• Stars
    star
    434
  • Rank 100,274 (Top 2 %)
  • Language
    Java
  • License
    MIT License
  • Created over 3 years ago
  • Updated almost 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。

Gadgets

Page Views Count

免责声明

本项目实质为已知漏洞复现,为个人代码审计过程的记录。

同步分析博客

Java反序列化利用链补全计划

目前支持

  • URLDNS
  • CC1_TransformedMap
  • CC1_LazyMap
  • CC2_TransformingComparator
  • CC2_TemplatesImpl
  • CC3_TrAXFilter
  • CC4_PriorityQueue
  • CC5_BadAttributeValueExpException
  • CC5_InstantiateTransformer
  • CC5_TemplatesImpl
  • CC6_HashMap
  • CC6_InstantiateTransformer
  • CC6_TemplatesImpl
  • CC7_Hashtable
  • CC7_InstantiateTransformer
  • 7u21
  • 8u20
  • XStream_CVE_2013_7285
  • XStream_CVE_2020_26217
  • XStream_CVE_2020_26259
  • XStream_CVE_2021_21344
  • XStream_CVE_2021_21345
  • XStream_CVE_2021_21346
  • XStream_CVE_2021_21347
  • XStream_CVE_2021_21350
  • XStream_CVE_2021_21351
  • ...

梳理不易,欢迎issue & follow & star !

ps. 最近太忙了,家人们,会尽力抽空更新......