Skip to content

Commit 5229494

Browse files
author
met3d
committed
fix
1 parent 8713752 commit 5229494

26 files changed

+26
-26
lines changed

src/main/java/Calc.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/**
2-
* @author xuanyh
2+
* @author met3d
33
*/
44
public class Calc {
55
static {

src/main/java/com/threedr3am/bug/asm/Test.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@
2323
/**
2424
* 学习asm字节码操作,fuzz基础
2525
*
26-
* @author xuanyh
26+
* @author met3d
2727
*/
2828
public class Test {
2929

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* fastjson gadgetchain fuzz
33
*
4-
* @author xuanyh
4+
* @author met3d
55
*/
66
package com.threedr3am.bug.asm.fuzz.fastjson;
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* 利用asm实现fuzz
33
*
4-
* @author xuanyh
4+
* @author met3d
55
*/
66
package com.threedr3am.bug.asm.fuzz;
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* asm字节码操作学习
33
*
4-
* @author xuanyh
4+
* @author met3d
55
*/
66
package com.threedr3am.bug.asm;

src/main/java/com/threedr3am/bug/collections3/no1/SerializeMapForTransformer.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
* 在Map的value在变化时执行Transformer进行转换,而Transformer包含的是Runtime.exec执行指令。
2121
* 利用AnnotationInvocationHandler重写的readObject方法成功实现反序列化直接触发,而不需要等待修改value。
2222
*
23-
* Created by xuanyonghao on 2018/5/3.
23+
* Created by met3d on 2018/5/3.
2424
*/
2525
public class SerializeMapForTransformer
2626
{

src/main/java/com/threedr3am/bug/collections3/no2/CallbackRuntime.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
/**
66
* 抛异常回显执行命令
77
*
8-
* Created by xuanyonghao on 2018/5/5.
8+
* Created by met3d on 2018/5/5.
99
*/
1010
public class CallbackRuntime {
1111
public void exec(String cmd) throws Throwable {

src/main/java/com/threedr3am/bug/collections3/no2/CallbackRuntime2.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
/**
66
* 利用加载时自动执行 & 抛异常回显
77
*
8-
* Created by xuanyonghao on 2018/5/5.
8+
* Created by met3d on 2018/5/5.
99
*/
1010
public class CallbackRuntime2 {
1111
public static String exec(String cmd) {

src/main/java/com/threedr3am/bug/collections3/no2/SerializeMapForTransformer.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
* 此处基于Collections3.1中的TransformedMap利用漏洞,并进一步利用defineCLass构造回显,回显利用异常抛出带回,
1919
* 但由于DefiningClassLoader类所属jar包使用范围有限,而且AnnotationInvocationHandler的利用也仅限jdk1.8以下, 使得这样的利用链可用性不高。
2020
*
21-
* Created by xuanyonghao on 2018/5/4.
21+
* Created by met3d on 2018/5/4.
2222
*/
2323
public class SerializeMapForTransformer {
2424

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
/**
22
* apache-common-collections3 漏洞学习
33
*
4-
* @author xuanyh
4+
* @author met3d
55
*/
66
package com.threedr3am.bug.collections3;

0 commit comments

Comments
 (0)