Functions — github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp

CodeHub MCPcopy Create free account

hub / github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp / functions

Functions44 in github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp

⨍ Functions 44 ◇ Types & classes 5

↓ 8 callersMethodput

(Object key, Object value)

src/main/java/poc/evilClass.java:95

↓ 6 callersMethodsendPoc

(Object obj, String generic)

src/main/java/exploit/InsertCode.java:103

↓ 4 callersMethodexec

(String cmd, JTextArea jTextArea,String charset,String url)

src/main/java/exploit/ExecuteCmd.java:16

↓ 4 callersMethodisEmpty

src/main/java/poc/evilClass.java:50

↓ 4 callersMethodsetValue

(Object obj, String name, Object value)

src/main/java/exploit/InsertCode.java:67

↓ 3 callersMethodexploit

src/main/java/exploit/InsertCode.java:178

↓ 3 callersMethodget

src/main/java/poc/evilClass.java:89

↓ 3 callersMethodgetInstance

src/main/java/exploit/InsertCode.java:50

↓ 2 callersMethodaddToAllow

(String className)

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:209

↓ 2 callersMethodcheckClass

(Set<Class<?>> markedClass, Class<?> clazz)

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:175

↓ 2 callersMethodgetFullUrl

src/main/java/exploit/InsertCode.java:39

↓ 2 callersMethodgetGroup

src/main/java/exploit/InsertCode.java:72

↓ 2 callersMethodnotifyListeners

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:239

↓ 2 callersMethodscan

src/main/java/exploit/InsertCode.java:190

↓ 1 callersMethodaddClass

src/main/java/poc/evilClass.java:155

↓ 1 callersMethodcheckType

(Set<Class<?>> markedClass, Type type)

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:123

↓ 1 callersMethodgetGenericService

(String generic)

src/main/java/exploit/InsertCode.java:80

↓ 1 callersMethodgetObject

src/main/java/exploit/InsertCode.java:151

↓ 1 callersMethodgetProperties

src/main/java/exploit/InsertCode.java:56

↓ 1 callersMethodreplace

(Object key, Object oldValue, Object newValue)

src/main/java/poc/evilClass.java:35

↓ 1 callersMethodvalues

src/main/java/poc/evilClass.java:122

MethodInsertCode

(String targetIp, Integer targetPort, JTextArea jTextArea)

src/main/java/exploit/InsertCode.java:42

MethodMainFrame

src/main/java/gui/MainFrame.java:27

MethodSerializeSecurityManager

(FrameworkModel frameworkModel)

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:36

MethodactionPerformed

(ActionEvent e)

src/main/java/gui/MainFrame.java:55

src/main/java/poc/evilClass.java:111

MethodcontainsKey

src/main/java/poc/evilClass.java:55

MethodcontainsValue

src/main/java/poc/evilClass.java:84

src/main/java/poc/evilClass.java:127

MethodevilClass

src/main/java/poc/evilClass.java:142

MethodgetAllowedPrefix

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:249

src/main/java/poc/evilClass.java:117

(String[] args)

src/main/java/poc/evilClass.java:168

(String[] args)

src/main/java/exploit/ExecuteCmd.java:55

(String[] args)

src/main/java/exploit/InsertCode.java:218

(String[] args)

src/main/java/gui/MainFrame.java:93

src/main/java/poc/evilClass.java:105

MethodputIfAbsent

(Object key, Object value)

src/main/java/poc/evilClass.java:25

MethodregisterInterface

(Class<?> clazz)

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:74

MethodregisterListener

(AllowClassNotifyListener listener)

src/main/java/org/apache/dubbo/common/utils/SerializeSecurityManager.java:234

(Object key, Object value)

src/main/java/poc/evilClass.java:30

src/main/java/exploit/InsertCode.java:206

src/main/java/poc/evilClass.java:45

Methodtransform

(DOM document, DTMAxisIterator iterator, SerializationHandler handler)

src/main/java/poc/evilClass.java:132