hub / github.com/Afant1/JavaSearchTools
github.com/Afant1/JavaSearchTools @v1.0
Chat with this repo
14 symbols
24 edges
2 files
0 documented · 0%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
JavaSearchTools 辅助人工审计，寻找java反序列化危险类的工具。
Usage:java -jar SearchClassInJar.jar Path
第一步：首先用jd-gui反编译jar包还原代码,存储路径：C:\Users\afanti\Desktop\ctf-tools\jd-gui\weblogic\
第二步：java -jar SearchClassInJar.jar C:\Users\afanti\Desktop\ctf-tools\jd-gui\weblogic\
Demo是寻找xml库和实现序列化接口的正则，可在SearchReadObject，SearchEvilPackage函数修改正则。
文章发表在安全客：https://www.anquanke.com/post/id/199703
Core symbols most depended-on inside this repo
wildcardEqualscalled by 2
SearchClassInJar.java
getClassName
called by 1
SearchClassInJar.java
searchClass
called by 1
SearchClassInJar.java
searchDir
called by 1
SearchClassInJar.java
WildcardToReg
called by 1
SearchClassInJar.java
Test
called by 1
JarFileReader.java
processEvilPackage
called by 1
JarFileReader.java
processReadObject
called by 1
JarFileReader.java
Shape
Languages
Java100%
Modules by API surface
SearchClassInJar.java8 symbols
JarFileReader.java6 symbols
For agents
$ claude mcp add JavaSearchTools \
-- python -m otcore.mcp_server <graph>