MCPcopy Create free account

hub / github.com/Drun1baby/JavaSecurityLearning / functions

Functions2,190 in github.com/Drun1baby/JavaSecurityLearning

⨍ Functions 2,190◇ Types & classes 884
↓ 1 callersFunctionaes_enc
(data)
JavaSecurity/Apache/Shiro/shiro550/ShiroEXP/AESPayload.py:15
↓ 1 callersFunctionaes_enc
(data)
JavaSecurity/Apache/Shiro/shiro550/ShiroEXP/src/ShiroEXP_Drunkbaby/AESPayload.py:15
↓ 1 callersMethodafter
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/util/Callables.java:8
↓ 1 callersMethodannotateClass
( Class<?> cl )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPClient.java:112
↓ 1 callersMethodaposToQuotes
(String json)
JavaSecurity/Jackson/CVE-2017-7527/src/main/java/com/drunkbaby/PoC.java:31
↓ 1 callersMethodbefore
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/util/Callables.java:7
↓ 1 callersMethodbuildDeps
( final Class<? extends ObjectPayload<?>> payloadClass )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:184
↓ 1 callersMethodcall
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:61
↓ 1 callersMethodcheckPrecondition
( Class<? extends ObjectPayload<?>> pc, String precondition )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:177
↓ 1 callersMethodcheckSSRF
解析url的ip，判断ip是否是内网ip，所以TTL设置为0的情况不适用。 url只允许https或者http，并且设置默认连接超时时间。 该修复方案会主动请求重定向后的链接。 @param url check的url @param checkTimes 设置重定向检测的最大次数，建
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SSRFChecker.java:58
↓ 1 callersMethodcheckSpelling
()
JavaSecurity/Spring/SpEL/BasicSpEL/src/main/java/com/drunkbaby/pojo/SpellChecker.java:7
↓ 1 callersMethodcheckURLFckSSRF
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SSRFChecker.java:20
↓ 1 callersMethodclassAsFile
(final Class<?> clazz)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/util/ClassFiles.java:8
↓ 1 callersMethodcleanup
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:107
↓ 1 callersMethodcleanup
( ConnectionProvider instance, ConnectionProviderContextImpl context, ConnectionHandler ch, Channel c,
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:166
↓ 1 callersMethodcommonHttpClient
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/HttpUtils.java:38
↓ 1 callersMethodconnect
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:380
↓ 1 callersMethodconnectAndOwn
(String serverName, String port, String command)
JavaSecurity/JDK/JMX/src/main/java/com/drunkbaby/mlet/ExploitJMXByRemoteMBean.java:24
↓ 1 callersMethodconsumerConfigs
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/PoC/kafka-Consumer/src/main/java/com/drunkbaby/poc/kafkaconsumer/KafkaConsumerConfig.java:26
↓ 1 callersMethodconsumerConfigs
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-Test/src/main/java/com/drunkbaby/springkafkatest/config/KafkaConsumerConfig.java:26
↓ 1 callersMethodconsumerFactory
(String groupId)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-consumer/src/main/java/com/contrast/spring/kafka/KafkaConsumerConfig.java:24
↓ 1 callersMethodconsumerFactory
(String groupId)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer/src/main/java/com/contrast/ProducerConfig.java:21
↓ 1 callersMethodconsumerFactory
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/PoC/kafka-Consumer/src/main/java/com/drunkbaby/poc/kafkaconsumer/KafkaConsumerConfig.java:37
↓ 1 callersMethodconsumerFactory
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-Test/src/main/java/com/drunkbaby/springkafkatest/config/KafkaConsumerConfig.java:37
↓ 1 callersMethodcontract
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/StaticProxy/Proxy.java:30
↓ 1 callersMethodconvertStreamToString
(java.io.InputStream is)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/utils/WebUtils.java:22
↓ 1 callersMethodconvertStreamToString
(java.io.InputStream is)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/util/WebUtils.java:22
↓ 1 callersMethodcopyAndDelete
( String copyAndDelete, String copyTo )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/Wicket1.java:83
↓ 1 callersMethodcopyAndDelete
( String copyAndDelete, String copyTo )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/FileUpload1.java:82
↓ 1 callersMethodcopyFile
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/FileCopy.java:13
↓ 1 callersMethodcreateFile
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/newFile01.java:11
↓ 1 callersMethodcreateFile
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/newFile02.java:11
↓ 1 callersMethodcreateFile
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/newFile03.java:11
↓ 1 callersMethodcreateMockFacesContext
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/MyfacesTest.java:161
↓ 1 callersMethodcreateMultiDir
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/CreateMultiDirectory.java:12
↓ 1 callersMethodcreateSingleDir
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/CreateSingleDirectory.java:11
↓ 1 callersMethoddelete
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/DynamicProxy/UserService.java:6
↓ 1 callersMethoddeleteDirectory
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/DirectoryDelete.java:10
↓ 1 callersMethoddeleteFile
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/IOStream/FileDelete.java:10
↓ 1 callersMethoddepend1
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:71
↓ 1 callersMethoddepend1
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:85
↓ 1 callersMethoddepend2
(Interface2 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:75
↓ 1 callersMethoddepend3
(Interface2 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:79
↓ 1 callersMethoddepend4
(Interface3 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:89
↓ 1 callersMethoddepend5
(Interface3 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/improve/Segregation2.java:93
↓ 1 callersMethoddeserialize
()
JavaSecurity/C3P0/C3P0Vuls/src/main/java/URLClassLoader/URLClassLoaderEXP.java:78
↓ 1 callersMethoddeserialize
(String Filename)
JavaSecurity/JDK/JDK7u21/src/main/java/exp.java:65
↓ 1 callersMethoddeserialize
(String Filename)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/RMIConnector/src/main/java/RMiConnectorEXP.java:94
↓ 1 callersMethoddeserialize
(String Filename)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/RMIConnector/src/main/java/CC6EXP.java:48
↓ 1 callersMethoddeserialize
(String Filename)
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/CommonsBeanUtils/src/main/java/CommonsBeanUtilsEXP.java:66
↓ 1 callersMethoddeserialize
(String Filename)
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/java/DeserializeTest.java:18
↓ 1 callersMethoddeserialize
(String serializedString)
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/java/BypassTest.java:37
↓ 1 callersMethoddeserialize
(byte[] bytes)
JavaSecurity/Hession/HessionLearn/src/main/java/com/hession/test/Hessian_Test.java:21
↓ 1 callersMethoddeserialize
(String Filename)
JavaSecurity/Jackson/JacksonSerialize/src/main/java/org/example/drunkbaby/EXP.java:72
↓ 1 callersMethoddeserializeWithDependencies
( byte[] serialized, final String[] dependencies, final Class<?>[] classDependencies, final Class<?> customDes
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:201
↓ 1 callersMethoddetermineOs
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/util/OS.java:15
↓ 1 callersMethoddoCall
( DataInputStream in, DataOutputStream out, Object payload )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPListener.java:244
↓ 1 callersMethoddoExploit
( final Object payloadObject, MBeanServerConnection mbc )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:282
↓ 1 callersMethoddoGet
(HttpServletRequest req, HttpServletResponse resp)
JavaSecurity/Spring/SpringMVC/BasicSpringMVC/springmvc-01-BackServlet/src/main/java/com/drunkbaby/servlet/HelloServlet.java:11
↓ 1 callersMethoddoGet
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Spring/JSP/BasicJsp/src/main/java/com/drunkbaby/basicjsp/web/ServletDemo1.java:16
↓ 1 callersMethoddoMessage
( Socket s, DataInputStream in, DataOutputStream out, Object payload )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPListener.java:216
↓ 1 callersMethoddoPost
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/FilterShell.java:29
↓ 1 callersMethoddoPost
(HttpServletRequest req, HttpServletResponse resp)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Listener/ListenerShell.java:26
↓ 1 callersMethoddoPost
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/Controller/AllTomcatVersionAttack.java:23
↓ 1 callersMethoddoPost
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/Controller/GlobalContextAttack.java:25
↓ 1 callersMethoddoRun
( URI u, final Object payloadObject, String username, String password )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:131
↓ 1 callersMethoddoRun
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:169
↓ 1 callersMethoddoRun
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:175
↓ 1 callersMethoddraw
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp2.java:21
↓ 1 callersMethoddrawCircle
(Shape r)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp1.java:26
↓ 1 callersMethoddrawRectangle
(Shape r)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp1.java:22
↓ 1 callersFunctioneb
(a,b,c)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 1 callersFunctionencrypt_AES_GCM
(msg, secretKey)
JavaSecurity/Apache/Shiro/shiro550/shirodemo/Dective.py:6
↓ 1 callersMethodexploit
( InetSocketAddress isa, long obj, int o1, long o2, short o3, Class<?> payloadClass, String payloadArg )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JenkinsListener.java:165
↓ 1 callersMethodexploit
(final Registry registry, final Class<? extends ObjectPayload> payloadClass, final String command)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/RMIRegistryExploit.java:68
↓ 1 callersMethodfare
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/StaticProxy/Proxy.java:25
↓ 1 callersMethodfill
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:501
↓ 1 callersMethodfindById
(Integer id)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:33
↓ 1 callersMethodfindByIdSec04
(@Param("id") List id)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:30
↓ 1 callersMethodfindByIdVuln04
(@Param("id") String id)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:28
↓ 1 callersMethodfindByUserName
If using simple sql, we can use annotation. Such as @Select @Update. If using ${username}, application will send a error.
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:19
↓ 1 callersMethodfindByUserNameVuln01
(@Param("username") String username)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:22
↓ 1 callersMethodfindByUserNameVuln02
(String username)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/MybatiSqli/src/main/java/com/drunkbaby/mapper/UserMapper.java:25
↓ 1 callersMethodformatTable
(List<String[]> rows)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Strings.java:30
↓ 1 callersMethodfunc2
(int a, int b)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/LiskovSubstitution/Liskow2.java:36
↓ 1 callersMethodfunc3
(int a, int b)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/LiskovSubstitution/Liskow2.java:41
↓ 1 callersFunctiongb
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
↓ 1 callersMethodgenerate
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer-copy/src/main/java/com/contrast/Test_CC.java:19
↓ 1 callersFunctiongeneratePayload
(gadget,cmd)
JavaSecurity/Weblogic/CVE_2015_4852/CVE_2015_4852.py:9
↓ 1 callersMethodgetAllEmployee
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/Dimit/Demeter1.java:42
↓ 1 callersMethodgetAllEmployee
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/Dimit/Demeter1.java:71
↓ 1 callersMethodgetAllEmployee2
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/Dimit/Demeter2.java:42
↓ 1 callersMethodgetAllEmployee2
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/Dimit/Demeter2.java:71
↓ 1 callersMethodgetAuthorizationPerms
()
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/realm/SubjectAuthorizationUtil.java:21
↓ 1 callersMethodgetAuthorizationRoles
()
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/realm/SubjectAuthorizationUtil.java:16
↓ 1 callersMethodgetAuthors
(AnnotatedElement annotated)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/annotation/Authors.java:32
↓ 1 callersMethodgetBlockDomains
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/config/WebConfig.java:107
↓ 1 callersMethodgetBytes
(String path)
JavaSecurity/AesEncode.java:20
↓ 1 callersMethodgetBytes
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/CommonsCollections11.java:89
↓ 1 callersMethodgetBytes
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/CC11Template.java:93
← previousnext →301–400 of 2,190, ranked by callers