Ecosyste.ms: Repos

An open API service providing repository metadata for many open source software ecosystems.

GitHub / threedr3am / learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

JSON API: https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/threedr3am%2Flearnjavabug

Stars: 2,509
Forks: 486
Open Issues: 9

License: mit
Language: Java
Repo Size: 8.02 MB
Dependencies: 183

Created: about 6 years ago
Updated: 26 days ago
Last pushed: about 2 months ago
Last synced: 23 days ago

Files

Loading...

Readme

Loading...

Dependencies

ShardingSphere-UI/CVE-2020-1947/pom.xml maven

com.xyh:common 1.0-SNAPSHOT

ShardingSphere-UI/pom.xml maven

apache-poi/cve-2014-3529/pom.xml maven

org.apache.poi:poi-ooxml 3.10-FINAL

apache-poi/pom.xml maven

cas/4.1.7-4.2.x/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
org.jasig.cas:cas-server-core-util 4.2.7
org.jasig.cas:cas-server-webapp 4.2.7
org.jasig.cas:cas-server-webapp-support 4.2.7
org.jasig:spring-webflow-client-repo 1.0.0

cas/4.1.x-4.1.6/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
org.cryptacular:cryptacular 1.0
org.jasig.cas:cas-server-webapp 4.1.5
org.jasig:spring-webflow-client-repo 1.0.0

cas/5.x/pom.xml maven

cas/CAS4PaddingOracleCBC/pom.xml maven

com.xyh:common 1.0-SNAPSHOT

cas/pom.xml maven

com.mchange:c3p0 0.9.5.2
org.apache.commons:commons-collections4 4.0

common/pom.xml maven

org.apache.tomcat.embed:tomcat-embed-core 9.0.31 compile
org.javassist:javassist 3.25.0-GA compile
com.unboundid:unboundid-ldapsdk 3.1.1
com.vip.vjtools:vjkit 1.0.8
org.apache.httpcomponents:httpasyncclient 4.1.4
org.apache.httpcomponents:httpclient 4.5.11
org.apache.httpcomponents:httpmime 4.5.11

common-collections/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
commons-collections:commons-collections 3.2.1

dubbo/dubbo-hessian2-safe-reinforcement/learn-dubbo-client-boot/pom.xml maven

com.threedr3am:learn-dubbo-server-boot 0.0.1-SNAPSHOT

dubbo/dubbo-hessian2-safe-reinforcement/learn-dubbo-server-boot/pom.xml maven

dubbo/dubbo-hessian2-safe-reinforcement/pom.xml maven

org.apache.curator:curator-framework 2.9.1
org.apache.curator:curator-recipes 2.9.1
org.apache.dubbo:dubbo 2.7.5
org.apache.dubbo:dubbo-spring-boot-starter 2.7.5
org.apache.zookeeper:zookeeper 3.4.13
org.projectlombok:lombok
org.springframework.boot:spring-boot-starter
org.springframework.boot:spring-boot-starter-test test

dubbo/pom.xml maven

com.caucho:hessian 4.0.38
com.caucho:quercus 4.0.45
com.rometools:rome 1.7.0
com.xyh:common 1.0-SNAPSHOT
commons-beanutils:commons-beanutils 1.9.2
commons-collections:commons-collections 3.1
commons-collections:commons-collections 3.2.1
org.apache.commons:commons-collections4 4.0
org.apache.curator:curator-framework 2.9.1
org.apache.curator:curator-recipes 2.9.1
org.apache.dubbo:dubbo 2.7.5
org.apache.xbean:xbean-naming 4.15
org.apache.zookeeper:zookeeper 3.4.13

fastjson/pom.xml maven

org.springframework:spring-core 5.1.6.RELEASE compile
org.springframework:spring-test 5.1.6.RELEASE compile
br.com.anteros:Anteros-Core 1.2.1
br.com.anteros:Anteros-DBCP 1.0.1
cocoon:cocoon-slide 2.1.11
com.alibaba:fastjson 1.2.68
com.caucho:quercus 4.0.63
com.codahale.metrics:metrics-healthchecks 3.0.2
com.xyh:common 1.0-SNAPSHOT
com.zaxxer:HikariCP 3.4.1
commons-configuration:commons-configuration 1.10
commons-io:commons-io 2.7
commons-jelly:commons-jelly 1.0.1
javax:javaee-api 8.0.1
mysql:mysql-connector-java 8.0.14
org.apache.abdera:abdera-server 1.1.2
org.apache.aries.transaction:org.apache.aries.transaction.jms 2.0.0
org.apache.commons:commons-proxy 1.0
org.apache.cxf:cxf-bundle 2.7.18
org.apache.cxf:cxf-core 3.3.5
org.apache.hadoop:hadoop-client-minicluster 3.2.1
org.apache.ibatis:ibatis-sqlmap 2.3.4.726
org.apache.ignite:ignite-jta 2.8.0
org.apache.shiro:shiro-core 1.5.1
org.apache.xbean:xbean-reflect 4.15
org.postgresql:postgresql 42.5.0
org.python:jython 2.5.3-rc1
org.seleniumhq.selenium:selenium-api 3.141.59
org.springframework.boot:spring-boot-starter-security 2.2.5.RELEASE
slide:slide-kernel 2.1

feature/pom.xml maven

com.alibaba:fastjson 1.2.68
com.caucho:hessian 4.0.38
com.esotericsoftware.yamlbeans:yamlbeans 1.09
com.esotericsoftware:kryo 4.0.0
com.thoughtworks.xstream:xstream 1.4.9
org.jyaml:jyaml 1.3
org.yaml:snakeyaml 1.17

jackson/pom.xml maven

br.com.anteros:Anteros-Core 1.2.1
br.com.anteros:Anteros-DBCP 1.0.1
ch.qos.logback:logback-core 1.2.1
com.alibaba:druid 1.1.6
com.caucho:quercus 4.0.63
com.codahale.metrics:metrics-healthchecks 3.0.2
com.fasterxml.jackson.core:jackson-databind 2.9.10.4
com.h2database:h2 1.4.199
com.xyh:common 1.0-SNAPSHOT
com.zaxxer:HikariCP 3.4.1
javax:javaee-api 8.0.1
mysql:mysql-connector-java 8.0.13
net.sf.ehcache:ehcache 2.10.6
org.apache.aries.transaction:org.apache.aries.transaction.jms 2.0.0
org.apache.hadoop:hadoop-client-minicluster 3.2.1
org.apache.ibatis:ibatis-sqlmap 2.3.4.726
org.apache.ignite:ignite-jta 2.8.0
org.apache.shiro:shiro-core 1.5.1
org.apache.xbean:xbean-reflect 4.15
org.jdom:jdom 1.1.3
org.jdom:jdom2 2.0.6
org.quartz-scheduler:quartz 2.3.2
org.springframework:spring-aop 4.3.26.RELEASE
org.springframework:spring-beans 3.0.7.RELEASE
org.springframework:spring-core 4.3.26.RELEASE
org.springframework:spring-web 4.3.26.RELEASE

java-compile/pom.xml maven

org.javassist:javassist 3.25.0-GA compile

nexus/pom.xml maven

padding-oracle-cbc/pom.xml maven

com.xyh:common 1.0-SNAPSHOT

pom.xml maven

junit:junit 4.11 test

rmi/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
org.apache.commons:commons-collections4 4.0
org.javassist:javassist 3.25.0-GA

security-manager/pom.xml maven

shiro/auth-bypass-shiro-1-4-1/pom.xml maven

org.apache.shiro:shiro-spring 1.4.1
org.apache.shiro:shiro-web 1.4.1
org.springframework.boot:spring-boot-starter-web

shiro/auth-bypass-shiro-1-5-1/pom.xml maven

org.apache.shiro:shiro-spring 1.5.1
org.apache.shiro:shiro-web 1.5.1
org.springframework.boot:spring-boot-starter-web

shiro/auth-bypass-shiro-1-5-3/pom.xml maven

org.apache.shiro:shiro-spring 1.5.2
org.apache.shiro:shiro-web 1.5.2
org.springframework.boot:spring-boot-starter-web

shiro/auth-bypass-shiro-1-7-1/pom.xml maven

org.apache.shiro:shiro-spring 1.7.1
org.apache.shiro:shiro-web 1.7.1
org.springframework.boot:spring-boot-starter-web

shiro/auth-bypass-shiro-1-8-0/pom.xml maven

org.apache.shiro:shiro-spring 1.8.0
org.apache.shiro:shiro-web 1.8.0
org.springframework.boot:spring-boot-starter-web

shiro/pom.xml maven

spring/pom.xml maven

spring/spring-boot-actuator-bug/actuator-1.2/pom.xml maven

spring/spring-boot-actuator-bug/actuator-1.3/pom.xml maven

spring/spring-boot-actuator-bug/actuator-1.4/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
org.jolokia:jolokia-core 1.6.0
org.springframework.boot:spring-boot-starter-actuator
org.springframework.boot:spring-boot-starter-web
org.springframework.cloud:spring-cloud-starter-config
org.springframework.cloud:spring-cloud-starter-netflix-eureka-client 1.4.0.RELEASE

spring/spring-boot-actuator-bug/actuator-1.5/pom.xml maven

spring/spring-boot-actuator-bug/actuator-2.0/pom.xml maven

com.h2database:h2 1.4.199
com.xyh:common 1.0-SNAPSHOT
com.zaxxer:HikariCP 3.4.2
org.jolokia:jolokia-core 1.6.0
org.springframework.boot:spring-boot-starter-actuator
org.springframework.boot:spring-boot-starter-data-jpa
org.springframework.boot:spring-boot-starter-web
org.springframework.cloud:spring-cloud-starter-config

spring/spring-boot-actuator-bug/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
org.yaml:snakeyaml 1.16

spring/spring-cloud-config-server-CVE-2019-3799/pom.xml maven

org.springframework.boot:spring-boot-starter
org.springframework.cloud:spring-cloud-config-server 2.0.3.RELEASE

spring/spring-cloud-config-server-CVE-2020-5405/pom.xml maven

org.springframework.boot:spring-boot-starter
org.springframework.cloud:spring-cloud-config-server 2.2.1.RELEASE

spring/spring-cloud-config-server-CVE-2020-5410/pom.xml maven

org.springframework.boot:spring-boot-starter
org.springframework.cloud:spring-cloud-config-server 2.2.2.RELEASE

spring/spring-data-mongodb-spel-CVE-2022-22980/pom.xml maven

spring/spring-session-redis-sync/1/pom.xml maven

org.springframework.boot:spring-boot-starter-web 2.3.0.RELEASE

spring/spring-session-redis-sync/2/pom.xml maven

org.springframework.boot:spring-boot-starter-web 2.3.0.RELEASE

spring/spring-session-redis-sync/pom.xml maven

org.apache.commons:commons-collections4 4.0
org.javassist:javassist 3.25.0-GA
org.springframework.boot:spring-boot-starter-data-redis 2.3.0.RELEASE
org.springframework.session:spring-session-data-redis 2.3.0.RELEASE

spring/spring-uricomponentsbuilder/pom.xml maven

spring/spring-uricomponentsbuilder-2/pom.xml maven

tomcat/ajp-bug/pom.xml maven

tomcat/pom.xml maven

org.apache.tomcat:tomcat-coyote 7.0.39

tomcat/session-filestore/pom.xml maven

tomcat/sync-session-bug/pom.xml maven

javassist:javassist 3.12.0.GA compile

xxe/pom.xml maven

com.xyh:common 1.0-SNAPSHOT
org.dom4j:dom4j 2.0.0
org.jdom:jdom 1.1.3