Functions — github.com/Ape1ron/SpringAopInDeserializationDemo1

hub / github.com/Ape1ron/SpringAopInDeserializationDemo1 / functions

Functions36 in github.com/Ape1ron/SpringAopInDeserializationDemo1

⨍ Functions 36 ◇ Types & classes 10

↓ 17 callersMethodsetFieldValue

(Object obj,String filedName,Object value)

src/main/java/Reflections.java:40

↓ 8 callersMethodnewInstance

(String className,Class paramType,Object param)

src/main/java/Reflections.java:75

↓ 3 callersMethodgetField

(Class clazz,String fieldName)

src/main/java/Reflections.java:16

↓ 2 callersMethodmakeGadget

(InvocationHandler handler, Class... classes)

src/main/java/Proxy.java:5

↓ 2 callersMethodmakeGadget

(Object object)

src/main/java/JdkDynamicAopProxyNode.java:6

↓ 1 callersMethodRenameMethod

@description 重命名方法 @return 修改后的方法名，方便后续恢复回来

src/main/java/Reflections.java:154

↓ 1 callersMethodclassAsBytes

(final Class<?> clazz)

src/main/java/ClassFiles.java:23

↓ 1 callersMethodclassAsFile

(final Class<?> clazz)

src/main/java/ClassFiles.java:6

↓ 1 callersMethodcreateTemplatesImpl

( final String command )

src/main/java/TemplatesImplNode.java:19

↓ 1 callersMethoddeserialize

(byte[] ser)

src/main/java/Util.java:47

↓ 1 callersMethodfindAllPositionsOfChar

(String str, char ch)

src/main/java/Util.java:161

↓ 1 callersMethodgetAspectJAroundAdvice

(String cmd)

src/main/java/SpringAOP1.java:51

↓ 1 callersMethodgetDefaultTestCmd

()

src/main/java/Util.java:10

↓ 1 callersMethodgetMethod

(Class clazz,String methodName,Class... paramTypes)

src/main/java/Reflections.java:46

↓ 1 callersMethodgetObject

(String cmd)

src/main/java/SpringAOP1.java:30

↓ 1 callersMethodmakeGadget

(Object obj)

src/main/java/BadAttrValExeNode.java:6

↓ 1 callersMethodmakeGadget

(String cmd)

src/main/java/TemplatesImplNode.java:15

↓ 1 callersMethodnewInstanceWithSpecialConstructor

( Class<T> clazz, Class constructorClass, Class<?>[] consArgTypes, Object[] consArgs)

src/main/java/Reflections.java:115

↓ 1 callersMethodnewInstanceWithoutConstructor

(String className)

src/main/java/Reflections.java:107

↓ 1 callersMethodrunGadgets

(Object obj)

src/main/java/Util.java:34

↓ 1 callersMethodserialize

(final Object obj)

src/main/java/Util.java:39

MethodDeleteMethod

@description 删除某个类的特定方法，用于在特定场景NOP掉某些检查，例如jackson的pojonocde gadget 在序列化时会调用父类的writeResplace方法，需要让该方法无效才能正常生成payload

src/main/java/Reflections.java:131

Methodarray2String

(Object[] objects,String lineHeader)

src/main/java/Util.java:147

MethodbytesToHex

字节数组转16进制 @param bytes 需要转换的byte数组 @return 转换后的Hex字符串

src/main/java/Util.java:60

MethodcreateSilenceHashMap

(Object key1, Object value1, Object key2, Object value2)

src/main/java/Util.java:119

MethodgetClassByName

根据类名获取类，处理一些特殊情况

src/main/java/Reflections.java:167

MethodgetFieldValue

(Object obj,String filedName)

src/main/java/Reflections.java:34

MethodgetGetterMethod

(Class clazz)

src/main/java/Reflections.java:137

MethodhasField

(Class clazz,String fieldName)

src/main/java/Reflections.java:65

MethodhexToByteArray

hex字符串转byte数组 @param hex 待转换的Hex字符串 @return 转换后的byte数组结果

src/main/java/Util.java:77

Methodjoin

(String[] strings, String sep, String prefix, String suffix)

src/main/java/Util.java:95

Methodmain

(String[] args)

src/main/java/SpringAOP1.java:19

MethodnewInstanceWithOnlyConstructor

(String className,Object... params)

src/main/java/Reflections.java:93

MethodreadObj4File

(String path)

src/main/java/Util.java:27

Methodtransform

(DOM document, SerializationHandler[] handlers )

src/main/java/TemplatesImplNode.java:73

MethodwriteObj2File

(Object obj,String path)

src/main/java/Util.java:18