Types & classes — github.com/0x727/DropLabTools

CodeHub MCPcopy Index your code

hub / github.com/0x727/DropLabTools / types & classes

Types & classes82 in github.com/0x727/DropLabTools

⨍ Functions 332◇ Types & classes 82

ClassA6FileUploadPoc

src/main/java/com/droplab/Controller/Seeyon/Service/A6FileUploadPoc.java:18

ClassA6V5FastJson

src/main/java/com/droplab/Controller/Seeyon/Service/A6V5FastJson.java:22

ClassA6V5V6SessionGet

thirdpartyController.do 获取系统管理员session

src/main/java/com/droplab/Controller/Seeyon/Common/A6V5V6SessionGet.java:14

InterfaceBaseController

src/main/java/com/droplab/Controller/BaseController.java:5

ClassBlindCommonsCollection6

src/main/java/com/droplab/Utils/UnSerialize/Gadget/BlindCommonsCollection6.java:22

ClassBlueEkpController

src/main/java/com/droplab/Controller/BlueEkp/BlueEkpController.java:23

ClassBlueEkpDataSysCommonTreexml

蓝凌V15 V16 权限绕过RCE

src/main/java/com/droplab/Controller/BlueEkp/Service/BlueEkpDataSysCommonTreexml.java:19

ClassBlueEkpDecode

蓝凌OA的加解密功能

src/main/java/com/droplab/Controller/BlueEkp/Service/BlueEkpDecode.java:14

ClassBlueEkpSSRF

src/main/java/com/droplab/Controller/BlueEkp/Service/BlueEkpSSRF.java:12

ClassBlueEkpSSRFXMLDecode

src/main/java/com/droplab/Controller/BlueEkp/Service/BlueEkpSSRFXMLDecode.java:18

ClassBugService

src/main/java/com/droplab/service/BugService.java:7

InterfaceBugsInfterface

src/main/java/com/droplab/service/BugsInfterface.java:5

ClassC3P0SerializeObject

用于获取C3P0序列化对象。

src/main/java/com/droplab/Controller/FastJson/Common/C3P0SerializeObject.java:25

ClassClassFiles

src/main/java/com/droplab/Utils/UnSerialize/utils/ClassFiles.java:7

ClassCodeFactory

任意代码执行的代码生成工厂

src/main/java/com/droplab/Utils/Factory/CodeFactory.java:15

ClassCommonBeanutils1

src/main/java/com/droplab/Utils/UnSerialize/Gadget/CommonBeanutils1.java:11

ClassCommonUtils

src/main/java/com/droplab/Utils/CommonUtils.java:10

ClassCommonsCollections6

src/main/java/com/droplab/Utils/UnSerialize/Gadget/CommonsCollections6.java:18

ClassCommonsCollections6NC

用友NC6.5 反序列化构造链改造,利用CC6构造链。

src/main/java/com/droplab/Controller/Yongyou/Common/CommonsCollections6NC.java:21

ClassDBPassDecode

致远oa 数据库密码解密

src/main/java/com/droplab/Controller/Seeyon/Service/DBPassDecode.java:12

ClassDropLabToolsApplication

src/main/java/com/droplab/DropLabToolsApplication.java:18

ClassEZOfficeController

src/main/java/com/droplab/Controller/EZOffice/EZOfficeController.java:18

ClassEZOfficeFileUploadController

src/main/java/com/droplab/Controller/EZOffice/Service/EZOfficeFileUploadController.java:13

ClassEZOfficeOfficeServer2015

万户OA金格2015文件上传

src/main/java/com/droplab/Controller/EZOffice/Service/EZOfficeOfficeServer2015.java:16

ClassEZOfficeOfficeServerServlet

万户OA金格office组件上传

src/main/java/com/droplab/Controller/EZOffice/Service/EZOfficeOfficeServerServlet.java:17

ClassFastJsonBCEL

src/main/java/com/droplab/Controller/FastJson/Service/FastJsonBCEL.java:15

ClassFastJsonC3P0Other

src/main/java/com/droplab/Controller/FastJson/Service/FastJsonC3P0Other.java:12

ClassFastJsonC3P0SELF

src/main/java/com/droplab/Controller/FastJson/Service/FastJsonC3P0SELF.java:13

ClassFastjsonController

用于生成一些fastjson的利用文件。

src/main/java/com/droplab/Controller/FastJson/FastjsonController.java:24

ClassFileZipUtils

用于创建特殊压缩包

src/main/java/com/droplab/Utils/FileZipUtils.java:16

ClassFilterImplStr

src/main/java/com/droplab/Utils/Memory/Tomcat/Filter/FilterImplStr.java:3

ClassFineReportController

帆软报表漏洞

src/main/java/com/droplab/Controller/FineReport/FineReportController.java:23

ClassFinereportV10Hibernatel

src/main/java/com/droplab/Controller/FineReport/Common/FinereportV10Hibernatel.java:24

src/main/java/com/droplab/Utils/UnSerialize/utils/Gadgets.java:136

InterfaceGadgetInterface

src/main/java/com/droplab/Utils/UnSerialize/Gadget/Interface/GadgetInterface.java:3

src/main/java/com/droplab/Utils/UnSerialize/utils/Gadgets.java:15

ClassGetUnserializePayload

src/main/java/com/droplab/Controller/Yongyou/Service/GetUnserializePayload.java:22

ClassHomeController

src/main/java/com/droplab/Controller/HomeController.java:11

ClassHtmlOfficeServletPayload

src/main/java/com/droplab/Controller/Seeyon/Common/HtmlOfficeServletPayload.java:12

Http发送post请求工具，兼容http和https两种请求类型

src/main/java/com/droplab/Utils/HttpUtils.java:34

InterfaceImplInterface

src/main/java/com/droplab/Utils/Memory/Interface/ImplInterface.java:3

src/main/java/com/droplab/Utils/InfoUtils.java:5

ClassJavaStringCompiler

In-memory compile Java source code as String. @author michael

src/main/java/com/droplab/Utils/compile/JavaStringCompiler.java:21

ClassJavaVersion

@author mbechler

src/main/java/com/droplab/Utils/UnSerialize/utils/JavaVersion.java:7

ClassKingGEPayloadCalc

金格组件自定义payload计算长度

src/main/java/com/droplab/Controller/EZOffice/Service/KingGEPayloadCalc.java:11

ClassMemoryInputJavaFileObject

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:55

ClassMemoryJavaFileManager

In-memory java file manager. @author michael

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:19

ClassMemoryOutputJavaFileObject

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:70

ClassMemroyFactory

src/main/java/com/droplab/Utils/Memory/MemroyFactory.java:8

ClassMyAuthenticator

src/main/java/com/droplab/Utils/HttpUtils.java:372

ClassNoResponseExec

无回显的命令执行

src/main/java/com/droplab/Controller/elShell/Service/NoResponseExec.java:17

ClassPayloadFactory

scriptengineManager payload生成器

src/main/java/com/droplab/Controller/elShell/Common/PayloadFactory.java:6

ClassPoolSource

src/main/java/com/droplab/Controller/FastJson/Common/C3P0SerializeObject.java:63

ClassPortalDesignerManager

src/main/java/com/droplab/Controller/Seeyon/Common/PortalDesignerManager.java:12

ClassProxyController

src/main/java/com/droplab/Controller/Common/ProxyController.java:14

ClassROMEObject

获取rome序列化链

src/main/java/com/droplab/Controller/Seeyon/Common/ROMEObject.java:14

ClassReflections

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:11

ClassResponseExec

有回显的命令执行

src/main/java/com/droplab/Controller/elShell/Service/ResponseExec.java:19

ClassResponseUtils

src/main/java/com/droplab/Utils/ResponseUtils.java:13

ClassSeeyonController

src/main/java/com/droplab/Controller/Seeyon/SeeyonController.java:23

ClassSerializeFactory

src/main/java/com/droplab/Utils/UnSerialize/SerializeFactory.java:7

ClassSilentURLStreamHandler

src/main/java/com/droplab/Utils/UnSerialize/Gadget/URLDNS.java:35

src/main/java/com/droplab/Utils/TestUtils.java:4

ClassTomcatEcho

tomcat回显获取

src/main/java/com/droplab/Utils/Echo/TomcatEcho.java:13

src/main/java/com/droplab/Utils/UnSerialize/Gadget/URLDNS.java:14

ClassUploadMenuIconFile

fileUpload.do利用链，通过 menu.do--uploadMenuIcon()方法去进行文件移动

src/main/java/com/droplab/Controller/Seeyon/Common/UploadMenuIconFile.java:12

src/main/java/com/droplab/Controller/EZOffice/Common/Utils.java:11

ClassV10Unserialize

src/main/java/com/droplab/Controller/FineReport/Service/V10Unserialize.java:15

ClassV8FileUploadOne

src/main/java/com/droplab/Controller/FineReport/Service/V8FileUploadOne.java:16

ClassV8FileUploadTwo

src/main/java/com/droplab/Controller/FineReport/Service/V8FileUploadTwo.java:14

ClassV8UploadCommon

src/main/java/com/droplab/Controller/FineReport/Common/V8UploadCommon.java:12

ClassV9FileOverWrite

帆软报表V9任意文件覆盖漏洞。

src/main/java/com/droplab/Controller/FineReport/Service/V9FileOverWrite.java:19

ClassValveImplStr

src/main/java/com/droplab/Utils/Memory/Tomcat/Valve/ValveImplStr.java:7

ClassWPSAssistServletUpload

wps组件任意文件上传，适用版本 A6/A8/A8N_V8.0SP2&LTS

src/main/java/com/droplab/Controller/Seeyon/Service/WPSAssistServletUpload.java:16

ClassYongyouCheckeURL

检查存在漏洞的URL是否存在。

src/main/java/com/droplab/Controller/Yongyou/Service/YongyouCheckeURL.java:15

ClassYongyouController

src/main/java/com/droplab/Controller/Yongyou/YongyouController.java:20

src/main/java/com/droplab/Utils/Memory/Tomcat/Filter/addFilter.java:3

src/main/java/com/droplab/Utils/Memory/Tomcat/Valve/addValve.java:7

ClasselShellController

el表达式webshell客户端

src/main/java/com/droplab/Controller/elShell/elShellController.java:24

ClasselShellMemoryShell

el表达式shell实现内存马注入

src/main/java/com/droplab/Controller/elShell/Service/elShellMemoryShell.java:19

ClasselShellUploadShell

基于自动寻址的任意文件上传

src/main/java/com/droplab/Controller/elShell/Service/elShellUploadShell.java:20

Classhtmlofficeservlet

src/main/java/com/droplab/Controller/Seeyon/Service/htmlofficeservlet.java:15