MCPcopy Create free account

hub / github.com/Drun1baby/JavaSecurityLearning / functions

Functions2,190 in github.com/Drun1baby/JavaSecurityLearning

⨍ Functions 2,190◇ Types & classes 884
↓ 6 callersMethodrequest
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:57
↓ 6 callersMethodsetField
(Object object, String field, Object args)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/CommonsBeanutils.java:62
↓ 6 callersMethodtransform
(DOM document, SerializationHandler[] handlers)
JavaSecurity/Apache/CC/CC3/src/main/CC3ysoEXP/Calc.java:20
↓ 6 callersFunctionwa
(a,b,c,d,e)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 6 callersMethodwaitFor
( int i )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPListener.java:73
↓ 5 callersFunctionIa
(a,b,c,d)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 5 callersFunctionNa
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 5 callersMethodcall
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:155
↓ 5 callersMethodclassAsBytes
(final Class<?> clazz)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/ClassFiles.java:25
↓ 5 callersMethodcreateMap
( final String key, final Object val )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Gadgets.java:86
↓ 5 callersMethodcreateMemoizedInvocationHandler
( final Map<String, Object> map )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Gadgets.java:71
↓ 5 callersFunctionga
(a,b,d,e)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 5 callersMethodgetBytes
(String path)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/CmdUtils.java:17
↓ 5 callersMethodgetFieldValue
(Object object, String fieldName)
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/java/org/example/CustomObjectOutputStream.java:132
↓ 5 callersMethodgetHostAddress
(URL u)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/URLDNS.java:83
↓ 5 callersMethodgetMessage
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:52
↓ 5 callersMethodgetServletContext
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ServletEcho/src/main/java/EXP/TomcatInject.java:122
↓ 5 callersFunctionl
(e,t)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/semantic.min.js:11
↓ 5 callersMethodmakeMap
( Object v1, Object v2 )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/Gadgets.java:162
↓ 5 callersMethodopenConnection
(URL u)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/URLDNS.java:79
↓ 5 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/CC/CommonsBeans1/src/CommonsBeansEXP/CB1FinalEXP.java:33
↓ 5 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/Shiro/shiro550/shirodemo/src/EXP/CB1EXP.java:33
↓ 5 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/Shiro/shiro550/ShiroEXP/src/ShiroEXP_Drunkbaby/CB1EXP.java:33
↓ 5 callersMethodsetFieldValue
(Object obj,String fieldname,Object value)
JavaSecurity/Trick/二次反序列化/timu/2022 鹏城杯 ez_java/EXP/Memshell.java:16
↓ 5 callersMethodsetFieldValue
(Object obj,String fieldname,Object value)
JavaSecurity/Trick/二次反序列化/timu/2022 鹏城杯 ez_java/EXP/EXP.java:16
↓ 5 callersMethodsetFieldValue
(Object obj,String fieldname,Object value)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/CommonsBeanUtils/src/main/java/CommonsBeanUtilsEXP.java:16
↓ 5 callersMethodsetFieldValue
(Object obj,String fieldname,Object value)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/java/EqualsBeanEXP.java:18
↓ 4 callersFunctionMa
(b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 4 callersMethodcall
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/RMIRegistryExploit.java:71
↓ 4 callersMethodclose
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:335
↓ 4 callersFunctiondb
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 4 callersMethoddestroy
()
JavaSecurity/Spring/EL/BasicELVul/src/main/java/drunkbaby/basicelvul/HelloServlet.java:26
↓ 4 callersMethodgetBytes
(String path)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/AESEncode.java:25
↓ 4 callersMethodgetCmds
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:23
↓ 4 callersMethodgetDescription
()
JavaSecurity/Spring/JSP/BasicJsp/src/main/java/com/drunkbaby/basicjsp/pojo/Brand.java:68
↓ 4 callersMethodgetLocalVersion
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/JavaVersion.java:17
↓ 4 callersMethodgetPayloadClass
( final String className )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/ObjectPayload.java:38
↓ 4 callersFunctioni
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 4 callersMethodisAnnInvHUniversalMethodImpl
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/JavaVersion.java:31
↓ 4 callersMethodisHttp
Determine if the URL starts with HTTP. @param url url @return true or false
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:30
↓ 4 callersFunctionna
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 4 callersMethodoperation1
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:20
↓ 4 callersFunctionsa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 4 callersMethodserialize
(final Object obj)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Serializer.java:19
↓ 4 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/CC/CommonsBeans1/src/CommonsBeansEXP/PriorityEXP.java:29
↓ 4 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/Shiro/shiro550/shirodemo/src/EXP/CC11BestEXP.java:44
↓ 4 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/Shiro/shiro550/ShiroEXP/src/ShiroEXP_Drunkbaby/CC11BestEXP.java:44
↓ 4 callersMethodsetFieldValue
(Object obj,String fieldname,Object value)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/java/ToStringBeanEXP.java:17
↓ 4 callersMethodsetFieldValue
(Object obj, String field, Object val)
JavaSecurity/Jackson/JacksonSerialize/src/main/java/org/example/drunkbaby/EXP.java:60
↓ 4 callersMethodsetKeepAlive
(Boolean keepAlive)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:291
↓ 4 callersMethodsetTcpNoDelay
(Boolean tcpNoDelay)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:307
↓ 4 callersMethodsetValue
(String name, Object target, Object value)
JavaSecurity/Apache/CC/CC5/src/CC5EXP/Test.java:31
↓ 4 callersFunctionta
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 3 callersFunctionLb
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 3 callersFunctionca
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 3 callersMethodconnect
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:386
↓ 3 callersMethoddelete
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserService.java:6
↓ 3 callersMethoddeserialize
(final byte[] serialized)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Deserializer.java:20
↓ 3 callersFunctionea
(a,b,c,d)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 3 callersMethodgetCliPort
( String jenkinsUrl )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JenkinsCLI.java:85
↓ 3 callersMethodgetInfo
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/DependencyInversion/DependencyInversion2.java:17
↓ 3 callersMethodgetPassword
()
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/po/User.java:42
↓ 3 callersMethodgetPropertyCallable
( final Object prop )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JenkinsCLI.java:73
↓ 3 callersMethodgetRoles
根据用户用获取角色(在DatabaseRealm 中的 授权方法中需要放入到授权对象中， 需要的是Set<String> 类型的东西</String>)
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/dao/DAO.java:100
↓ 3 callersMethodisBadAttrValExcReadObj
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/JavaVersion.java:36
↓ 3 callersMethodisInternalIp
使用SubnetUtils库判断ip是否在内网网段 @param strIP ip字符串 @return 如果是内网ip，返回true，否则返回false。
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SSRFChecker.java:127
↓ 3 callersFunctionka
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 3 callersMethodmakePayload
(int thresh, String repoPath, String filePath, byte[] data)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Wicket1.java:97
↓ 3 callersMethodmakePayload
( int thresh, String repoPath, String filePath, byte[] data )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/FileUpload1.java:99
↓ 3 callersMethodopenChannel
( InetSocketAddress isa )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JenkinsCLI.java:103
↓ 3 callersFunctionqa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 3 callersMethodrun
(String vehicle)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/SingleResponsebility/SingleResponsebility1.java:17
↓ 3 callersMethodsafeDeleteOnExit
(File f)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/FileUploadTest.java:74
↓ 3 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/反序列化基础/Reappearance/Serialable/src/DynamicClassLoader/TemplatesImplClassLoader/TemplatesRce.java:20
↓ 3 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/Apache/CC/CommonsBeans1/src/CommonsBeansEXP/TemplatesImplEXP.java:20
↓ 3 callersMethodsetFieldValue
(Object obj, String fieldName, Object value)
JavaSecurity/JDK/JDK7u21/src/main/java/exp.java:54
↓ 3 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/BetterRomEXP.java:63
↓ 3 callersMethodsetHook
@param set hook switch
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookFactory.java:31
↓ 3 callersMethodsetPassword
(String password)
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/po/User.java:46
↓ 3 callersMethodsetValue
(String name, Object target, Object value)
JavaSecurity/MemoryShell/Java-Agent-Memshell/Instrumentation/src/main/java/javassist/EXP.java:25
↓ 3 callersMethodtestPayload
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:72
↓ 3 callersFunctionua
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 3 callersMethodwrite
( String dir, byte[] data )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/FileUpload1.java:88
↓ 3 callersMethodwriteFile
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/FileWriteUse.java:11
↓ 3 callersFunctionxa
(a,b,c,d,e,f)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 2 callersFunction$
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionDa
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionGa
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionJ
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 2 callersFunctionJa
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionJb
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 2 callersFunctionKb
(a,b,c,d)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 2 callersFunctionO
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 2 callersFunctionOa
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionSb
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 2 callersMethodURLConnection
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:95
↓ 2 callersFunctionUa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionWa
(a,b,c,d,e)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersFunctionXa
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersMethodbust
A block buster. This method busts one ciphertext block at a time. This method should not be called directly, instead use :met
JavaSecurity/Apache/Shiro/shiro721/payload/paddingoracle.py:153
← previousnext →101–200 of 2,190, ranked by callers