MCPcopy Create free account

hub / github.com/Drun1baby/JavaSecurityLearning / functions

Functions2,190 in github.com/Drun1baby/JavaSecurityLearning

⨍ Functions 2,190◇ Types & classes 884
MethodcheckRead
(FileDescriptor fd)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:100
MethodcheckSSRF
解析URL的IP，判断IP是否是内网IP。如果有重定向跳转，循环解析重定向跳转的IP。不建议使用该方案。 存在的问题： 1、会主动发起请求，可能会有性能问题 2、设置重定向跳转为第一次302不跳转，第二次302跳转到内网IP 即可绕过该防御方案 3、TTL设置为0会被绕过 @para
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:128
MethodcheckSSRFByWhitehosts
通过自定义白名单域名处理SSRF漏洞。如果URL范围收敛，强烈建议使用该方案。 这是最简单也最有效的修复方式。因为SSRF都是发起URL请求时造成，大多数场景是图片场景，一般图片的域名都是CDN或者OSS等，所以限定域名白名单即可完成SSRF漏洞修复。 @author JoyChou @ 2020
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:112
MethodcheckSSRFWithoutRedirect
不能使用白名单的情况下建议使用该方案。前提是禁用重定向并且TTL默认不为0。 存在问题： 1、TTL为0会被绕过 2、使用重定向可绕过 @param url The url that needs to check. @return Safe url returns true. Dangero
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:145
MethodcheckSecurityAccess
(String target)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:192
MethodcheckServerTrusted
(final X509Certificate[] c, final String t)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/exploit/RMIRegistryExploit.java:32
MethodcheckSetFactory
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:187
MethodcheckSystemClipboardAccess
()
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:35
MethodcheckTopLevelWindow
(Object window)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:28
MethodcheckURL
同时支持一级域名和多级域名，相关配置在resources目录下url/url_safe_domain.xml文件。 优先判断黑名单，如果满足黑名单return null。 @param url the url need to check @return Safe url returns origi
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:58
MethodcheckWrite
(FileDescriptor fd)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/secmgr/DelegateSecurityManager.java:115
Methodclose
()
JavaSecurity/Fastjson/FastjsonEXP_1.2.62-1.2.68/src/main/java/VulAutoCloseable.java:13
MethodcloseStreams
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:510
MethodcloseStreams
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/main/java/org/apache/activemq/transport/tcp/TcpTransport.java:516
MethodcmdFilter
(String input)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SecurityUtil.java:202
MethodcommonsHttpClient
(@RequestParam String url)
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/controller/SecSSRF.java:103
Methodcompare
(Object o1, Object o2)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/Strings.java:53
Methodconfigure
(HttpSecurity http)
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/main/java/springsecurity/config/SecurityConfig.java:12
Methodconsume
(String message)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/PoC/kafka-Consumer/src/main/java/com/drunkbaby/poc/kafkaconsumer/KafkaConsumer.java:9
Methodconsumer2
(@Payload String message, @Headers MessageHeaders headers)
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-Test/src/main/java/com/drunkbaby/springkafkatest/consumer/Consumer.java:12
MethodcontextLoads
()
JavaSecurity/MemoryShell/Java-Agent-Memshell/Java_Agent_SpringBoot/src/test/java/com/example/java_agent_springboot/JavaAgentSpringBootApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/Spring-AMQP/CVE-2023-34050/Server/src/test/java/com/example/server/ServerApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/Spring-AMQP/CVE-2023-34050/Client/src/test/java/com/example/client/ClientApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/Spring-Security/CVE-2024-22234/src/test/java/com/drunkbaby/Cve202422234ApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/SpringBootLearn/SpringSecurity/src/test/java/springsecurity/SpringSecurityApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/SpringBootLearn/shiro/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/PoC/kafka-Consumer/src/test/java/com/drunkbaby/poc/kafkaconsumer/KafkaConsumerApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/PoC/kafka-Producer/src/test/java/com/drunkbaby/poc/kafkaproducer/KafkaProducerApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/Spring-Kafka/CVE-2023-34040/Spring-Kafka-Test/src/test/java/com/drunkbaby/springkafkatest/SpringKafkaTestApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/SpringFramework/CVE-2024-22259/src/test/java/com/drunkbaby/Cve202422259ApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Spring/SpringFramework/CVE-2024-22243/src/test/java/com/drunkbaby/Cve202422243ApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604-Client/src/test/java/com/example/drunkbaby/Cve202346604ClientApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Apache/ActiveMQ/Pkg-CVE-2023-46604/CVE-2023-46604/src/test/java/com/example/drunkbaby/cve202346604/Cve202346604ApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Apache/Shiro/CVE-2021-41303/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Apache/Shiro/shiro/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Apache/Shiro/shiro682/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Apache/Shiro/CVE-2020-11989/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Apache/Shiro/CVE-2010-3863/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Apache/Shiro/CVE-2020-17510/src/test/java/shiro/ShiroApplicationTests.java:16
MethodcontextLoads
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSTI/src/test/java/com/drunkbaby/ssti/SstiApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/com/shiro/vuln/shirodemo/ShirodemoApplicationTests.java:9
MethodcontextLoads
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/test/java/com/example/TomcatHalfEcho/TomcatHalfEchoApplicationTests.java:9
MethodcookieRememberMeManager
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/main/java/com/shiro/vuln/Shiro/ShiroConfig.java:21
MethodcreateCallable
( Callable<Object> innerCallable )
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/RemoteClassLoadingTest.java:43
MethodcreateCallable
{@inheritDoc} @see RemoteClassLoadingTest#createCallable(java.util.concurrent.Callable)
JavaSecurity/ysoserial改写/ysoserial/src/test/java/ysoserial/test/payloads/JRMPReverseConnectSMTest.java:35
MethodcreateFor
(InterceptorReference paramInterceptorReference)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/JavassistWeld1.java:76
MethodcreateFor
(InterceptorReference paramInterceptorReference)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/JBossInterceptors1.java:76
MethodcreateMessageConverter
()
JavaSecurity/Spring/Spring-AMQP/CVE-2023-34050/Client/src/main/java/com/example/client/ClientApplication.java:15
MethodcreateSocketImpl
()
JavaSecurity/Java 代码审计/CodeReview/JavaSec-Code/SSRF/src/main/java/com/drunkbaby/security/SocketHookFactory.java:65
MethodcustomWriteAdapterObject
(Object javaObject, ObjectOutputStream out)
JavaSecurity/ysoserial改写/ysoserial/src/main/java/ysoserial/payloads/MozillaRhino2.java:99
Methoddelete
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/DynamicProxy/UserServiceImpl.java:9
Methoddelete
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserServiceProxy.java:16
Methoddelete
()
JavaSecurity/反序列化基础/Reappearance/Serialable/src/JdkProxy/MoreStaticProxy/UserServiceImpl.java:10
Methoddelete
(Object id)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/SixRelationship/src/generalization/DaoSupport.java:7
Methoddelete
(Integer id)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/SixRelationship/src/AchieveMent/AchieveService.java:4
Methoddelete
(Integer id)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/SixRelationship/src/AchieveMent/AchieveServiceImpl.java:4
Methoddepend1
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/Segregation1.java:76
Methoddepend1
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/Segregation1.java:91
Methoddepend2
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/Segregation1.java:80
Methoddepend3
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/Segregation1.java:84
Methoddepend4
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/Segregation1.java:95
Methoddepend5
(Interface1 i)
JavaSecurity/Java Basic/Java 设计模式/Java-Design-Mode/Design-Principle/src/InterfaceSegregation/Segregation1.java:99
Methoddeserialize
(String Filename)
JavaSecurity/Trick/二次反序列化/timu/2022 鹏城杯 ez_java/EXP/Memshell.java:65
Methoddeserialize
(String Filename)
JavaSecurity/Trick/二次反序列化/timu/2022 鹏城杯 ez_java/EXP/EXP.java:66
Methoddestroy
()
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/FilterTest.java:20
Methoddestroy
()
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/EvilFilter.java:13
Methoddestroy
()
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/FilterShell.java:81
Methoddestroy
()
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Servlet/ServletTest.java:40
Methoddestroy
()
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Servlet/ServletShell.java:72
Methoddestroy
()
JavaSecurity/Spring/JSP/BasicJsp/src/main/java/com/drunkbaby/basicjsp/HelloServlet.java:25
Methoddestroy
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/TomcatMemShellInject.java:139
Methoddestroy
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ServletEcho/src/main/java/EXP/TomcatInject.java:202
Methoddestroy
()
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/memShell/TomcatInject.java:187
MethoddoFilter
(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/FilterTest.java:15
MethoddoFilter
(ServletRequest request, ServletResponse response, FilterChain chain)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/EvilFilter.java:16
MethoddoFilter
(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/FilterShell.java:65
MethoddoFilter
(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/test/java/TomcatMemShellInject.java:117
MethoddoFilter
(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterCh
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ServletEcho/src/main/java/EXP/TomcatInject.java:179
MethoddoFilter
(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterCh
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/memShell/TomcatInject.java:164
MethoddoGet
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Filter/FilterShell.java:123
MethoddoGet
(HttpServletRequest req, HttpServletResponse resp)
JavaSecurity/MemoryShell/TomcatShell/src/main/java/tomcatShell/Listener/ListenerShell.java:21
MethoddoGet
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Spring/EL/BasicELVul/src/main/java/drunkbaby/basicelvul/HelloServlet.java:15
MethoddoGet
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Spring/JSP/BasicJsp/src/main/java/com/drunkbaby/basicjsp/HelloServlet.java:15
MethoddoGet
(HttpServletRequest req, HttpServletResponse resp)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ServletEcho/src/main/java/CCServlet.java:11
MethoddoGet
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/Controller/AllTomcatVersionAttack.java:90
MethoddoGet
(HttpServletRequest request, HttpServletResponse response)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/TomcatHalfEcho/src/main/java/com/example/TomcatHalfEcho/Controller/GlobalContextAttack.java:86
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Spring/SpringBootLearn/shiro/src/main/java/shiro/config/UserRealm.java:35
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Apache/Shiro/CVE-2021-41303/src/main/java/shiro/config/UserRealm.java:35
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Apache/Shiro/shiro/src/main/java/shiro/config/UserRealm.java:36
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Apache/Shiro/shiro682/src/main/java/shiro/config/UserRealm.java:35
MethoddoGetAuthenticationInfo
(AuthenticationToken authenticationToken)
JavaSecurity/Apache/Shiro/CVE-2016-6802/src/main/java/realm/DatabaseRealm.java:36
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Apache/Shiro/CVE-2020-11989/src/main/java/shiro/config/UserRealm.java:35
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Apache/Shiro/CVE-2010-3863/src/main/java/shiro/config/UserRealm.java:35
MethoddoGetAuthenticationInfo
(AuthenticationToken token)
JavaSecurity/Apache/Shiro/CVE-2020-17510/src/main/java/shiro/config/UserRealm.java:35
MethoddoGetAuthenticationInfo
(AuthenticationToken authenticationToken)
JavaSecurity/Java Basic/Java 回显技术/TomcatHalfEcho/ShiroVulnEnv/src/main/java/com/shiro/vuln/Shiro/MainRealm.java:17
MethoddoGetAuthorizationInfo
(PrincipalCollection principals)
JavaSecurity/Spring/SpringBootLearn/shiro/src/main/java/shiro/config/UserRealm.java:22
MethoddoGetAuthorizationInfo
(PrincipalCollection principals)
JavaSecurity/Apache/Shiro/CVE-2021-41303/src/main/java/shiro/config/UserRealm.java:22
MethoddoGetAuthorizationInfo
(PrincipalCollection principals)
JavaSecurity/Apache/Shiro/shiro/src/main/java/shiro/config/UserRealm.java:23
MethoddoGetAuthorizationInfo
(PrincipalCollection principals)
JavaSecurity/Apache/Shiro/shiro682/src/main/java/shiro/config/UserRealm.java:22
MethoddoGetAuthorizationInfo
(PrincipalCollection principals)
JavaSecurity/Apache/Shiro/CVE-2020-11989/src/main/java/shiro/config/UserRealm.java:22
← previousnext →901–1,000 of 2,190, ranked by callers