Skip to content

Commit 9dab4f6

Browse files
j3ers3j3ers3
committed
🍺 Java Sec
1 parent 6ccbc8a commit 9dab4f6

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

55 files changed

+1573
-498
lines changed

‎README.md‎

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# ☕️ Hello Java Sec ![Stage](https://img.shields.io/badge/Release-DEV-brightgreen.svg)
22
> Java漏洞平台，结合漏洞代码和安全编码，帮助研发同学理解和减少漏洞
33
4-
![](media/16278906186353.jpg)
4+
![](media/16304933749187.jpg)
55

66

77
- 默认账号：admin/admin
@@ -17,10 +17,15 @@
1717
- [x] Directory Traversal
1818
- [x] Redirect
1919
- [ ] CSRF
20-
- [ ] File Upload
20+
- [x] File Upload
2121
- [x] XXE
2222
- [x] Actuator
23-
- [ ] Fastjson
23+
- [x] Fastjson
24+
- [x] Xstream
25+
- [ ] 越权
26+
- [ ] more
27+
28+
![](media/16304936834843.jpg)
2429

2530
## Run
2631
### IDEA
@@ -40,9 +45,8 @@ java -jar target/hello-1.0.0-SNAPSHOT.jar
4045
```
4146

4247

43-
## 环境
48+
## 技术架构
4449
- Java 1.8
4550
- SpringBoot 4.0
4651
- Bootstrap 4.6.0
4752
- Codemirror 5.62.0
48-
- Fastjson 1.2.24

‎hello.iml‎

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -84,8 +84,6 @@
8484
<orderEntry type="library" scope="TEST" name="Maven: org.xmlunit:xmlunit-core:2.7.0" level="project" />
8585
<orderEntry type="library" name="Maven: org.springframework.boot:spring-boot-starter-web:2.4.1" level="project" />
8686
<orderEntry type="library" name="Maven: org.springframework.boot:spring-boot-starter-json:2.4.1" level="project" />
87-
<orderEntry type="library" name="Maven: com.fasterxml.jackson.core:jackson-databind:2.11.3" level="project" />
88-
<orderEntry type="library" name="Maven: com.fasterxml.jackson.core:jackson-core:2.11.3" level="project" />
8987
<orderEntry type="library" name="Maven: com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.11.3" level="project" />
9088
<orderEntry type="library" name="Maven: com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.11.3" level="project" />
9189
<orderEntry type="library" name="Maven: com.fasterxml.jackson.module:jackson-module-parameter-names:2.11.3" level="project" />
@@ -157,7 +155,6 @@
157155
<orderEntry type="library" name="Maven: io.springfox:springfox-swagger2:2.9.2" level="project" />
158156
<orderEntry type="library" name="Maven: io.swagger:swagger-annotations:1.5.20" level="project" />
159157
<orderEntry type="library" name="Maven: io.swagger:swagger-models:1.5.20" level="project" />
160-
<orderEntry type="library" name="Maven: com.fasterxml.jackson.core:jackson-annotations:2.11.3" level="project" />
161158
<orderEntry type="library" name="Maven: io.springfox:springfox-spi:2.9.2" level="project" />
162159
<orderEntry type="library" name="Maven: io.springfox:springfox-core:2.9.2" level="project" />
163160
<orderEntry type="library" name="Maven: io.springfox:springfox-schema:2.9.2" level="project" />
@@ -170,5 +167,17 @@
170167
<orderEntry type="library" name="Maven: org.springframework.plugin:spring-plugin-metadata:1.2.0.RELEASE" level="project" />
171168
<orderEntry type="library" name="Maven: org.mapstruct:mapstruct:1.2.0.Final" level="project" />
172169
<orderEntry type="library" name="Maven: org.jsoup:jsoup:1.12.2" level="project" />
170+
<orderEntry type="library" name="Maven: org.springframework.boot:spring-boot-starter-data-ldap:2.4.1" level="project" />
171+
<orderEntry type="library" name="Maven: org.springframework.data:spring-data-ldap:2.4.2" level="project" />
172+
<orderEntry type="library" name="Maven: org.springframework.ldap:spring-ldap-core:2.3.3.RELEASE" level="project" />
173+
<orderEntry type="library" name="Maven: org.springframework.data:spring-data-commons:2.4.2" level="project" />
174+
<orderEntry type="library" name="Maven: commons-io:commons-io:2.11.0" level="project" />
175+
<orderEntry type="library" name="Maven: org.apache.shiro:shiro-spring:1.2.4" level="project" />
176+
<orderEntry type="library" name="Maven: org.apache.shiro:shiro-core:1.2.4" level="project" />
177+
<orderEntry type="library" name="Maven: commons-beanutils:commons-beanutils:1.8.3" level="project" />
178+
<orderEntry type="library" name="Maven: org.apache.shiro:shiro-web:1.2.4" level="project" />
179+
<orderEntry type="library" name="Maven: com.fasterxml.jackson.core:jackson-databind:2.11.0" level="project" />
180+
<orderEntry type="library" name="Maven: com.fasterxml.jackson.core:jackson-annotations:2.11.0" level="project" />
181+
<orderEntry type="library" name="Maven: com.fasterxml.jackson.core:jackson-core:2.11.0" level="project" />
173182
</component>
174183
</module>

‎media/16278906186353.jpg‎

-1.1 MB
Binary file not shown.

‎media/16304933749187.jpg‎

1010 KB
Loading

‎media/16304936834843.jpg‎

855 KB
Loading

‎pom.xml‎

Lines changed: 53 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111

1212
<groupId>com.best</groupId>
1313
<artifactId>hello</artifactId>
14-
<version>1.0.0-SNAPSHOT</version>
14+
<version>1.0.2</version>
1515
<name>hello java sec</name>
1616
<description>Java Sec</description>
1717
<packaging>jar</packaging>
@@ -72,6 +72,7 @@
7272
<version>1.2.24</version>
7373
</dependency>
7474

75+
<!-- 多个rce漏洞-->
7576
<dependency>
7677
<groupId>com.thoughtworks.xstream</groupId>
7778
<artifactId>xstream</artifactId>
@@ -146,6 +147,57 @@
146147
<version>1.12.2</version>
147148
</dependency>
148149

150+
<!-- LDAP -->
151+
<dependency>
152+
<groupId>org.springframework.boot</groupId>
153+
<artifactId>spring-boot-starter-data-ldap</artifactId>
154+
</dependency>
155+
156+
<dependency>
157+
<groupId>commons-io</groupId>
158+
<artifactId>commons-io</artifactId>
159+
<version>2.11.0</version>
160+
</dependency>
161+
162+
<!-- shiro rce -->
163+
<dependency>
164+
<groupId>org.apache.shiro</groupId>
165+
<artifactId>shiro-spring</artifactId>
166+
<version>1.2.4</version>
167+
</dependency>
168+
169+
170+
<!-- Jackson 引入低版本会报错 -->
171+
<dependency>
172+
<groupId>com.fasterxml.jackson.core</groupId>
173+
<artifactId>jackson-databind</artifactId>
174+
<version>2.11.0</version>
175+
</dependency>
176+
177+
<dependency>
178+
<groupId>com.fasterxml.jackson.core</groupId>
179+
<artifactId>jackson-annotations</artifactId>
180+
<version>2.11.0</version>
181+
</dependency>
182+
183+
<dependency>
184+
<groupId>com.fasterxml.jackson.core</groupId>
185+
<artifactId>jackson-core</artifactId>
186+
<version>2.11.0</version>
187+
</dependency>
188+
189+
<!-- AMF RCE
190+
<dependency>
191+
<groupId>org.apache.flex.blazeds</groupId>
192+
<artifactId>flex-messaging-common</artifactId>
193+
<version>4.7.2</version>
194+
</dependency>
195+
-->
196+
197+
198+
<!-- Spring Security -->
199+
200+
149201
</dependencies>
150202

151203
<build>

‎src/main/java/com/best/hello/Swagger2.java‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@
1313

1414
/**
1515
* Swagger2
16+
*
1617
* @date 2021/07/25
1718
*/
1819

‎src/main/java/com/best/hello/config/LoginHandlerInterceptor.java‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,6 @@ public class LoginHandlerInterceptor implements HandlerInterceptor {
1010
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
1111
// 用户登录成功后获取session
1212
Object session = request.getSession().getAttribute("LoginUser");
13-
System.out.println("[*] session用户：" + session);
1413
if (session == null) {
1514
request.setAttribute("msg", "请先登录");
1615
request.getRequestDispatcher("/login").forward(request, response);

‎src/main/java/com/best/hello/config/MvcConfig.java‎

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,9 @@ public class MvcConfig implements WebMvcConfigurer {
1313
@Override
1414
public void addViewControllers(ViewControllerRegistry registry) {
1515
// 路由 -> 视图.html
16-
registry.addViewController("/").setViewName("index");
17-
registry.addViewController("/index").setViewName("index");
16+
registry.addViewController("/").setViewName("login");
1817
registry.addViewController("/login").setViewName("login");
18+
registry.addViewController("/index").setViewName("index");
1919
registry.addViewController("/index/xss").setViewName("xss");
2020
registry.addViewController("/index/rce").setViewName("rce");
2121
registry.addViewController("/index/spel").setViewName("spel");
@@ -28,16 +28,22 @@ public void addViewControllers(ViewControllerRegistry registry) {
2828
registry.addViewController("/index/deserialize").setViewName("deserialize");
2929
registry.addViewController("/index/redirect").setViewName("redirect");
3030
registry.addViewController("/index/actuator").setViewName("actuator");
31+
registry.addViewController("/index/broken_access_control").setViewName("bac");
32+
registry.addViewController("/index/upload").setViewName("upload");
33+
registry.addViewController("/index/password").setViewName("password");
34+
registry.addViewController("/index/xstream").setViewName("xstream");
35+
registry.addViewController("/index/fastjson").setViewName("fastjson");
3136

3237
}
3338

3439
/**
3540
* 拦截器，判断是否登录成功
41+
* todo
3642
*/
3743
@Override
3844
public void addInterceptors(InterceptorRegistry registry) {
3945
registry.addInterceptor(new LoginHandlerInterceptor())
4046
.addPathPatterns("/**")
41-
.excludePathPatterns("/index", "/", "/user/login", "/login", "/css/**", "/js/**", "/img/**");
47+
.excludePathPatterns("/user/login", "/login", "/", "/css/**", "/js/**", "/img/**");
4248
}
4349
}

‎src/main/java/com/best/hello/controller/BAC.java‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
package com.best.hello.controller;
2+
3+
public class BAC {
4+
5+
}

0 commit comments

Comments
 (0)