Skip to content

Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。

License

Notifications You must be signed in to change notification settings

fynch3r/Gadgets

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

54 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Gadgets

Page Views Count

免责声明

本项目实质为已知漏洞复现,为个人代码审计过程的记录。

同步分析博客

Java反序列化利用链补全计划

目前支持

  • URLDNS
  • CC1_TransformedMap
  • CC1_LazyMap
  • CC2_TransformingComparator
  • CC2_TemplatesImpl
  • CC3_TrAXFilter
  • CC4_PriorityQueue
  • CC5_BadAttributeValueExpException
  • CC5_InstantiateTransformer
  • CC5_TemplatesImpl
  • CC6_HashMap
  • CC6_InstantiateTransformer
  • CC6_TemplatesImpl
  • CC7_Hashtable
  • CC7_InstantiateTransformer
  • 7u21
  • 8u20
  • XStream_CVE_2013_7285
  • XStream_CVE_2020_26217
  • XStream_CVE_2020_26259
  • XStream_CVE_2021_21344
  • XStream_CVE_2021_21345
  • XStream_CVE_2021_21346
  • XStream_CVE_2021_21347
  • XStream_CVE_2021_21350
  • XStream_CVE_2021_21351
  • ...

梳理不易,欢迎issue & follow & star !

ps. 最近太忙了,家人们,会尽力抽空更新......

About

Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages