feat:添加padding oracle cbc的java实现

Author: xuanyh

pom.xml

@@ -121,6 +121,11 @@
       <version>6.0</version>
     </dependency>
 
+    <dependency>
+      <groupId>com.vip.vjtools</groupId>
+      <artifactId>vjkit</artifactId>
+      <version>1.0.8</version>
+    </dependency>
   </dependencies>
 
   <build>

src/main/java/Calc.java

@@ -1,5 +1,5 @@
 /**
- * @author met3d
+ * @author threedr3am
  */
 public class Calc {
   static {

src/main/java/com/threedr3am/bug/asm/Test.java

@@ -23,7 +23,7 @@
 /**
  * 学习asm字节码操作，fuzz基础
  *
- * @author met3d
+ * @author threedr3am
  */
 public class Test {
 

src/main/java/com/threedr3am/bug/asm/fuzz/fastjson/package-info.java

@@ -1,6 +1,6 @@
 /**
  * fastjson gadgetchain fuzz
  *
- * @author met3d
+ * @author threedr3am
  */
 package com.threedr3am.bug.asm.fuzz.fastjson;

src/main/java/com/threedr3am/bug/asm/fuzz/package-info.java

@@ -1,6 +1,6 @@
 /**
  * 利用asm实现fuzz
  *
- * @author met3d
+ * @author threedr3am
  */
 package com.threedr3am.bug.asm.fuzz;

src/main/java/com/threedr3am/bug/asm/package-info.java

@@ -1,6 +1,6 @@
 /**
  * asm字节码操作学习
  *
- * @author met3d
+ * @author threedr3am
  */
 package com.threedr3am.bug.asm;

src/main/java/com/threedr3am/bug/collections3/no1/SerializeMapForTransformer.java

@@ -20,7 +20,7 @@
  * 在Map的value在变化时执行Transformer进行转换，而Transformer包含的是Runtime.exec执行指令。
  * 利用AnnotationInvocationHandler重写的readObject方法成功实现反序列化直接触发，而不需要等待修改value。
  *
- * Created by met3d on 2018/5/3.
+ * Created by threedr3am on 2018/5/3.
  */
 public class SerializeMapForTransformer
 {

src/main/java/com/threedr3am/bug/collections3/no2/CallbackRuntime.java

@@ -5,7 +5,7 @@
 /**
  * 抛异常回显执行命令
  *
- * Created by met3d on 2018/5/5.
+ * Created by threedr3am on 2018/5/5.
  */
 public class CallbackRuntime {
     public void exec(String cmd) throws Throwable {

src/main/java/com/threedr3am/bug/collections3/no2/CallbackRuntime2.java

@@ -5,7 +5,7 @@
 /**
  * 利用加载时自动执行 & 抛异常回显
  *
- * Created by met3d on 2018/5/5.
+ * Created by threedr3am on 2018/5/5.
  */
 public class CallbackRuntime2 {
     public static String exec(String cmd) {

src/main/java/com/threedr3am/bug/collections3/no2/SerializeMapForTransformer.java

@@ -18,7 +18,7 @@
  * 此处基于Collections3.1中的TransformedMap利用漏洞，并进一步利用defineCLass构造回显,回显利用异常抛出带回，
  * 但由于DefiningClassLoader类所属jar包使用范围有限，而且AnnotationInvocationHandler的利用也仅限jdk1.8以下， 使得这样的利用链可用性不高。
  *
- * Created by met3d on 2018/5/4.
+ * Created by threedr3am on 2018/5/4.
  */
 public class SerializeMapForTransformer {