MCPcopy Create free account

hub / github.com/Drun1baby/JavaSecurityLearning / functions

Functions2,190 in github.com/Drun1baby/JavaSecurityLearning

⨍ Functions 2,190◇ Types & classes 884
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Spring/Spring-AMQP/CVE-2023-34050/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Apache/RocketMQ/CVE-2023-33246/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Apache/Apache Commons Text/CVE-2022-42889/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Apache/Apache Jena/JavaScriptFunction/CVE-2022-42889/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Apache/Kafka/CVE-2023-25194/Kafka-Client/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/JDK/JEP290/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/RMIConnector/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/CommonsBeanUtils/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Trick/二次反序列化/TwiceDeserialize/Rome/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Jackson/JacksonBasic/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Jackson/CVE-2017-17485/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Jackson/CVE-2017-7527/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/Weblogic/CVE_2017_10271/XMLDecoder/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/XStream/XStream/XStream-Basic/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/XStream/XStream/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
MethodAppTest
Create the test case @param testName name of the test case
JavaSecurity/XStream/XStream/XStreamCVES/src/main/resources/archetype-resources/src/test/java/AppTest.java:18
FunctionB
(a,b)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
MethodBrand
()
JavaSecurity/Spring/JSP/BasicJsp/src/main/java/com/drunkbaby/basicjsp/pojo/Brand.java:17
MethodCC1
localhost:8081/cc1 POST: EXP=xxx jdk 版本受限制的 CC1 链，要求 jdk 版本 <= jdk8u65，目前我是 jdk8u312 的版本 @return
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:29
MethodCC11
localhost:8081/cc11 POST: EXP=xxx 用来打 Shiro 的链子，CC11 @return
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:164
MethodCC24
localhost:8081/cc24 POST: EXP=xxx CC2 和 CC4 都可以打 @return
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:137
MethodCC3
localhost:8081/cc3 POST: EXP=xxx TemplatesImpl 动态加载字节码，CC3 链，我这里过滤了 Runtime.getRuntime().exec() 的命令执行方式 @return
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:80
MethodCC5
localhost:8081/cc5 POST: EXP=xxx 平平无奇 CC5 @return
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:109
MethodCC6
localhost:8081/cc6 POST: EXP=xxx 不受 jdk 版本限制的 CC6 链子 @return
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:56
MethodCChains
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/CC/src/main/java/com/drunkbaby/controller/CChains.java:19
MethodCalc
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/Calc.java:12
MethodCircle
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp1.java:43
MethodClassPathXmlApplicationContext
(String message)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/springframework/context/support/ClassPathXmlApplicationContext.java:7
MethodClassPathXmlApplicationContext
(String message)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/springframework/context/support/ClassPathXmlApplicationContext.java:7
MethodConnectionHandlerContextImpl
( ConnectionProviderContextImpl context )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:345
MethodConnectionProviderContextImpl
( OptionMap opts, String endpointName )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JBoss.java:382
MethodCustomObjectOutputStream
(OutputStream out)
JavaSecurity/Trick/反序列化绕WAF/UTF8Deserialize/src/main/java/org/example/CustomObjectOutputStream.java:72
MethodDAO
()
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/dao/DAO.java:20
MethodDeserializationException
(Object set)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer-copy/src/main/java/xrg/springframework/kafka/support/serializer/DeserializationException.java:12
MethodDeserializationException
(Object set)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer/src/main/java/xrg/springframework/kafka/support/serializer/DeserializationException.java:12
MethodDeserializer
(byte[] bytes)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Deserializer.java:14
MethodDigesterSec
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXEDefense.java:115
MethodDigesterVuln
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXE.java:109
MethodDocumentBuilderSec
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXEDefense.java:134
MethodDocumentBuilderVuln01
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXE.java:125
MethodDocumentBuilderXincludeSec
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXEDefense.java:156
MethodDocumentBuilderXincludeVuln
(HttpServletRequest request)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXE.java:156
MethodDocumentHelper
修复该漏洞只需升级dom4j到2.1.1及以上，该版本及以上禁用了ENTITY； 不带ENTITY的PoC不能利用，所以禁用ENTITY即可完成修复。
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/XXE/src/main/java/com/drunkbaby/controller/XXE.java:187
FunctionEa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
MethodEvil
()
JavaSecurity/产品开发/Java_Rasp/java_rasp/bypass/src/main/java/com/example/Evil.java:8
MethodEvil
()
JavaSecurity/产品开发/Java_Rasp/java_rasp/bypass/src/main/java/com/drunkbaby/Evil.java:9
MethodEvilSex
()
JavaSecurity/Jackson/JacksonBasic/src/main/java/com/drunkbaby/JacksonVul/EvilSex.java:7
MethodExecCheckingSecurityManager
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:11
MethodExecException
(String cmd)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/ExecCheckingSecurityManager.java:49
MethodExecMockSerializable
(String cmd)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/TestHarnessTest.java:57
MethodExploit
()
JavaSecurity/Fastjson/LearnFastjson/src/main/java/Exploit.java:2
FunctionFa
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:3
MethodFileUploadTest
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/FileUploadTest.java:32
MethodGreeting
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-consumer/src/main/java/com/contrast/spring/kafka/Greeting.java:8
MethodGreeting
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer-copy/src/main/java/com/contrast/spring/kafka/Greeting.java:8
MethodGreeting
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-POC-CVE-2023-34040/spring-kafka-producer/src/main/java/com/contrast/spring/kafka/Greeting.java:8
MethodHello
()
JavaSecurity/MemoryShell/Java-Agent-Memshell/Java_Agent_SpringBoot/src/main/java/com/example/java_agent_springboot/Hello_Controller.java:10
MethodHelloImpl
()
JavaSecurity/JDK/JEP290/src/main/java/HelloImpl.java:5
MethodHttpClient
(@RequestParam String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/controller/SecSSRF.java:89
MethodHttpSyncClients
(@RequestParam("url") String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/controller/VulSSRF.java:64
MethodIOUtils
(String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/controller/SecSSRF.java:131
MethodImageIO
(@RequestParam String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/controller/SecSSRF.java:61
MethodInDirectPerson
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/ReflectDemo/ReflectFixFinal/pojo/InDirectPerson.java:9
MethodIndexController
(String cmd)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/Controller/EvilController.java:25
MethodInitBuffer
(int readSize, ByteBuffer buffer)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:592
MethodInitBuffer
(int readSize, ByteBuffer buffer)
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:598
MethodJRMPListener
( int port, Object payloadObject )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPListener.java:59
MethodJRMPReverseConnectSMTest
(String command)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/JRMPReverseConnectSMTest.java:20
MethodJRMPReverseConnectTest
()
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/JRMPReverseConnectTest.java:26
MethodJndiCalc7
()
JavaSecurity/JDK/jndi/JndiCode/JndiRMIServer/src/main/java/JndiCalc7.java:2
MethodJsoup
(@RequestParam String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/controller/SecSSRF.java:117
MethodListenerTest
()
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Listener/ListenerTest.java:15
FunctionM
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
MethodMarshalOutputStream
(OutputStream out, URL u)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/JRMPClient.java:103
MethodMockELResolver
(ServletRequest req)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/MyfacesTest.java:87
MethodMySex2
()
JavaSecurity/Jackson/JacksonBasic/src/main/java/com/drunkbaby/deserialization/MySex2.java:7
MethodMyfacesDeserializer
( byte[] bytes )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/MyfacesTest.java:138
MethodMyfacesTest
( String command )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/MyfacesTest.java:38
FunctionN
(a)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
MethodOperationInterceptor
( URL cb )
JavaSecurity/JDK/jndi/JndiCode/JndiRMIServer/src/main/java/JNDILdapServer.java:48
MethodOperationInterceptor
( URL cb )
JavaSecurity/JDK/jndi/JndiCode/JndiRMIServer/src/main/java/JNDIGadgetServer.java:59
MethodPayloadsTest
( Class<? extends ObjectPayload<?>> payloadClass )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/PayloadsTest.java:67
MethodPerson
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/DynamicClassLoader/ClassLoaderPackage/Person.java:16
MethodPerson
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/ReflectDemo/SeralizeDemo/Person.java:12
MethodPerson
()
JavaSecurity/SnakeYaml/src/main/java/SerializeTest/Person.java:30
MethodPerson3
()
JavaSecurity/Jackson/JacksonBasic/src/main/java/com/drunkbaby/Person3.java:14
MethodPerson4
()
JavaSecurity/Jackson/JacksonBasic/src/main/java/com/drunkbaby/Person4.java:13
MethodPersonConstructor
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/ReflectDemo/SeralizeDemo/PersonConstructor.java:10
MethodPoolSource
( String className, String url )
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/C3P0.java:67
MethodProcessBuilderHook
(Instrumentation inst)
JavaSecurity/产品开发/Java_Rasp/java_rasp/agent/src/main/java/com/drunkbaby/javagent/ProcessBuilderHook.java:13
MethodProxy
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/StaticProxy/Proxy.java:8
FunctionR
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/resources/static/qinjiang/js/jquery-3.1.1.min.js:2
MethodRectangle
()
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/OpenClose/Ocp1.java:37
MethodRemoteClassLoadingTest
( String command )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:28
MethodRemoteClassLoadingTestCallable
( int port, byte[] data, Callable<Object> innerCallable )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:73
MethodRemoteHelloWorld
()
JavaSecurity/JDK/JEP290/RMIServer/src/main/java/VictimServer.java:8
MethodRemoteHelloWorld
()
JavaSecurity/JDK/RMI/RMIServer/src/main/java/VictimServer.java:8
MethodRemoteObjImpl
()
JavaSecurity/JDK/JEP290/RMIServer/src/main/java/RemoteObjImpl.java:8
← previousnext →701–800 of 2,190, ranked by callers