MCPcopy Create free account

hub / github.com/Drun1baby/JavaSecurityLearning / functions

Functions2,190 in github.com/Drun1baby/JavaSecurityLearning

↓ 325 callersMethodcall
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Serializer.java:15
↓ 305 callersMethodsetAccessible
(AccessibleObject member)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:15
↓ 225 callersMethodget
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/util/OS.java:11
↓ 118 callersMethodinvoke
(Request request, Response response)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/valve/ValveTest.java:11
↓ 107 callersMethodadd
(int x, int y)
JavaSecurity/JDK/JMX/src/main/java/org/example/HelloWorldMBean.java:5
↓ 94 callersMethodnewInstance
(String className, Object ... args)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:59
↓ 77 callersMethodwrite
( String dir, byte[] data )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Wicket1.java:88
↓ 77 callersMethodwriteObject
(java.io.ObjectOutputStream s)
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/java/org/example/Evil.java:7
↓ 72 callersMethodgetName
()
JavaSecurity/JDK/JMX/src/main/java/org/example/HelloWorldMBean.java:6
↓ 71 callersMethodtest
()
JavaSecurity/Spring/SpringLearn/SpringBasicLearning/Spring-02-HelloSpring/src/test/java/test.java:8
↓ 65 callersMethodlog
(String msg)
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserServiceProxy.java:32
↓ 65 callersMethodsetFieldValue
(final Object obj, final String fieldName, final Object value)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:43
↓ 64 callersMethodclose
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPListener.java:93
↓ 63 callersMethodtoString
()
JavaSecurity/Jackson/JacksonBasic/src/main/java/com/drunkbaby/Person.java:13
↓ 58 callersMethodexec
(String cmd)
JavaSecurity/Java Basic/Java 回显技术/fdEcho.java:8
↓ 57 callersMethodreadObject
(java.io.ObjectInputStream s)
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/java/org/example/Evil.java:9
↓ 53 callersMethodgetValue
(Object obj, String name)
JavaSecurity/ROME/BasicRome/src/main/java/BetterRomEXP.java:80
↓ 41 callersMethodread
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:486
↓ 37 callersFunctionr
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 35 callersMethodrun
(Callable<Object> payload)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/CustomTest.java:11
↓ 34 callersMethodrun
(final Class<? extends ObjectPayload<?>> clazz, final String[] args)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/PayloadRunner.java:19
↓ 30 callersFunctionS
(a,b,c,d,e,f,g)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 30 callersMethodgetSecurityManager
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:11
↓ 30 callersMethodshow
()
JavaSecurity/Spring/SpringLearn/SpringBasicLearning/Spring-03-IOCEquip/src/main/java/com/drunkbaby/dao/User.java:18
↓ 28 callersMethodclose
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:215
↓ 28 callersMethodgetInputStream
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:173
↓ 28 callersMethodjoin
(Iterable<String> strings, String sep, String prefix, String suffix)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Strings.java:11
↓ 25 callersMethodtoString
()
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/po/User.java:16
↓ 23 callersFunctione
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 22 callersMethodgetMessage
()
JavaSecurity/Spring/SpEL/BasicSpEL/src/main/java/com/drunkbaby/pojo/HelloWorld.java:11
↓ 22 callersFunctionz
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 21 callersFunctionT
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 20 callersMethodcreateTemplatesImpl
( final String command )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Gadgets.java:93
↓ 20 callersMethodexecute
()
JavaSecurity/Struts2/S2-001/src/main/java/com/drunkbaby/action/LoginAction.java:27
↓ 20 callersMethodflush
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:329
↓ 20 callersMethodinvoke
(Object proxy, Method method, Object[] args)
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/DynamicProxy/UserProxyInvocationHandler.java:23
↓ 20 callersMethodquery
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserService.java:8
↓ 20 callersMethodqueryUserByName
(String name)
JavaSecurity/Apache/Shiro/CVE-2020-17510/src/main/java/shiro/mapper/UserMapper.java:10
↓ 19 callersMethodgetPort
()
JavaSecurity/Struts2/Struts2AndOGNL/src/main/java/com/drunkbaby/pojo/Address.java:14
↓ 18 callersMethodgetInstance
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/SingletonPattern/src/HungryManStyle/SingletonTest1.java:22
↓ 18 callersMethodgetOutputStream
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:187
↓ 16 callersFunctionb
(c,e)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 16 callersFunctiong
(b,c,d,e)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 16 callersFunctionj
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 15 callersMethodbind
(InetAddress host, int port)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:144
↓ 15 callersMethodgetRequestBody
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/utils/WebUtils.java:15
↓ 15 callersFunctionma
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 15 callersMethodstop
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:475
↓ 14 callersMethodfindMethod
Poll the parent class to find the reflection method. SocksSocketImpl -> PlainSocketImpl -> AbstractPlainSocketImpl @author liergou @2020-04-04 01:43
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookUtils.java:13
↓ 14 callersMethodstart
()
JavaSecurity/JDK/RMI/RMIServer/src/main/java/VictimServer.java:26
↓ 13 callersMethodcreateRegistry
(int port)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/exploit/RMIRegistryExploitTest.java:8
↓ 13 callersMethodgetAddress
()
JavaSecurity/Fastjson/LearnFastjson/src/main/java/Student.java:47
↓ 13 callersMethodgetField
(final Class<?> clazz, final String fieldName)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:30
↓ 13 callersMethodtoString
()
JavaSecurity/Spring/SpringLearn/SpringBasicLearning/Spring-07-APPConfig/src/main/java/pojo/User.java:21
↓ 11 callersFunctionn
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/semantic.min.js:11
↓ 11 callersFunctionp
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 11 callersMethodreleasePayload
( ObjectPayload payload, Object object )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/ObjectPayload.java:78
↓ 11 callersFunctiony
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 10 callersFunctionA
(b,c,d,h)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 10 callersMethodencrypt
Encrypts *plaintext* by exploiting a Padding Oracle. :param plaintext: Plaintext data to encrypt. :param int block_size: Cip
JavaSecurity/Apache/Shiro/shiro721/payload/paddingoracle.py:67
↓ 10 callersMethodgetBytes
(String path)
JavaSecurity/Apache/Shiro/shiro550/shirodemo/src/EXP/AESEncode.java:18
↓ 10 callersFunctionia
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 10 callersFunctionja
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 10 callersMethodsend
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer/src/main/java/com/contrast/Controller/Controller.java:57
↓ 10 callersMethodsetSecurityManager
(SecurityManager securityManager)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:15
↓ 9 callersMethodcreate
socket base method impl
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:84
↓ 9 callersMethodcreateSocket
(String host, int port)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/RMIRegistryExploit.java:37
↓ 9 callersFunctiond
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 9 callersFunctionh
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 9 callersFunctionha
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 9 callersMethodindex
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/java/springsecurity/controller/RouterController.java:10
↓ 9 callersFunctionpa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 9 callersMethodsleep
(int age)
JavaSecurity/反序列化基础/Reappearance/Serialable/src/ReflectDemo/SeralizeDemo/Person.java:30
↓ 9 callersMethodstartSSRFHook
Check ssrf by hook socket. Start socket hook. @author liergou @ 2020-04-04 02:15
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:157
↓ 9 callersMethodstopSSRFHook
Close socket hook. @author liergou @ 2020-04-04 02:15
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:166
↓ 8 callersFunctionD
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 8 callersFunctionc
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 8 callersMethodgetFieldValue
(final Object obj, final String fieldName)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:48
↓ 8 callersMethodgetObject
( String command )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/ObjectPayload.java:20
↓ 8 callersFunctionsend_data
(conn,data)
JavaSecurity/JDBC/exp.py:13
↓ 8 callersFunctionw
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 7 callersFunctionI
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 7 callersMethodgetConnection
()
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/dao/DAO.java:28
↓ 7 callersMethodgetField
(Object obj, String fieldName)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/TomcatEcho.java:92
↓ 7 callersMethodgetFirstCtor
(final String name)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:53
↓ 7 callersMethodgetUsername
()
JavaSecurity/Struts2/S2-001/src/main/java/com/drunkbaby/action/LoginAction.java:11
↓ 7 callersMethodmakePayloadObject
( String payloadType, String payloadArg )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/ObjectPayload.java:59
↓ 7 callersFunctionmb
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 7 callersFunctionnb
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 7 callersFunctionreceive_data
(conn)
JavaSecurity/JDBC/exp.py:8
↓ 7 callersMethodsetName
(String name)
JavaSecurity/SnakeYaml/src/main/java/SerializeTest/Person.java:43
↓ 6 callersMethodconnect
(String host, int port)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:95
↓ 6 callersMethodcreateMemoitizedProxy
( final Map<String, Object> map, final Class<T> iface, final Class<?>... ifaces )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Gadgets.java:66
↓ 6 callersMethodcreateProxy
( final InvocationHandler ih, final Class<T> iface, final Class<?>... ifaces )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Gadgets.java:76
↓ 6 callersMethodcreateWithConstructor
( Class<T> classToInstantiate, Class<? super T> constructorClass, Class<?>[] consArgTypes, Object[] consArgs )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:68
↓ 6 callersMethodcreateWithoutConstructor
( Class<T> classToInstantiate )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Reflections.java:63
↓ 6 callersMethoddecrypt
Decrypts *ciphertext* by exploiting a Padding Oracle. :param ciphertext: Encrypted data. :param int block_size: Cipher block
JavaSecurity/Apache/Shiro/shiro721/payload/paddingoracle.py:105
↓ 6 callersFunctionf
(f,g,h,i,k)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 6 callersMethodisAtLeast
(int major)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/JavaVersion.java:41
↓ 6 callersMethodkafkaListenerContainerFactory
(String groupId)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-consumer/src/main/java/com/contrast/spring/kafka/KafkaConsumerConfig.java:35
next →1–100 of 2,190, ranked by callers