MCPcopy Create free account

hub / github.com/Drun1baby/JavaSecurityLearning / functions

Functions2,190 in github.com/Drun1baby/JavaSecurityLearning

↓ 2 callersMethodcallWrapped
(final Runnable runnable)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:59
↓ 2 callersFunctioncb
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 2 callersMethodcommon
(Connection connection, String sql, String userName)
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/dao/DAO.java:83
↓ 2 callersMethodcreateCallable
( Callable<Object> innerCallable )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/WrappedTest.java:11
↓ 2 callersFunctionda
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 2 callersMethoddoGetAuthorizationInfo
(PrincipalCollection principalCollection)
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/realm/DatabaseRealm.java:21
↓ 2 callersMethoddrawShape
(Shape s)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp1.java:14
↓ 2 callersMethoddrawShape2
(Shape2 s)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp2.java:14
↓ 2 callersMethodfindByUserNameVuln03
(@Param("order") String order)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:26
↓ 2 callersMethodfunc1
(int num1, int num2)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/LiskovSubstitution/Liskow2.java:23
↓ 2 callersMethodfunc1
(int a, int b)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/LiskovSubstitution/Liskow2.java:32
↓ 2 callersMethodgetBytes
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ServletEcho/src/main/java/EXP/CC11Template.java:89
↓ 2 callersMethodgetBytes
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/memShell/CC11Template.java:89
↓ 2 callersMethodgetId
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/Dimit/Demeter2.java:17
↓ 2 callersMethodgetId
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/Dimit/Demeter1.java:17
↓ 2 callersMethodgetMessage
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/springframework/context/support/ClassPathXmlApplicationContext.java:11
↓ 2 callersMethodgetPayload
(String displayName)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:338
↓ 2 callersMethodgetPayload
(Class clazz, Object payloadObj)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/java/EqualsBeanEXP.java:48
↓ 2 callersMethodgetPayloadClasses
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/ObjectPayload.java:25
↓ 2 callersMethodgetPermits
根据角色获取角色具有的权限信息
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/dao/DAO.java:125
↓ 2 callersMethodgetProperties
()
JavaSecurity/Fastjson/LearnFastjson/src/main/java/Student.java:52
↓ 2 callersMethodgetThreadGroup
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:197
↓ 2 callersMethodgetUser
()
JavaSecurity/JDK/RMI/RMIClient/src/main/java/User.java:4
↓ 2 callersMethodgethost
Get http url host. @param url url @return host
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:41
↓ 2 callersMethodgetpayload
(Object object, String string)
JavaSecurity/Trick/二次反序列化/timu/2022 鹏城杯 ez_java/EXP/Memshell.java:50
↓ 2 callersMethodgetpayload
(Object object, String string)
JavaSecurity/Trick/二次反序列化/timu/2022 鹏城杯 ez_java/EXP/EXP.java:51
↓ 2 callersMethodgetpayload
(Object object, String string)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/CommonsBeanUtils/src/main/java/CommonsBeanUtilsEXP.java:51
↓ 2 callersMethodgetpayload
(Class clazz, Object obj)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/java/ToStringBeanEXP.java:47
↓ 2 callersMethodinit
(FilterConfig filterConfig)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ServletEcho/src/main/java/EXP/TomcatInject.java:174
↓ 2 callersMethodisInternalIpByUrl
判断一个URL的IP是否是内网IP @return 如果是内网IP,返回true;非内网IP,返回false。
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SSRFChecker.java:105
↓ 2 callersFunctionla
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 2 callersMethodloginPage
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/main/java/com/shiro/vuln/Controller/UserController.java:42
↓ 2 callersMethodmakeCaller
( Object tpl, Object getters )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Hibernate1.java:115
↓ 2 callersMethodmakeExpressionPayload
( String expr )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Myfaces1.java:76
↓ 2 callersMethodmakeGetter
( Class<?> tplClass, String method )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Hibernate1.java:67
↓ 2 callersFunctionoa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 2 callersMethodprintUsage
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/GeneratePayload.java:46
↓ 2 callersMethodproducerFactory
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer/src/main/java/com/contrast/Controller/Controller.java:46
↓ 2 callersMethodreadObject
(final ObjectInputStream ois)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/TestHarnessTest.java:59
↓ 2 callersMethodreadObject
(ObjectInputStream ois)
JavaSecurity/反序列化基础/Reappearance/Serialable/src/ReflectDemo/SeralizeDemo/Person.java:40
↓ 2 callersMethodreceive
(IReceiver i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/DependencyInversion/DependencyInversion2.java:36
↓ 2 callersMethodrun
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPListener.java:129
↓ 2 callersMethodserialize
(final Object obj)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer/src/main/java/com/contrast/Controller/Controller.java:94
↓ 2 callersMethodsetAddress
(Address address)
JavaSecurity/Struts2/Struts2AndOGNL/src/main/java/com/drunkbaby/pojo/User.java:29
↓ 2 callersMethodsetFieldValue
(Object obj,String fieldname,Object value)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/RMIConnector/src/main/java/RMiConnectorEXP.java:22
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/java/SignedObjectEXP.java:76
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/java/RomeEXP.java:66
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/ToStringBeanEXP.java:54
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/TemplatesImplEXP.java:47
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/RomEXP.java:66
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/otherChains/BadAttributeValueExpExceptionEXP.java:64
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/otherChains/HashTableEXP.java:68
↓ 2 callersMethodsetFieldValue
(Object object, String fieldName, Object value)
JavaSecurity/ROME/BasicRome/src/main/java/otherChains/ObjectBeanEXP.java:69
↓ 2 callersMethodsetName
(String name)
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/po/User.java:38
↓ 2 callersMethodsetSoLinger
(int soLinger)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:289
↓ 2 callersMethodsetSoLinger
(int soLinger)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:295
↓ 2 callersMethodsetSoTimeout
(int soTimeout)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:275
↓ 2 callersMethodsetStreams
(PrintStream out, PrintStream err)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:273
↓ 2 callersMethodsetTrafficClass
(Socket sock)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:551
↓ 2 callersMethodsetTrafficClass
(Socket sock)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:557
↓ 2 callersMethodsetup
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:102
↓ 2 callersMethodshout
()
JavaSecurity/Spring/SpringLearn/SpringBasicLearning/Spring-05-AutoWired/src/main/java/com/drunkbaby/pojo/Cat.java:4
↓ 2 callersMethodskip
(long n)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:496
↓ 2 callersMethodstart
()
JavaSecurity/JDK/JEP290/RMIServer/src/main/java/VictimServer.java:26
↓ 2 callersMethodtoHexDigit
(int h)
JavaSecurity/C3P0/C3P0Vuls/src/main/java/hexBase/HexBaseFastjsonEXP.java:58
↓ 2 callersMethodtoHexDigit
(int h)
JavaSecurity/C3P0/C3P0Vuls/src/main/java/hexBase/HexBaseNewEXP.java:58
↓ 2 callersMethodwriteOldJRE
(String file, byte[] data)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Wicket1.java:93
↓ 2 callersMethodwritePre131
( String file, byte[] data )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/FileUpload1.java:94
↓ 2 callersFunctionxor
XOR two bytearray objects with each other.
JavaSecurity/Apache/Shiro/shiro721/payload/paddingoracle.py:266
↓ 1 callersMethodAtVisit
()
JavaSecurity/Struts2/Struts2AndOGNL/src/main/java/com/drunkbaby/OGNLGrammar/VisitStatic.java:14
↓ 1 callersMethodCC1
()
JavaSecurity/JDK/JEP290/RMIClient/src/main/java/AttackRegistryEXP.java:28
↓ 1 callersMethodCC1
()
JavaSecurity/JDK/JEP290/RMIClient/src/main/java/AttackRegistryEXP02.java:47
↓ 1 callersMethodCC1
()
JavaSecurity/JDK/RMI/RMIClient/src/main/java/AttackRegistryEXP.java:28
↓ 1 callersMethodCC1
()
JavaSecurity/JDK/RMI/RMIClient/src/main/java/AttackRegistryEXP02.java:47
↓ 1 callersMethodCC6
()
JavaSecurity/C3P0/C3P0Vuls/src/main/java/hexBase/HexBaseFastjsonEXP.java:23
↓ 1 callersMethodCC6
()
JavaSecurity/C3P0/C3P0Vuls/src/main/java/hexBase/HexBaseNewEXP.java:23
↓ 1 callersMethodCreate_Person
()
JavaSecurity/MemoryShell/Java-Agent-Memshell/Instrumentation/src/main/java/javassist/Javassist_Test.java:6
↓ 1 callersFunctionHa
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 1 callersMethodHttpAsyncClients
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:197
↓ 1 callersMethodHttpURLConnection
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:116
↓ 1 callersMethodIOUtils
IOUtils which is wrapped by URLConnection can get remote pictures. The default setting of redirection is true. @param url http request url
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:188
↓ 1 callersMethodJsoup
Jsoup is a HTML parser about Java. @param url http request url
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:144
↓ 1 callersFunctionL
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
↓ 1 callersFunctionMb
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 1 callersFunctionNb
(a,b,c,d)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:4
↓ 1 callersMethodOrderByUsername
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:35
↓ 1 callersFunctionT3Exploit
(ip,port,payload)
JavaSecurity/Weblogic/CVE_2015_4852/CVE_2015_4852.py:14
↓ 1 callersFunctionVa
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 1 callersMethodVisitContextMethod
()
JavaSecurity/Struts2/Struts2AndOGNL/src/main/java/com/drunkbaby/OGNLGrammar/VisitContext.java:15
↓ 1 callersMethodWriteShell
()
JavaSecurity/MemoryShell/Java-Agent-Memshell/Instrumentation/src/main/java/javassist/GetShellByteCodes.java:29
↓ 1 callersFunctionZ
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 1 callersMethodaccept
( ConnectionHandlerFactory connectionHandlerFactory )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:418
↓ 1 callersMethodaccept
(SocketImpl s)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookImpl.java:163
↓ 1 callersMethodadd
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/DynamicProxy/UserService.java:5
↓ 1 callersMethodadd
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserServiceProxy.java:11
↓ 1 callersMethodadd
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserService.java:5
↓ 1 callersMethodaddHexAscii
(byte b, StringWriter sw)
JavaSecurity/C3P0/C3P0Vuls/src/main/java/hexBase/HexBaseFastjsonEXP.java:49
↓ 1 callersMethodaddHexAscii
(byte b, StringWriter sw)
JavaSecurity/C3P0/C3P0Vuls/src/main/java/hexBase/HexBaseNewEXP.java:49
↓ 1 callersMethodaddUser
注册用户
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/dao/DAO.java:36
↓ 1 callersFunctionaes_enc
(data)
JavaSecurity/Apache/Shiro/shiro550/shirodemo/AESPayload.py:15
← previousnext →201–300 of 2,190, ranked by callers