Functions — github.com/CrackerCat/YongyouNC-Unserialize-Tools

hub / github.com/CrackerCat/YongyouNC-Unserialize-Tools / functions

Functions111 in github.com/CrackerCat/YongyouNC-Unserialize-Tools

⨍ Functions 111◇ Types & classes 34

↓ 24 callersMethodget

(Object obj, String type, boolean template)

src/main/java/com/droplab/Utils/Memory/Interface/ImplInterface.java:4

↓ 13 callersMethodnewInstance

(String className, Object ... args)

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:57

↓ 13 callersMethodsetAccessible

(AccessibleObject member)

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:13

↓ 9 callersMethodsetFieldValue

(final Object obj, final String fieldName, final Object value)

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:41

↓ 6 callersMethodRandomStr

随机字符串生成 @param bit @return

src/main/java/com/droplab/Utils/CommonUtils.java:38

↓ 6 callersMethoddoPostRequest

执行post请求 @param url 请求URL地址 @param headers 请求头 @param jsonParams 请求JSON格式字符串参数 @return HTTP响应对象 @throws IOException 程序异常时抛出，由调用者处理

src/main/java/com/droplab/Utils/HttpUtils.java:201

↓ 4 callersMethodcompile

Compile a Java source file in memory. @param fileName Java file name, e.g. "Test.java" @param source The source code as String.

src/main/java/com/droplab/Utils/compile/JavaStringCompiler.java:40

↓ 4 callersMethodheader

(String s)

src/main/java/com/droplab/Utils/ResponseUtils.java:90

↓ 3 callersMethodGetUnserializePayload

用友反序列化payload生成 @param @return

src/main/java/com/droplab/Controller/Yongyou/YongyouController.java:46

↓ 3 callersMethodSerializeObject

(Object o)

src/main/java/com/droplab/Utils/UnSerialize/utils/Gadgets.java:42

↓ 3 callersMethodgetLocalVersion

()

src/main/java/com/droplab/Utils/UnSerialize/utils/JavaVersion.java:16

↓ 3 callersMethodgetObject

(final Object o)

src/main/java/com/droplab/Utils/UnSerialize/Gadget/Interface/GadgetInterface.java:4

↓ 3 callersMethodgetProxy

()

src/main/java/com/droplab/Utils/HttpUtils.java:341

↓ 3 callersMethodgetTrust

获取服务器信任

src/main/java/com/droplab/Utils/HttpUtils.java:379

↓ 3 callersMethodheaders

(String s)

src/main/java/com/droplab/Utils/ResponseUtils.java:95

↓ 3 callersMethodmethod

()

src/main/java/com/droplab/Utils/ResponseUtils.java:80

↓ 2 callersMethodbodyAsBytes

()

src/main/java/com/droplab/Utils/ResponseUtils.java:55

↓ 2 callersMethodclassAsBytes

(final Class<?> clazz)

src/main/java/com/droplab/Utils/UnSerialize/utils/ClassFiles.java:25

↓ 2 callersMethodclose

()

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:36

↓ 2 callersMethodexploit

()

src/main/java/com/droplab/service/BugsInfterface.java:7

↓ 2 callersMethodgetField

(final Class<?> clazz, final String fieldName)

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:28

↓ 2 callersMethodgetMD5

获取字符串md5值 @param source @return

src/main/java/com/droplab/Utils/CommonUtils.java:100

↓ 2 callersMethodgetMap

()

src/main/java/com/droplab/Controller/Yongyou/YongyouController.java:101

↓ 2 callersMethodinstance

()

src/main/java/com/droplab/Utils/UnSerialize/SerializeFactory.java:10

↓ 2 callersMethodrun

(String type)

src/main/java/com/droplab/service/BugService.java:31

↓ 2 callersMethodsetMessage

(String message)

src/main/java/com/droplab/Utils/ResponseUtils.java:16

↓ 2 callersMethodsetParams

(HashMap<String, String> params)

src/main/java/com/droplab/service/BugService.java:9

↓ 1 callersMethodYongyouCheckURL

用友反序列化接口探测

src/main/java/com/droplab/Controller/Yongyou/YongyouController.java:19

↓ 1 callersMethodblind

(String cmd)

src/main/java/com/droplab/Controller/Yongyou/YongyouController.java:79

↓ 1 callersMethodclassAsFile

(final Class<?> clazz)

src/main/java/com/droplab/Utils/UnSerialize/utils/ClassFiles.java:8

↓ 1 callersMethodcloseStream

关流 @param streamList 流集合

src/main/java/com/droplab/Utils/HttpUtils.java:328

↓ 1 callersMethodcreateTemplatesImpl

(final byte[] command, final String classname)

src/main/java/com/droplab/Utils/UnSerialize/utils/Gadgets.java:16

↓ 1 callersMethodcreateWithConstructor

( Class<T> classToInstantiate, Class<? super T> constructorClass, Class<?>[] consArgTypes, Object[] consArgs )

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:66

↓ 1 callersMethodget

发送Get请求 @param url 请求URL @return HTTP响应对象 @throws IOException 程序异常时抛出，由调用者处理

src/main/java/com/droplab/Utils/HttpUtils.java:70

↓ 1 callersMethodgetClassBytes

()

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:28

↓ 1 callersMethodgetFirstCtor

(final String name)

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:51

↓ 1 callersMethodgetMemoryShell

(String type, String middleware, String password, String shellType, String path, boolean template, String addS

src/main/java/com/droplab/Utils/Memory/MemroyFactory.java:22

↓ 1 callersMethodgetTomcatEchoExecString

命令执行回显 @return

src/main/java/com/droplab/Utils/Echo/TomcatEcho.java:31

↓ 1 callersMethodgetURLArrayList

()

src/main/java/com/droplab/Controller/Yongyou/Service/YongyouCheckeURL.java:62

↓ 1 callersMethodgetUploadShell

(String type, String className, String filename, File file, String randomStr)

src/main/java/com/droplab/Utils/Factory/CodeFactory.java:29

↓ 1 callersMethodinstance

()

src/main/java/com/droplab/Utils/Memory/MemroyFactory.java:13

↓ 1 callersMethodinstance

()

src/main/java/com/droplab/Utils/Echo/TomcatEcho.java:17

↓ 1 callersMethodinstance

()

src/main/java/com/droplab/Utils/Factory/CodeFactory.java:20

↓ 1 callersMethodinstance

()

src/main/java/com/droplab/Controller/Yongyou/Common/CommonsCollections6NC.java:25

↓ 1 callersMethodmakeStringSource

(String name, String code)

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:51

↓ 1 callersMethodpost

发送JSON格式参数POST请求 @param url 请求路径 @param params JSON格式请求参数 @return HTTP响应对象 @throws IOException 程序异常时抛出，由调用者处理

src/main/java/com/droplab/Utils/HttpUtils.java:123

↓ 1 callersMethodset_TIME_OUT

(int time_out)

src/main/java/com/droplab/Utils/HttpUtils.java:31

↓ 1 callersMethodstatusCode

()

src/main/java/com/droplab/Utils/ResponseUtils.java:20

↓ 1 callersMethodurldns

(String url)

src/main/java/com/droplab/Controller/Yongyou/YongyouController.java:90

MethodJavaStringCompiler

()

src/main/java/com/droplab/Utils/compile/JavaStringCompiler.java:22

MethodMemoryInputJavaFileObject

(String name, String code)

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:59

MethodMemoryJavaFileManager

(JavaFileManager fileManager)

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:24

MethodMemoryOutputJavaFileObject

(String name)

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:73

MethodMyAuthenticator

(String user, String password)

src/main/java/com/droplab/Utils/HttpUtils.java:367

MethodRandom

随机数生成 @return

src/main/java/com/droplab/Utils/CommonUtils.java:27

MethodaddHeader

(String s, String s1)

src/main/java/com/droplab/Utils/ResponseUtils.java:105

Methodbody

()

src/main/java/com/droplab/Utils/ResponseUtils.java:50

MethodbodyStream

()

src/main/java/com/droplab/Utils/ResponseUtils.java:65

MethodbufferUp

()

src/main/java/com/droplab/Utils/ResponseUtils.java:60

MethodbytesToHex

字节数组转16进制 @param bytes @return

src/main/java/com/droplab/Utils/CommonUtils.java:54

Methodcharset

()

src/main/java/com/droplab/Utils/ResponseUtils.java:30

Methodcheck

()

src/main/java/com/droplab/service/BugService.java:12

Methodcheck

()

src/main/java/com/droplab/service/BugsInfterface.java:6

MethodcheckClientTrusted

(X509Certificate[] chain, String authType)

src/main/java/com/droplab/Utils/HttpUtils.java:390

MethodcheckServerTrusted

(X509Certificate[] chain, String authType)

src/main/java/com/droplab/Utils/HttpUtils.java:392

Methodclose

()

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:81

MethodcontentType

()

src/main/java/com/droplab/Utils/ResponseUtils.java:40

Methodcookie

(String s)

src/main/java/com/droplab/Utils/ResponseUtils.java:135

Methodcookies

()

src/main/java/com/droplab/Utils/ResponseUtils.java:155

MethodcreateWithoutConstructor

( Class<T> classToInstantiate )

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:61

Methodexploit

()

src/main/java/com/droplab/service/BugService.java:22

Methodflush

()

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:32

Methodget

(Object obj,String type,boolean template)

src/main/java/com/droplab/Utils/Memory/Tomcat/Valve/ValveImplStr.java:144

Methodget

(Object obj, String type,boolean template)

src/main/java/com/droplab/Utils/Memory/Tomcat/Valve/addValve.java:356

MethodgetAcceptedIssuers

()

src/main/java/com/droplab/Utils/HttpUtils.java:394

MethodgetCharContent

(boolean ignoreEncodingErrors)

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:64

MethodgetFieldValue

(final Object obj, final String fieldName)

src/main/java/com/droplab/Utils/UnSerialize/utils/Reflections.java:46

MethodgetHostAddress

(URL u)

src/main/java/com/droplab/Utils/UnSerialize/Gadget/URLDNS.java:41

MethodgetJavaFileForOutput

(Location location, String className, Kind kind, FileObject sib

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:41

MethodgetObject

(String version,String GadgetName, final byte[] command)

src/main/java/com/droplab/Utils/UnSerialize/SerializeFactory.java:17

MethodgetObject

(final Object o)

src/main/java/com/droplab/Utils/UnSerialize/Gadget/CommonsCollections6.java:23

MethodgetObject

(Object o)

src/main/java/com/droplab/Utils/UnSerialize/Gadget/URLDNS.java:15

MethodgetObject

(final byte[] command,final String classname)

src/main/java/com/droplab/Controller/Yongyou/Common/CommonsCollections6NC.java:34

MethodgetPasswordAuthentication

()

src/main/java/com/droplab/Utils/HttpUtils.java:372

MethodhasCookie

(String s)

src/main/java/com/droplab/Utils/ResponseUtils.java:145

MethodhasHeader

(String s)

src/main/java/com/droplab/Utils/ResponseUtils.java:110

MethodhasHeaderWithValue

(String s, String s1)

src/main/java/com/droplab/Utils/ResponseUtils.java:115

MethodhashMapClone

(HashMap source,HashMap destination)

src/main/java/com/droplab/Utils/CommonUtils.java:9

MethodisAnnInvHUniversalMethodImpl

()

src/main/java/com/droplab/Utils/UnSerialize/utils/JavaVersion.java:30

MethodisAtLeast

(int major)

src/main/java/com/droplab/Utils/UnSerialize/utils/JavaVersion.java:40

MethodisBadAttrValExcReadObj

()

src/main/java/com/droplab/Utils/UnSerialize/utils/JavaVersion.java:35

Methodmain

(String[] args)

src/main/java/com/droplab/Utils/TestUtils.java:8

Methodmain

(String[] args)

src/main/java/com/droplab/Utils/Memory/MemroyFactory.java:71

Methodmain

(String[] args)

src/main/java/com/droplab/Utils/Memory/Tomcat/Valve/addValve.java:373

Methodmain

(String[] args)

src/main/java/com/droplab/Controller/Yongyou/Common/CommonsCollections6NC.java:93

MethodmakeMap

(Object v1, Object v2)

src/main/java/com/droplab/Utils/UnSerialize/utils/Gadgets.java:115

MethodmultiHeaders

()

src/main/java/com/droplab/Utils/ResponseUtils.java:130

MethodopenConnection

(URL u)

src/main/java/com/droplab/Utils/UnSerialize/Gadget/URLDNS.java:37

MethodopenOutputStream

()

src/main/java/com/droplab/Utils/compile/MemoryJavaFileManager.java:78

Methodparse

()

src/main/java/com/droplab/Utils/ResponseUtils.java:45

next →1–100 of 111, ranked by callers