Giter Club home page Giter Club logo

javasec1's Introduction

JavaSec学习笔记📝

碎碎念

一个存储自己学习 Java 安全的笔记仓库,所思随所欲,文笔难掩拙劣,仅供参考。

如果本文也恰好对你有所帮助,不妨留下你的⭐️。

一些拖更的原因(借口):

  • 域渗透基础体系建设
  • 非 Java 的一些代码审计
  • ....

目录

.
├── 00-JavaSE
│   ├── 0-java程序基础知识
│   ├── 1-java面向对象编程
│   ├── 2-反射
│   ├── 3-动态代理
│   └── 4-注解
├── 01-JavaWeb基础
│   ├── 0-Servlet
│   ├── 1-Jsp
│   ├── 2-Filter
│   └── 3-Listener
├── 02-Java安全基础
│   ├── 0-反射
│   ├── 1-类加载机制
│   ├── 2-Java文件系统
│   ├── 3-Java命令执行
│   ├── 4-JNI安全基础
│   ├── 5-Java反序列化
│   ├── 6-JShell
│   └── 7-Java字节码
├── 03-反序列化专区
│   ├── 0-URLDNS利用链
│   ├── 1-CommonsCollections
│   ├── 2-CommonsCollections1
│   ├── 3-CommonsCollections6
│   ├── 4-CommonsCollections2
│   ├── 5-CommonsCollections3
│   ├── 6-CommonsCollections4
│   ├── 7-CommonsCollections5
│   ├── 8-CommonsCollections7
│   ├── 9-CommonsCollections11
│   ├── 10-探寻新CC利用链之旅(上)
│   ├── 11-探寻新CC利用链之旅(下)
│   ├── 12-CommonsBeanutils
│   ├── 13-RMI基础
│   └── 14-JNDI基础
├── 04-Shiro专区
│   ├── 0-Shiro之CVE-2010-3863
│   ├── 1-Shiro之CVE-2016-4437
│   ├── 2-Shiro之key的检测
│   ├── 3-Shiro自身反序列化利用链
│   └── 4-Shiro之CVE-2016-6802
├── 05-内存马专区
│   ├── 0-Tomcat内存马之Listener
│   ├── 1-Tomcat内存马之Filter
│   ├── 2-Tomcat内存马之Servlet
│   ├── 3-反序列化注入内存马
│   ├── 4-Spring内存马之Controller
│   └── 5-Spring内存马之Interceptor
├── 06-FastJson专区
│   └── 0-FastJson-1.2.24
├── README.md
├── 参考链接.md
├── 比赛专区
│   └── 2022祥云杯--ezjava
└── 环境&其他
    └── Tomcat源码调试

环境&其他

反序列化专区

Shiro专区

内存马专区

FastJson专区

比赛专区

这里会记录一些比赛中用到的,有关正在学习的 Java 知识点的文章,以作为所学实践。

javasec1's People

Contributors

dota-st avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.