0627\u062a OGNL<\/td>\n<td>\u0627\u0633\u062a\u0639\u0644\u0627\u0645\u0627\u062a SQL<\/td>\n<td>\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645<\/td>\n<\/tr>\n<tr>\n<td>\u062a\u0623\u062b\u064a\u0631<\/td>\n<td>\u0639\u0627\u0644\u064a<\/td>\n<td>\u0639\u0627\u0644\u064a<\/td>\n<td>\u0639\u0627\u0644\u064a<\/td>\n<\/tr>\n<tr>\n<td>\u062a\u0639\u0642\u064a\u062f<\/td>\n<td>\u0645\u0639\u062a\u062f\u0644\u0629 \u0625\u0644\u0649 \u0639\u0627\u0644\u064a\u0629<\/td>\n<td>\u0645\u0639\u062a\u062f\u0644<\/td>\n<td>\u0645\u0639\u062a\u062f\u0644<\/td>\n<\/tr>\n<tr>\n<td>\u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0627\u0644\u0646\u0645\u0648\u0630\u062c\u064a<\/td>\n<td>\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0625\u062f\u062e\u0627\u0644<\/td>\n<td>\u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0639\u062f\u0629<\/td>\n<td>\u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u0625\u062f\u062e\u0627\u0644\u060c \u0627\u0644\u0647\u0631\u0648\u0628<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0648\u062c\u0647\u0627\u062a \u0646\u0638\u0631 \u0648\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644 \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u062d\u0642\u0646 OGNL<\/h2>\n<p>\u064a\u0624\u062f\u064a \u0627\u0644\u062a\u0637\u0648\u064a\u0631 \u0627\u0644\u0645\u0633\u062a\u0645\u0631 \u0641\u064a \u0623\u0637\u0631 \u0627\u0644\u0648\u064a\u0628 \u0648\u0644\u063a\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0625\u0644\u0649 \u062a\u0637\u0648\u064a\u0631 \u0645\u0634\u0647\u062f \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0628\u0634\u0643\u0644 \u0645\u0633\u062a\u0645\u0631\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u062d\u0642\u0646 OGNL. \u062a\u0634\u0645\u0644 \u0627\u0644\u0631\u0624\u0649 \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644\u064a\u0629 \u0645\u0627 \u064a\u0644\u064a:<\/p>\n<ul>\n<li><strong>\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629<\/strong>: \u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0627\u0644\u062a\u0639\u0644\u0645 \u0627\u0644\u0622\u0644\u064a \u0648\u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0648\u0645\u0646\u0639 \u062d\u0642\u0646 OGNL.<\/li>\n<li><strong>\u062a\u062d\u0633\u064a\u0646\u0627\u062a \u0627\u0644\u0625\u0637\u0627\u0631<\/strong>: \u0628\u0646\u0627\u0621 \u0623\u0637\u0631 \u0623\u0643\u062b\u0631 \u0623\u0645\u0627\u0646\u064b\u0627 \u062a\u0642\u0644\u0644 \u0628\u0637\u0628\u064a\u0639\u062a\u0647\u0627 \u0645\u0646 \u0645\u062e\u0627\u0637\u0631 \u062d\u0642\u0646 OGNL.<\/li>\n<li><strong>\u0627\u0644\u0648\u0639\u064a \u0627\u0644\u0623\u0645\u0646\u064a<\/strong>: \u0632\u064a\u0627\u062f\u0629 \u0627\u0644\u062a\u0639\u0644\u064a\u0645 \u0648\u0627\u0644\u0648\u0639\u064a \u0628\u064a\u0646 \u0627\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0641\u064a\u0645\u0627 \u064a\u062a\u0639\u0644\u0642 \u0628\u0645\u0645\u0627\u0631\u0633\u0627\u062a \u0627\u0644\u062a\u0631\u0645\u064a\u0632 \u0627\u0644\u0622\u0645\u0646.<\/li>\n<\/ul>\n<h2>\u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u0623\u0648 \u0631\u0628\u0637\u0647\u0627 \u0628\u062d\u0642\u0646 OGNL<\/h2>\n<p>\u064a\u0645\u0643\u0646 \u0644\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u0645\u062b\u0644 \u062a\u0644\u0643 \u0627\u0644\u062a\u064a \u064a\u0648\u0641\u0631\u0647\u0627 OneProxy \u0623\u0646 \u062a\u0644\u0639\u0628 \u062f\u0648\u0631\u064b\u0627 \u0641\u064a \u0643\u0644 \u0645\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u0648\u0627\u0644\u062f\u0641\u0627\u0639 \u0641\u064a\u0645\u0627 \u064a\u062a\u0639\u0644\u0642 \u0628\u062d\u0642\u0646 OGNL:<\/p>\n<ul>\n<li><strong>\u0627\u0644\u062f\u0648\u0631 \u0627\u0644\u062f\u0641\u0627\u0639\u064a<\/strong>: \u0645\u0646 \u062e\u0644\u0627\u0644 \u0646\u0634\u0631 \u062e\u0627\u062f\u0645 \u0648\u0643\u064a\u0644 \u062a\u0645 \u062a\u0643\u0648\u064a\u0646\u0647 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u062a\u0635\u0641\u064a\u0629 \u062d\u0631\u0643\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0648\u0645\u0631\u0627\u0642\u0628\u062a\u0647\u0627\u060c \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u062a\u0648\u0641\u064a\u0631 \u0637\u0628\u0642\u0629 \u0625\u0636\u0627\u0641\u064a\u0629 \u0645\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0636\u062f \u062d\u0642\u0646 OGNL.<\/li>\n<li><strong>\u0627\u0644\u062f\u0648\u0631 \u0627\u0644\u0647\u062c\u0648\u0645\u064a<\/strong>: \u0642\u062f \u064a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u062e\u0648\u0627\u062f\u0645 \u0628\u0631\u0648\u0643\u0633\u064a \u0644\u0625\u062e\u0641\u0627\u0621 \u0647\u0648\u064a\u062a\u0647\u0645 \u0623\u062b\u0646\u0627\u0621 \u062a\u0646\u0641\u064a\u0630 \u0647\u062c\u0648\u0645 \u062d\u0642\u0646 OGNL\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644 \u0627\u0644\u0643\u0634\u0641 \u0648\u0627\u0644\u0625\u0633\u0646\u0627\u062f \u0623\u0643\u062b\u0631 \u0635\u0639\u0648\u0628\u0629.<\/li>\n<\/ul>\n<h2>\u0631\u0648\u0627\u0628\u0637 \u0630\u0627\u062a \u0639\u0644\u0627\u0642\u0629<\/h2>\n<ol>\n<li><a href=\"https:\/\/struts.apache.org\/security\/\" target=\"_new\" rel=\"noopener nofollow\">\u0623\u0628\u0627\u062a\u0634\u064a \u062a\u0628\u062e\u062a\u0631 \u0646\u0634\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646<\/a><\/li>\n<li><a href=\"https:\/\/owasp.org\/www-project-web-security-testing-guide\/latest\/4-Web_Application_Security_Testing\/07-Input_Validation_Testing\/12-Testing_for_OGNL_Injection\" target=\"_new\" rel=\"noopener nofollow\">\u062f\u0644\u064a\u0644 OWASP \u062d\u0648\u0644 \u0627\u062e\u062a\u0628\u0627\u0631 \u062d\u0642\u0646 OGNL<\/a><\/li>\n<li><a href=\"https:\/\/cwe.mitre.org\/data\/definitions\/917.html\" target=\"_new\" rel=\"noopener nofollow\">\u062a\u0641\u0627\u0635\u064a\u0644 CWE \u0639\u0646 \u062d\u0642\u0646 OGNL<\/a><\/li>\n<\/ol>\n<p>\u064a\u0648\u0641\u0631 \u0647\u0630\u0627 \u0627\u0644\u062f\u0644\u064a\u0644 \u0627\u0644\u0634\u0627\u0645\u0644 \u0641\u0647\u0645\u064b\u0627 \u0634\u0627\u0645\u0644\u0627\u064b \u0644\u062d\u0642\u0646 OGNL\u060c \u0645\u0639 \u062a\u0633\u0644\u064a\u0637 \u0627\u0644\u0636\u0648\u0621 \u0639\u0644\u0649 \u062a\u0627\u0631\u064a\u062e\u0647 \u0648\u0622\u0644\u064a\u0627\u062a\u0647 \u0648\u0645\u064a\u0632\u0627\u062a\u0647 \u0648\u0623\u0646\u0648\u0627\u0639\u0647 \u0648\u0639\u0644\u0627\u0642\u062a\u0647 \u0628\u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u0645\u062b\u0644 OneProxy. \u0648\u0647\u0648 \u064a\u0624\u0643\u062f \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u0627\u062a\u062e\u0627\u0630 \u062a\u062f\u0627\u0628\u064a\u0631 \u0623\u0645\u0646\u064a\u0629 \u0642\u0648\u064a\u0629 \u0644\u0644\u062f\u0641\u0627\u0639 \u0636\u062f \u0645\u062b\u0644 \u0647\u0630\u0647 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u0639\u0642\u062f\u0629 \u0648\u0627\u0644\u0636\u0627\u0631\u0629 \u0644\u0644\u063a\u0627\u064a\u0629.<\/p>","protected":false},"featured_media":478258,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478257","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>OGNL Injection<\/mark>","faq_items":[{"question":"What is OGNL Injection?","answer":"<p>OGNL Injection is a type of security vulnerability that allows an attacker to execute arbitrary code on a web application's server by exploiting OGNL expressions, which are commonly used in certain web frameworks like Apache Struts. The impact can range from unauthorized information disclosure to complete system compromise.<\/p>"},{"question":"What are the main types of OGNL Injection?","answer":"<p>There are primarily two types of OGNL Injection: Classic OGNL Injection, which exploits insecure handling of user inputs and leads to arbitrary code execution, and Blind OGNL Injection, a stealthier variant where the attacker gains information through indirect means, such as response times.<\/p>"},{"question":"How does OGNL Injection work?","answer":"<p>OGNL Injection occurs when an attacker injects malicious OGNL expressions into the application's input, which the server then parses and evaluates. This leads to the execution of arbitrary code on the server, and the attacker may gain unauthorized control or access to sensitive data.<\/p>"},{"question":"What are the key features of OGNL Injection?","answer":"<p>The key features of OGNL Injection include its versatility in malicious purposes, the complexity in crafting malicious expressions, the high impact resulting from a successful attack, and the difficulty in mitigating the vulnerability.<\/p>"},{"question":"How can OGNL Injection be prevented?","answer":"<p>OGNL Injection can be prevented by implementing strict input validation and sanitization, applying proper security configurations, and regularly updating the framework to patched versions.<\/p>"},{"question":"How is OGNL Injection different from other injections like SQL Injection?","answer":"<p>While OGNL Injection targets OGNL expressions and can lead to arbitrary code execution, SQL Injection targets SQL queries and can manipulate database queries. Command Injection, on the other hand, targets system commands. The impact is high for all these injections, but the targets and mitigation strategies vary.<\/p>"},{"question":"What are the future perspectives related to OGNL Injection?","answer":"<p>Future perspectives related to OGNL Injection include the development of advanced detection techniques using machine learning and AI, enhancements in web frameworks to minimize the risk, and increasing security awareness among developers.<\/p>"},{"question":"How can proxy servers like OneProxy be associated with OGNL Injection?","answer":"<p>Proxy servers like OneProxy can play a defensive role by filtering and monitoring traffic to provide protection against OGNL Injection. Conversely, attackers might also use proxy servers to hide their identity while conducting an OGNL Injection attack.<\/p>"},{"question":"Where can I find more information about OGNL Injection?","answer":"<p>You can find more information about OGNL Injection from sources like Apache Struts Security Bulletins, the OWASP Guide on Testing for OGNL Injection, and CWE details on OGNL Injection, all of which provide detailed insights into the vulnerability.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/478257","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/478257\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media\/478258"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media?parent=478257"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}