Functions — github.com/bit4woo/Java_deserialize_vuln_lab

CodeHub MCPcopy Create free account

hub / github.com/bit4woo/Java_deserialize_vuln_lab / functions

Functions68 in github.com/bit4woo/Java_deserialize_vuln_lab

⨍ Functions 68 ◇ Types & classes 33

↓ 6 callersMethodreadObject

(java.io.ObjectInputStream in)

src/Step1/deserTest2.java:26

↓ 4 callersMethodinvoke

所有的流程控制都在invoke方法中 proxy：代理类 method：正在调用的方法，反射机制调用函数所必须！ args：被调用方法的参数列表，反射机制调用函数所必须！

src/Step3/proxyTest2.java:72

↓ 4 callersMethodrequest

src/Step3/proxyTest2.java:45

↓ 3 callersMethodgetName

src/Step2/reflectionTest.java:93

↓ 2 callersMethodcreate

src/Step6EvilClass/createEvilClass.java:16

↓ 2 callersMethodgetFirstCtor

(final String name)

src/ApacheCommonsCollections/lazymapPoc.java:69

↓ 1 callersMethodGeneratePayload

(Object instance, String file)

src/ApacheCommonsCollections/shenqi158demo.java:52

↓ 1 callersMethodGeneratePayload

(Object instance, String file)

src/ApacheCommonsCollections/test3.java:52

↓ 1 callersMethodGeneratePayload

(Object instance, String file)

src/ApacheCommonsCollections/TransformedMapPoC.java:64

↓ 1 callersMethodReverse_Payload

src/ApacheCommonsCollections/shenqi158demo.java:25

↓ 1 callersMethodReverse_Payload

src/ApacheCommonsCollections/test3.java:25

↓ 1 callersMethodReverse_Payload

(String ip, int port)

src/ApacheCommonsCollections/TransformedMapPoC.java:24

↓ 1 callersMethoddeser

src/Step2/reflectionTest2.java:69

↓ 1 callersMethoddeser

src/Step1/deserTest2.java:57

↓ 1 callersMethoddeser

src/Step1/deserTest.java:50

↓ 1 callersMethodfun

src/Step6EvilClass/evilClassTest.java:67

↓ 1 callersMethodgetField

(final Class<?> clazz, final String fieldName)

src/ApacheCommonsCollections/lazymapPoc.java:76

↓ 1 callersMethodgetName

src/Step2/reflectionTest3.java:59

↓ 1 callersMethodgetObject

(final String ip)

src/ApacheCommonsCollections/lazymapPoc.java:24

↓ 1 callersMethodpayloadTest

src/ApacheCommonsCollections/shenqi158demo.java:61

↓ 1 callersMethodpayloadTest

src/ApacheCommonsCollections/test3.java:61

↓ 1 callersMethodpostRequest

src/Step3/proxyTest.java:68

↓ 1 callersMethodpreRequest

src/Step3/proxyTest.java:62

↓ 1 callersMethodreadObject

(java.io.ObjectInputStream in)

src/Step2/reflectionTest2.java:30

↓ 1 callersMethodrequest

src/Step3/proxyTest.java:50

↓ 1 callersMethodser

src/Step2/reflectionTest2.java:52

↓ 1 callersMethodser

src/Step1/deserTest.java:33

↓ 1 callersMethodsetFieldValue

(final Object obj, final String fieldName, final Object value)

src/ApacheCommonsCollections/lazymapPoc.java:85

MethodExportObject

src/spring/ExportObject.java:8

src/Step3/proxyTest2.java:79

MethodProxySubject

src/Step3/proxyTest.java:46

MethodRealDynamicSubject

src/Step3/proxyTest2.java:51

MethodRealSubject

src/Step3/proxyTest.java:29

src/Step2/reflectionTest.java:77

src/Step2/reflectionTest3.java:43

MethoddeserTest

src/Step1/deserTest.java:21

MethoddeserTest2

src/Step1/deserTest2.java:22

MethodevilClazz

src/Step6EvilClass/evilClassTest.java:58

src/Step2/reflectionTest.java:85

src/Step2/reflectionTest3.java:51

MethodgetObjectInstance

(Object obj, Name name, Context nameCtx, Hashtable<?, ?> environment)

src/Step6EvilClass/evilClassTest.java:76

(HttpExchange httpExchange)

src/spring/HttpFileHandler.java:10

(String[] args)

src/ApacheCommonsCollections/shenqi158demo.java:48

(String[] args)

src/ApacheCommonsCollections/test3.java:48

(String[] args)

src/ApacheCommonsCollections/InvokerTransformerTest.java:19

(String[] args)

src/ApacheCommonsCollections/TransformedMapPoC.java:60

(final String[] args)

src/ApacheCommonsCollections/lazymapPoc.java:90

(String[] args)

src/Step2/reflectionTest2.java:42

(String[] args)

src/Step2/reflectionTest.java:7

(String[] args)

src/Step2/reflectionTest3.java:11

(String[] args)

src/spring/ExploitClient.java:15

(String[] args)

src/spring/ExploitableServer.java:11

(String[] args)

src/Step1/deserTest2.java:32

(String[] args)

src/Step1/deserTest.java:25

(String[] args)

src/Step6EvilClass/createEvilClass.java:49

(String[] argv)

src/Step6EvilClass/evilClassTest.java:10

(String[] args)

src/Step3/proxyTest2.java:14

(String[] args)

src/Step3/proxyTest.java:12

MethodpayloadTest

src/ApacheCommonsCollections/TransformedMapPoC.java:72

MethodreflectionTest2

src/Step2/reflectionTest2.java:23

src/Step3/proxyTest2.java:55

src/Step3/proxyTest.java:22

src/Step3/proxyTest.java:33

src/Step1/deserTest2.java:40

src/Step2/reflectionTest.java:89

src/Step2/reflectionTest3.java:55

src/Step2/reflectionTest.java:97

src/Step2/reflectionTest3.java:63