Functions — github.com/SugarP1g/LearningSecurity

CodeHub MCPcopy Create free account

hub / github.com/SugarP1g/LearningSecurity / functions

Functions143 in github.com/SugarP1g/LearningSecurity

⨍ Functions 143◇ Types & classes 57 ↳ Endpoints 6

↓ 8 callersFunctionsend_data

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/jdbc/mysql/server/server.py:14

↓ 7 callersFunctionreceive_data

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/jdbc/mysql/server/server.py:9

↓ 4 callersMethodsetFieldValue

(Object obj, String fieldName, Object value)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonsCollections3/PocWithTrAXFilter.java:47

↓ 3 callersMethoddecode

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/XStream/POC.java:20

↓ 3 callersFunctionprop_holds

src/PythonSecurity/blind_regular_expression/poc.py:33

↓ 3 callersMethodrun

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/ClassLoaderExpolit.java:14

↓ 3 callersMethodsavingfile

src/PythonSecurity/deserialization/poc.py:61

↓ 3 callersMethodsetFieldValue

(Object obj, String fieldName, Object value)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/exploit/LearningTemplatesImpl.java:11

↓ 3 callersMethodverifyencoding

src/PythonSecurity/deserialization/poc.py:58

↓ 2 callersMethodcase

src/PythonSecurity/deserialization/poc.py:68

↓ 2 callersMethodencode

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/XStream/POC.java:10

↓ 2 callersFunctiongen_prime

docs/CTF/Google CTF 2020/crypto/CHUNK NORRIS/40fcf7065a35550f95fde5b8b0552358af938a72b52c1ea5b4b9c40ace348ba9f0bef835c807f396b2942633e090a4ddc805689f781e81473fb547f197d58a3d/challenge.py:10

↓ 2 callersFunctiongenerate_salt

src/PythonSecurity/blind_regular_expression/poc.py:39

↓ 2 callersMethodoutput

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/XStream/Person.java:7

↓ 1 callersMethod__add__

src/PythonSecurity/deserialization/poc.py:55

↓ 1 callersMethodadd_note

(note_id, content)

docs/CTF/Google CTF 2020/web/PASTEURIZE/source.js:40

↓ 1 callersFunctioncheckInputParm

src/PythonSecurity/command_injection/vuln_danger_command.py:8

↓ 1 callersMethodcheckYaml

(String yamlStr)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/BlackListBypass.java:9

↓ 1 callersMethodchr_encode

src/PythonSecurity/deserialization/poc.py:64

↓ 1 callersMethodcreateDirIfNotExist

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:17

↓ 1 callersMethoddecode

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/XMLDecoder/POC.java:8

↓ 1 callersMethoddefineClazz

(String name, byte[] b, int off, int len)

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/MyClassLoader.java:44

↓ 1 callersFunctionescape_string

docs/CTF/Google CTF 2020/web/PASTEURIZE/source.js:78

↓ 1 callersMethodevil_decode

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/XStream/POC.java:31

↓ 1 callersFunctionextract

(tar_path, target_path)

src/PythonSecurity/ZipSlip/vuln_tarfile.py:11

↓ 1 callersMethodfindClass

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/MyClassLoader.java:29

↓ 1 callersFunctiongenerate_line

src/PythonSecurity/XXE/billion_laughs/poc.py:8

↓ 1 callersFunctiongenerate_xml

src/PythonSecurity/XXE/billion_laughs/poc.py:5

↓ 1 callersMethodgetClassBytes

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/MyClassLoader.java:63

↓ 1 callersMethodgetClassFile

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/MyClassLoader.java:58

↓ 1 callersMethodgetMatchStr

(String regex, int repl)

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/nashorn/ReDoSPOC.java:11

↓ 1 callersMethodgetMatchStr

src/JavaSecurity/LearningReDoS/src/main/java/com/SugarP1g/ReDoS/POC2.java:10

↓ 1 callersMethodgetUnzipFilePath

(String file, String path)

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:72

↓ 1 callersMethodget_note

docs/CTF/Google CTF 2020/web/PASTEURIZE/source.js:55

↓ 1 callersFunctionget_payload_content

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/jdbc/mysql/server/server.py:18

↓ 1 callersFunctionhandle

src/PythonSecurity/blind_regular_expression/vuln.py:19

↓ 1 callersMethodinsecureFelCall

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/felInjection/POC.java:14

↓ 1 callersMethodinsecureGroovyClassLoaderCall

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/groovyInjection/POC.java:27

↓ 1 callersMethodinsecureGroovyScriptEngineCall

(String rootPath, String exp)

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/groovyInjection/POC.java:34

↓ 1 callersMethodinsecureGroovyShellCall

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/groovyInjection/POC.java:22

↓ 1 callersMethodinsecureMvelCall

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/mvelInjection/POC.java:16

↓ 1 callersFunctionip_netns_command

src/PythonSecurity/command_injection/vuln_danger_command.py:19

↓ 1 callersFunctionlength_is

src/PythonSecurity/blind_regular_expression/poc.py:18

↓ 1 callersFunctionmain

(argv=sys.argv)

src/PythonSecurity/ZipSlip/poc.py:12

↓ 1 callersFunctionnth_char_is

src/PythonSecurity/blind_regular_expression/poc.py:23

↓ 1 callersMethodpoc

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/jexlInject/Demo.java:8

↓ 1 callersMethodprocessBuilderReflect

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/reflection/TestRuntime.java:9

↓ 1 callersMethodreadYaml

(String content, Class<T> type)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/BlackListBypass.java:17

↓ 1 callersFunctionredos_if

src/PythonSecurity/blind_regular_expression/poc.py:29

↓ 1 callersMethodreflectProcessImpl

(String command)

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/ReflectBypass.java:13

↓ 1 callersFunctionrun

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/jdbc/mysql/server/server.py:33

↓ 1 callersFunctionsearch

src/PythonSecurity/blind_regular_expression/vuln.py:15

↓ 1 callersMethodsetHasAllPerm0

(String command)

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/ReflectBypass2.java:13

↓ 1 callersMethodunZipFile

(File filename, String destDirPath)

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:66

↓ 1 callersFunctionunzip_file

(zip_src, dst_dir)

src/PythonSecurity/ZipSlip/vuln_zipfile.py:11

↓ 1 callersMethodvalidateFilename

(String filename, String intendedDir)

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:25

↓ 1 callersMethodvalidateZipFile

(int entries, long total)

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:33

↓ 1 callersMethodweakSpelCall

(String expStr)

src/JavaSecurity/LearningExpressInjection/src/main/java/com/SugarP1g/spelInjection/POC.java:9

↓ 1 callersMethodwriteFile

(ZipInputStream zis, String destDirPath)

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:42

MethodClassLoaderExpolit

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/ClassLoaderExpolit.java:8

MethodEvilTemplatesImpl

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonsCollections3/PocWithTrAXFilter.java:39

MethodMyClassLoader

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/MyClassLoader.java:14

(self, payload)

src/PythonSecurity/deserialization/poc.py:15

(self, c, location, base, os)

src/PythonSecurity/deserialization/poc.py:24

Method__reduce__

src/PythonSecurity/deserialization/poc.py:18

Method__reduce__

src/PythonSecurity/deserialization/LearningJsonpickle/poc.py:11

Method__reduce__

src/PythonSecurity/deserialization/LearningPickle/vuln.py:9

Method__reduce__

src/PythonSecurity/deserialization/LearningPickle/poc.py:9

Method__reduce__

src/PythonSecurity/deserialization/LearningShelve/vuln.py:10

Methodconstructor

docs/CTF/Google CTF 2020/web/PASTEURIZE/source.js:34

src/PythonSecurity/deserialization/LearningMarshal/vuln.py:25

MethodgetEngineName

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:17

MethodgetEngineVersion

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:22

MethodgetExtensions

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:27

MethodgetHostAddress

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Urldns/Demo.java:38

MethodgetLanguageName

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:42

MethodgetLanguageVersion

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:47

MethodgetMethodCallSyntax

(String obj, String m, String... args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:57

MethodgetMimeTypes

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:32

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:37

MethodgetOutputStatement

(String toDisplay)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:62

MethodgetParameter

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:52

MethodgetProgram

(String... statements)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:67

MethodgetScriptEngine

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Yaml/ScriptEngineManager/server/EvilScriptEngine.java:72

Functionhello_world

src/PythonSecurity/HPP/01-flask_server.py:11

src/PythonSecurity/deserialization/poc.py:49

MethodloadClass

src/JavaSecurity/LearningSandboxEscape/src/main/java/com/SugarP1g/securityManager/MyClassLoader.java:21

(String[] args)

src/JavaSecurity/LearningDirectoryTraversal/src/main/java/com/SugarP1g/unzip/Demo.java:86

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/reflection/TestRuntime.java:22

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/reflection/HelloDefineClass.java:7

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Fastjson/POCWithJdbcRowSetImpl.java:7

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CC1Before8u71.java:21

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonsCollections3/PocWithTrAXFilter.java:53

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonCollections1/PocWithTransformedMap.java:39

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonCollections1/PocWithLazyMap.java:28

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonCollections1/Demo.java:13

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/CommonsCollections/CommonsCollections6/PocWithTiedMapEntry.java:16

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Urldns/Demo.java:11

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/Urldns/POC.java:11

(String[] args)

src/JavaSecurity/LearningDeserialization/src/main/java/com/SugarP1g/deserialization/exploit/LearningTemplatesImpl.java:17

next →1–100 of 143, ranked by callers