Functions — github.com/0c0c0f/security

CodeHub MCPcopy Create free account

hub / github.com/0c0c0f/security / functions

Functions38 in github.com/0c0c0f/security

⨍ Functions 38 ◇ Types & classes 8

↓ 11 callersFunction__exit

↓ 10 callersMethodrx

(String str, Pattern pattern)

src/main/java/com/corp/vul/SecurityHttpWrapper.java:13

↓ 3 callersMethodSecurityXssScript

(String content)

src/main/java/com/corp/vul/SecurityUtil.java:35

↓ 2 callersFunction__read

↓ 2 callersFunctionbpf_update_elem

↓ 2 callersMethodgetHost

src/main/java/com/corp/vul/SecurityUtil.java:379

↓ 2 callersFunctionget_value

↓ 2 callersMethodisValidFileName

(String fileName)

src/main/java/com/corp/vul/SecurityUtil.java:225

↓ 1 callersMethodJdbcSecuritySQLI

(String content)

src/main/java/com/corp/vul/SecurityUtil.java:108

↓ 1 callersFunction__get_fp

↓ 1 callersFunction__write

↓ 1 callersFunctionbpf_create_map

↓ 1 callersFunctionbpf_lookup_elem

↓ 1 callersFunctionbpf_prog_load

↓ 1 callersFunctionget_sp

↓ 1 callersMethodisEscapeNeededForString

(String x, int stringLength)

src/main/java/com/corp/vul/SecurityUtil.java:60

↓ 1 callersFunctionprep

↓ 1 callersFunctionpwn

↓ 1 callersFunctionwritemsg

MethodSecurityFileUploads

(HttpServletRequest request, int maxBytes, File tempDir, File finalDir, String exts, boolean reNameIsTrue)

src/main/java/com/corp/vul/SecurityUtil.java:269

MethodSecurityHttpWrapper

(HttpServletRequest request)

src/main/java/com/corp/vul/SecurityHttpWrapper.java:55

MethodSecurityLFI

(Path dir, Path file)

src/main/java/com/corp/vul/SecurityUtil.java:212

MethodSecurityRSHeaderInjection

(String rsHeaderStr)

src/main/java/com/corp/vul/SecurityUtil.java:423

MethodSecuritySQLI

(String content)

src/main/java/com/corp/vul/SecurityUtil.java:203

MethodSecuritySSRF

(String url, String whiteUrl)

src/main/java/com/corp/vul/SecurityUtil.java:365

MethodSecurityUrlRedirect

(String url, String whiteUrl)

src/main/java/com/corp/vul/SecurityUtil.java:350

MethodSecurityXXE

(String content)

src/main/java/com/corp/vul/SecurityUtil.java:401

Method__construct

src/main/java/com/corp/vul/SecurityFilter.java:14

(ServletRequest req, ServletResponse resp, FilterChain chain)

src/main/java/com/corp/vul/SecurityFilter.java:17

MethodgetHeader

覆盖getHeader方法，将参数名和参数值都做xss过滤如果需要获得原始的值，则通过super.getHeaders(name)来获取getHeaderNames也可能需要覆盖

src/main/java/com/corp/vul/SecurityHttpWrapper.java:119

MethodgetOrgRequest

获取最原始的request @return

src/main/java/com/corp/vul/SecurityHttpWrapper.java:174

MethodgetParameter

覆盖getParameter方法，将参数名和参数值都做xss过滤。如果需要获得原始的值，则通过super.getParameterValues(name)来获取 getParameterNames,getParameterValues和getParameterMap也可能需要覆盖

src/main/java/com/corp/vul/SecurityHttpWrapper.java:65

MethodhostHeaderInj

src/main/java/com/corp/vul/SecurityUtil.java:412

(FilterConfig config)

src/main/java/com/corp/vul/SecurityFilter.java:22

(String[] args)

src/main/java/com/corp/vul/SecurityUtil.java:428

(long pBytesRead, long pContentLength, int pItems)

src/main/java/com/corp/vul/SecurityUtil.java:291