fastjson-skip-sources.demo

####一些在非污点模式下发现无法利用的类
####JNDI
com/sun/org/apache/xerces/internal/parsers/XML11Configuration
com/caucho/vfs/JndiPath
com/alibaba/druid/filter/logging/Log4j2Filter
org/python/apache/xerces/jaxp/SAXParserImpl
com/caucho/quercus/servlet/QuercusServlet
org/apache/commons/mail/Email
com/netflix/config/ConfigurationManager
com/intellij/openapi/editor/impl/DocumentImpl
javax/swing/JComboBox
org/eclipse/persistence/internal/sessions/DirectCollectionChangeRecord
org/apache/curator/framework/recipes/cache/NodeCache
org/apache/catalina/core/ContainerBase
org/codehaus/groovy/ast/expr/MethodCallExpression
io/sentry/Sentry
freemarker/template/Configuration
org/apache/camel/processor/interceptor/BacklogTracer
org/apache/xerces/jaxp/DocumentBuilderImpl
javafx/embed/swing/SwingNode
java/security/Signer
org/glassfish/jersey/message/internal/AbstractJaxbProvider
org/apache/commons/discovery/log/DiscoveryLogFactory
dk/itst/oiosaml/sp/service/SPFilter
com/ibm/as400/access/AS400JDBCManagedDataSource
org/apache/crimson/jaxp/SAXParserImpl
org/kapott/hbci/passport/AbstractPinTanPassport
fr/inria/corese/tinkerpop/TinkerpopGraph
org/elasticsearch/common/netty/bootstrap/Bootstrap
org/eclipse/jdt/internal/core/JavaModelManager
javax/swing/JTextField
java/security/Signer
jdk/nashorn/api/scripting/ScriptObjectMirror
sun/security/provider/certpath/ldap/LDAPCertStore$LDAPRequest
javafx/embed/swing/SwingNode
javax/management/relation/RelationSupport
java/awt/dnd/DragGestureRecognizer
javafx/embed/swing/SwingFXUtils

####XXE & SSRF
javafx/embed/swing/SwingNode$SwingNodeContent
javafx/scene/control/Spinner
org/apache/beam/vendor/grpc/v1p13p1/io/grpc/internal/DelayedStream
org/exolab/castor/builder/SourceGenerator
javax/accessibility/AccessibleContext
java/awt/image/ImageFilter
org/apache/cxf/jaxws/handler/logical/LogicalMessageImpl
jdk/nashorn/api/scripting/ScriptObjectMirror
javax/swing/JPopupMenu
javax/management/modelmbean/RequiredModelMBean
java/awt/SplashScreen
org/apache/http/protocol/UriPatternMatcher
org/eclipse/jetty/servlet/ErrorPageErrorHandler
org/apache/hadoop/mapreduce/jobhistory/JobFinishedEvent
org/apache/cxf/jaxrs/AbstractJAXRSFactoryBean
javax/swing/AbstractButton
javax/swing/DefaultCellEditor$1
abbot/editor/recorder/Recorder
org/apache/beam/vendor/grpc/v1_13_1/io/grpc/internal/DelayedStream
sun/swing/JLightweightFrame
org/apache/myfaces/view/facelets/component/UIRepeat
org/apache/cxf/transports/http/configuration/HTTPServerPolicy
org/apache/camel/impl/ComponentConfigurationSupport
javax/swing/JProgressBar
java/awt/Toolkit$DesktopPropertyChangeSupport
java/awt/Component
com/sun/xml/internal/ws/api/addressing/WSEndpointReference
org/apache/myfaces/taglib/core/ViewTag
org/apache/cxf/transports/http/configuration/HTTPClientPolicy
javax/swing/table/DefaultTableCellRenderer
javax/swing/plaf/basic/BasicComboBoxEditor
org/apache/storm/shade/org/eclipse/jetty/http/MimeTypes
java/beans/PropertyChangeSupport
sun/util/locale/InternalLocaleBuilder
sun/rmi/transport/tcp/TCPEndpoint
org/apache/beam/vendor/grpc/v1/io/grpc/internal/DelayedStream
org/apache/jackrabbit/oak/plugins/document/util/TimingDocumentStoreWrapper
io/grpc/internal/DelayedStream
org/apache/camel/com/googlecode/concurrentlinkedhashmap/ConcurrentLinkedHashMap
org/apache/catalina/valves/rewrite/RewriteValve
com/actelion/research/orbit/gui/RdfSearchBox
org/apache/batik/swing/JSVGCanvas
org/apache/calcite/avatica/tck/shaded/org/hsqldb/jdbc/JDBCSQLXML
nu/xom/DocType



#####一些已被找到的gadget
#####JNDI
org/apache/xbean/propertyeditor/JndiConverter
org/apache/xbean/propertyeditor/AbstractConverter

#####SSRF & XXE
org/apache/cxf/jaxrs/model/wadl/WadlGenerator
org/apache/cxf/jaxrs/utils/schemas/SchemaHandler
org/apache/commons/jelly/impl/Embedded
javax/swing/JEditorPane
org.exolab.castor.dtx.DTXEngine