René's URL Explorer Experiment


Title: GitHub - colorfish32/JavaSecurityLearning: 记录一下 Java 安全学习历程，也算是半条学习路线了 · GitHub

Open Graph Title: GitHub - colorfish32/JavaSecurityLearning: 记录一下 Java 安全学习历程，也算是半条学习路线了

X Title: GitHub - colorfish32/JavaSecurityLearning: 记录一下 Java 安全学习历程，也算是半条学习路线了

Description: 记录一下 Java 安全学习历程，也算是半条学习路线了. Contribute to colorfish32/JavaSecurityLearning development by creating an account on GitHub.

Open Graph Description: 记录一下 Java 安全学习历程，也算是半条学习路线了. Contribute to colorfish32/JavaSecurityLearning development by creating an account on GitHub.

X Description: 记录一下 Java 安全学习历程，也算是半条学习路线了. Contribute to colorfish32/JavaSecurityLearning development by creating an account on GitHub.

Opengraph URL: https://github.com/colorfish32/JavaSecurityLearning

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/tree/*name(/*path)
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:f4417601-7b25-0849-6dc5-cd8bb01729a1
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id925E:19C884:6710F5:8DE54F:6A57D75C
html-safe-nonce2490e188c68c59707d38ff475f567ba5e9a3e93bc095e2aba4ec2436c6db5d62
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5MjVFOjE5Qzg4NDo2NzEwRjU6OERFNTRGOjZBNTdENzVDIiwidmlzaXRvcl9pZCI6IjE5OTQzODU1ODA1NTgzNzQ3NDgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac9b22fb9118d38bef84fcf2961c18e771749854a2cc82c40200ad04c83ea81093
hovercard-subject-tagrepository:1015976586
github-keyboard-shortcutsrepository,source-code,file-tree,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/colorfish32/JavaSecurityLearning/tree/main
twitter:imagehttps://opengraph.githubassets.com/b4cb20a83e187f73231dae3338fe3985170c43dc1a82be7568a9ddc544e74425/colorfish32/JavaSecurityLearning
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/b4cb20a83e187f73231dae3338fe3985170c43dc1a82be7568a9ddc544e74425/colorfish32/JavaSecurityLearning
og:image:alt记录一下 Java 安全学习历程，也算是半条学习路线了. Contribute to colorfish32/JavaSecurityLearning development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None837767abbd14b05f219fd812ef2842c659968b63619e1b966dded83972ab5bca
turbo-cache-controlno-cache
go-importgithub.com/colorfish32/JavaSecurityLearning git https://github.com/colorfish32/JavaSecurityLearning.git
octolytics-dimension-user_id216103978
octolytics-dimension-user_logincolorfish32
octolytics-dimension-repository_id1015976586
octolytics-dimension-repository_nwocolorfish32/JavaSecurityLearning
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id512705272
octolytics-dimension-repository_parent_nwoDrun1baby/JavaSecurityLearning
octolytics-dimension-repository_network_root_id512705272
octolytics-dimension-repository_network_root_nwoDrun1baby/JavaSecurityLearning
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release9044d0f867aa9892268d1f430238ff123e11ee91
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/colorfish32/JavaSecurityLearning/tree/main#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fcolorfish32%2FJavaSecurityLearning%2Ftree%2Fmain
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fcolorfish32%2FJavaSecurityLearning%2Ftree%2Fmain
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=colorfish32%2FJavaSecurityLearning
Reloadhttps://github.com/colorfish32/JavaSecurityLearning/tree/main
Reloadhttps://github.com/colorfish32/JavaSecurityLearning/tree/main
Reloadhttps://github.com/colorfish32/JavaSecurityLearning/tree/main
colorfish32 https://github.com/colorfish32
JavaSecurityLearninghttps://github.com/colorfish32/JavaSecurityLearning
Drun1baby/JavaSecurityLearninghttps://github.com/Drun1baby/JavaSecurityLearning
Notifications https://github.com/login?return_to=%2Fcolorfish32%2FJavaSecurityLearning
Fork 0 https://github.com/login?return_to=%2Fcolorfish32%2FJavaSecurityLearning
Star 0 https://github.com/login?return_to=%2Fcolorfish32%2FJavaSecurityLearning
Code https://github.com/colorfish32/JavaSecurityLearning
Pull requests 0 https://github.com/colorfish32/JavaSecurityLearning/pulls
Actions https://github.com/colorfish32/JavaSecurityLearning/actions
Projects https://github.com/colorfish32/JavaSecurityLearning/projects
Security and quality 0 https://github.com/colorfish32/JavaSecurityLearning/security
Insights https://github.com/colorfish32/JavaSecurityLearning/pulse
Code https://github.com/colorfish32/JavaSecurityLearning
Pull requests https://github.com/colorfish32/JavaSecurityLearning/pulls
Actions https://github.com/colorfish32/JavaSecurityLearning/actions
Projects https://github.com/colorfish32/JavaSecurityLearning/projects
Security and quality https://github.com/colorfish32/JavaSecurityLearning/security
Insights https://github.com/colorfish32/JavaSecurityLearning/pulse
https://github.com/colorfish32/JavaSecurityLearning
Brancheshttps://github.com/colorfish32/JavaSecurityLearning/branches
Tagshttps://github.com/colorfish32/JavaSecurityLearning/tags
https://github.com/colorfish32/JavaSecurityLearning/branches
https://github.com/colorfish32/JavaSecurityLearning/tags
238 Commitshttps://github.com/colorfish32/JavaSecurityLearning/commits/main/
https://github.com/colorfish32/JavaSecurityLearning/commits/main/
JavaSecurityhttps://github.com/colorfish32/JavaSecurityLearning/tree/main/JavaSecurity
JavaSecurityhttps://github.com/colorfish32/JavaSecurityLearning/tree/main/JavaSecurity
链子流程图https://github.com/colorfish32/JavaSecurityLearning/tree/main/%E9%93%BE%E5%AD%90%E6%B5%81%E7%A8%8B%E5%9B%BE
链子流程图https://github.com/colorfish32/JavaSecurityLearning/tree/main/%E9%93%BE%E5%AD%90%E6%B5%81%E7%A8%8B%E5%9B%BE
.DS_Storehttps://github.com/colorfish32/JavaSecurityLearning/blob/main/.DS_Store
.DS_Storehttps://github.com/colorfish32/JavaSecurityLearning/blob/main/.DS_Store
.gitattributehttps://github.com/colorfish32/JavaSecurityLearning/blob/main/.gitattribute
.gitattributehttps://github.com/colorfish32/JavaSecurityLearning/blob/main/.gitattribute
.gitignorehttps://github.com/colorfish32/JavaSecurityLearning/blob/main/.gitignore
.gitignorehttps://github.com/colorfish32/JavaSecurityLearning/blob/main/.gitignore
README.mdhttps://github.com/colorfish32/JavaSecurityLearning/blob/main/README.md
README.mdhttps://github.com/colorfish32/JavaSecurityLearning/blob/main/README.md
READMEhttps://github.com/colorfish32/JavaSecurityLearning/tree/main
https://github.com/colorfish32/JavaSecurityLearning/tree/main#javasecuritylearning
https://github.com/colorfish32/JavaSecurityLearning/tree/main#基础开发是一定要学的
【狂神说Java】SpringBoot最新教程IDEA版通俗易懂https://www.bilibili.com/video/BV1PE411i7CV
尚硅谷Vue2.0+Vue3.0全套教程丨vuejs从入门到精通https://www.bilibili.com/video/BV1Zy4y1K7SH?spm_id_from=333.788.top_right_bar_window_custom_collection.content.click
【实战】基于SpringBoot+Vue开发的前后端分离博客项目完整教学https://www.bilibili.com/video/BV1PQ4y1P7hZ?vd_source=a4eba559e280bf2f1aec770f740d0645
二倍速【狂神说Java】Java零基础学习视频通俗易懂https://www.bilibili.com/video/BV12J41137hu?spm_id_from=333.337.search-card.all.click
https://github.com/colorfish32/JavaSecurityLearning/tree/main#java-安全基础
Java反序列化漏洞专题-基础篇(21/09/05更新类加载部分)https://www.bilibili.com/video/BV16h411z7o9?spm_id_from=333.788.top_right_bar_window_custom_collection.content.click
Java-IO流https://drun1baby.github.io/2022/05/30/Java-IO%E6%B5%81/
反射https://drun1baby.github.io/2022/05/20/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9F%BA%E7%A1%80%E7%AF%87-02-Java%E5%8F%8D%E5%B0%84%E4%B8%8EURLDNS%E9%93%BE%E5%88%86%E6%9E%90/
JDK动态代理https://drun1baby.github.io/2022/06/01/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9F%BA%E7%A1%80%E7%AF%87-04-JDK%E5%8A%A8%E6%80%81%E4%BB%A3%E7%90%86/
反序列化概念与利用https://drun1baby.github.io/2022/05/17/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9F%BA%E7%A1%80%E7%AF%87-01-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%A6%82%E5%BF%B5%E4%B8%8E%E5%88%A9%E7%94%A8/
URLDNS链分析https://drun1baby.github.io/2022/05/20/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9F%BA%E7%A1%80%E7%AF%87-02-Java%E5%8F%8D%E5%B0%84%E4%B8%8EURLDNS%E9%93%BE%E5%88%86%E6%9E%90/
类的动态加载https://drun1baby.github.io/2022/06/03/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9F%BA%E7%A1%80%E7%AF%87-05-%E7%B1%BB%E7%9A%84%E5%8A%A8%E6%80%81%E5%8A%A0%E8%BD%BD/
反弹shell学习 ———— 这里主要是为了 yso 的使用https://drun1baby.github.io/2022/07/20/%E5%8F%8D%E5%BC%B9shell%E5%AD%A6%E4%B9%A0/
Java 反弹 shell 与 Runtime.getRuntime().exec() 的故事https://drun1baby.github.io/2022/10/12/Java-%E5%8F%8D%E5%BC%B9-shell-%E4%B8%8E-Runtime-getRuntime-exec-%E7%9A%84%E6%95%85%E4%BA%8B/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#java-反序列化基础
CC1链https://drun1baby.github.io/2022/06/06/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8701-CC1%E9%93%BE/
CC1链补充https://drun1baby.github.io/2022/06/10/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8702-CC1%E9%93%BE%E8%A1%A5%E5%85%85/
CC6链https://drun1baby.github.io/2022/06/11/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8703-CC6%E9%93%BE/
CC3链https://drun1baby.github.io/2022/06/20/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8704-CC3%E9%93%BE/
CC2链https://drun1baby.github.io/2022/06/28/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8705-CC2%E9%93%BE/
CC4链https://drun1baby.github.io/2022/06/28/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8706-CC4%E9%93%BE/
CC5链https://drun1baby.github.io/2022/06/29/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8707-CC5%E9%93%BE/
CC7链https://drun1baby.github.io/2022/06/29/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8708-CC7%E9%93%BE/
CC11链https://drun1baby.github.io/2022/07/11/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Commons-Collections%E7%AF%8709-CC11%E9%93%BE/
CommonsBeanUtils反序列化https://drun1baby.github.io/2022/07/12/CommonsBeanUtils%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/
Shiro550流程分析https://drun1baby.github.io/2022/07/10/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Shiro%E7%AF%8701-Shiro550%E6%B5%81%E7%A8%8B%E5%88%86%E6%9E%90/
02-Shiro721流程分析https://drun1baby.top/2023/03/08/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Shiro%E7%AF%8702-Shiro721%E6%B5%81%E7%A8%8B%E5%88%86%E6%9E%90/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#java-反序列化进阶
RMI基础https://drun1baby.github.io/2022/07/19/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BRMI%E4%B8%93%E9%A2%9801-RMI%E5%9F%BA%E7%A1%80/
RMI的几种攻击方式https://drun1baby.github.io/2022/07/23/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BRMI%E4%B8%93%E9%A2%9802-RMI%E7%9A%84%E5%87%A0%E7%A7%8D%E6%94%BB%E5%87%BB%E6%96%B9%E5%BC%8F/
JNDI学习https://drun1baby.github.io/2022/07/28/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJNDI%E5%AD%A6%E4%B9%A0/
浅谈 JEP290https://drun1baby.top/2023/04/18/%E6%B5%85%E8%B0%88-JEP290/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#fastjson
FastJson基础https://drun1baby.github.io/2022/08/04/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Fastjson%E7%AF%8701-Fastjson%E5%9F%BA%E7%A1%80/
Fastjson-1.2.24版本漏洞分析https://drun1baby.github.io/2022/08/06/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Fastjson%E7%AF%8702-Fastjson-1-2-24%E7%89%88%E6%9C%AC%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
Fastjson篇03-Fastjson各版本绕过分析https://drun1baby.github.io/2022/08/08/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Fastjson%E7%AF%8703-Fastjson%E5%90%84%E7%89%88%E6%9C%AC%E7%BB%95%E8%BF%87%E5%88%86%E6%9E%90/
Java反序列化Fastjson篇04-Fastjson1.2.62-1.2.68版本反序列化漏洞https://drun1baby.github.io/2022/08/13/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Fastjson%E7%AF%8704-Fastjson1-2-62-1-2-68%E7%89%88%E6%9C%AC%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E/
Java反序列化Fastjson篇05-写给自己看的一些源码深入分析https://drun1baby.top/2022/10/19/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Fastjson%E7%AF%8705-%E5%86%99%E7%BB%99%E8%87%AA%E5%B7%B1%E7%9C%8B%E7%9A%84%E4%B8%80%E4%BA%9B%E6%BA%90%E7%A0%81%E6%B7%B1%E5%85%A5%E5%88%86%E6%9E%90/
CTFReposityStorehttps://github.com/Drun1baby/CTFReposityStore
https://github.com/colorfish32/JavaSecurityLearning/tree/main#log4j2
Log4j2 复现https://drun1baby.github.io/2022/08/09/Log4j2%E5%A4%8D%E7%8E%B0/
Spring开发学习https://drun1baby.github.io/2022/08/18/Spring%E5%BC%80%E5%8F%91%E5%AD%A6%E4%B9%A0/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#weblogic
CVE-2015-4852 WebLogic T3 反序列化分析https://drun1baby.top/2022/11/28/CVE-2015-4852-WebLogic-T3-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%88%86%E6%9E%90/
CVE-2017-10271 WebLogic XMLDecoderhttps://drun1baby.top/2023/02/09/CVE-2017-10271-WebLogic-XMLDecoder/
CVE-2021-2109 WebLogic JNDI 注入https://drun1baby.top/2023/02/12/CVE-2021-2109-WebLogic-JNDI-%E6%B3%A8%E5%85%A5/
WebLogic 弱口令&文件上传&SSRFhttps://drun1baby.top/2023/03/06/WebLogic-%E5%BC%B1%E5%8F%A3%E4%BB%A4-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0-SSRF/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#el-表达式注入本质上还是-ognl-表达式注入
Java 之 SpEL 表达式注入https://drun1baby.github.io/2022/09/23/Java-%E4%B9%8B-SpEL-%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/
Java 之 EL 表达式注入https://drun1baby.github.io/2022/09/23/Java-%E4%B9%8B-EL-%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#内存马
Servlet 项目搭建https://drun1baby.github.io/2022/08/22/Servlet-%E9%A1%B9%E7%9B%AE%E6%90%AD%E5%BB%BA/
Java反序列化之内存马系列 01-基础内容学习https://drun1baby.github.io/2022/08/19/Java%E5%86%85%E5%AD%98%E9%A9%AC%E7%B3%BB%E5%88%97-01-%E5%9F%BA%E7%A1%80%E5%86%85%E5%AE%B9%E5%AD%A6%E4%B9%A0/
Java内存马系列-02-内存马介绍https://drun1baby.github.io/2022/08/21/Java%E5%86%85%E5%AD%98%E9%A9%AC%E7%B3%BB%E5%88%97-02-%E5%86%85%E5%AD%98%E9%A9%AC%E4%BB%8B%E7%BB%8D/
Java内存马系列-03-Tomcat 之 Filter 型内存马https://drun1baby.github.io/2022/08/22/Java%E5%86%85%E5%AD%98%E9%A9%AC%E7%B3%BB%E5%88%97-03-Tomcat-%E4%B9%8B-Filter-%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/
Java内存马系列-04-Tomcat 之 Listener 型内存马https://drun1baby.github.io/2022/08/27/Java%E5%86%85%E5%AD%98%E9%A9%AC%E7%B3%BB%E5%88%97-04-Tomcat-%E4%B9%8B-Listener-%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/
Java内存马系列-05-Tomcat 之 Servlet 型内存马https://drun1baby.github.io/2022/09/04/Java%E5%86%85%E5%AD%98%E9%A9%AC%E7%B3%BB%E5%88%97-05-Tomcat-%E4%B9%8B-Servlet-%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/
Java内存马系列-06-Tomcat 之 Valve 型内存马https://drun1baby.github.io/2022/09/07/Java%E5%86%85%E5%AD%98%E9%A9%AC%E7%B3%BB%E5%88%97-06-Tomcat-%E4%B9%8B-Valve-%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/
Java Agent 内存马学习https://drun1baby.top/2023/12/07/Java-Agent-%E5%86%85%E5%AD%98%E9%A9%AC%E5%AD%A6%E4%B9%A0/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#关于-java-代码审计很多人对这块其实有个误区
WebGoat代码审计https://drun1baby.top/2022/03/17/WebGoat%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1-02-SQL%E6%B3%A8%E5%85%A5/
Java Owasp Top10 审计https://github.com/Drun1baby/JavaSecurityLearning/tree/main/JavaSecurity/CodeReview/JavaSec-Code
https://github.com/LandGrey/spring-boot-upload-file-lead-to-rce-trickshttps://github.com/LandGrey/spring-boot-upload-file-lead-to-rce-tricks
https://github.com/colorfish32/JavaSecurityLearning/tree/main#查漏补缺
Java反序列化之C3P0链https://drun1baby.github.io/2022/10/06/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BC3P0%E9%93%BE/
Java OWASP 中的 XXE 代码审计https://drun1baby.github.io/2022/09/16/Java-OWASP-%E4%B8%AD%E7%9A%84-XXE-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/
Java OWASP 中的 SQL 注入代码审计https://drun1baby.github.io/2022/09/14/Java-OWASP-%E4%B8%AD%E7%9A%84-SQL-%E6%B3%A8%E5%85%A5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/
Java 代码审计之华夏 ERP CMS v2.3https://drun1baby.github.io/2022/09/30/Java-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E4%B9%8B%E5%8D%8E%E5%A4%8F-ERP-CMS-V2.3/
Java反序列化之 SnakeYaml 链https://drun1baby.github.io/2022/10/16/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B-SnakeYaml-%E9%93%BE/
Java反序列化Fastjson篇05-写给自己看的一些源码深入分析https://drun1baby.github.io/2022/10/19/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96Fastjson%E7%AF%8705-%E5%86%99%E7%BB%99%E8%87%AA%E5%B7%B1%E7%9C%8B%E7%9A%84%E4%B8%80%E4%BA%9B%E6%BA%90%E7%A0%81%E6%B7%B1%E5%85%A5%E5%88%86%E6%9E%90/
https://xz.aliyun.com/t/8697https://xz.aliyun.com/t/8697
https://github.com/colorfish32/JavaSecurityLearning/tree/main#struts2-系列漏洞
Java Struts2 学习与环境搭建https://drun1baby.github.io/2022/11/02/Java-Struts2-%E5%AD%A6%E4%B9%A0%E4%B8%8E%E7%8E%AF%E5%A2%83%E6%90%AD%E5%BB%BA/
Java Struts2 系列 S2-001https://drun1baby.github.io/2022/10/27/Java-Struts2-%E7%B3%BB%E5%88%97-S2-001/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#jackson-系列漏洞
Jackson 反序列化（一）漏洞原理https://drun1baby.top/2023/12/07/Jackson-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%EF%BC%88%E4%B8%80%EF%BC%89%E6%BC%8F%E6%B4%9E%E5%8E%9F%E7%90%86/
Jackson 反序列化（二）CVE-2017-7525https://drun1baby.top/2023/12/07/Jackson-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%EF%BC%88%E4%BA%8C%EF%BC%89CVE-2017-7525/
Jackson 反序列化（三）CVE-2017-17485https://drun1baby.top/2023/12/07/Jackson-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%EF%BC%88%E4%B8%89%EF%BC%89CVE-2017-17485/
https://boogipop.com/2023/06/20/Jackson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E9%80%9A%E6%9D%80Web%E9%A2%98/https://boogipop.com/2023/06/20/Jackson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E9%80%9A%E6%9D%80Web%E9%A2%98/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#apache
https://github.com/colorfish32/JavaSecurityLearning/tree/main#apache-dolphinscheduler
https://xz.aliyun.com/t/13981https://xz.aliyun.com/t/13981
https://github.com/colorfish32/JavaSecurityLearning/tree/main#apache-ofbiz
https://y4tacker.github.io/2023/12/27/year/2023/12/Apache-OFBiz%E6%9C%AA%E6%8E%88%E6%9D%83%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%B5%85%E6%9E%90-CVE-2023-51467/https://y4tacker.github.io/2023/12/27/year/2023/12/Apache-OFBiz%E6%9C%AA%E6%8E%88%E6%9D%83%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%B5%85%E6%9E%90-CVE-2023-51467/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#codeql
CodeQL 入门https://drun1baby.top/2023/09/03/CodeQL-%E5%85%A5%E9%97%A8/
CodeQL 官方文档学习https://drun1baby.top/2023/07/31/CodeQL-%E5%AD%A6%E4%B9%A0/
用CodeQL分析漏洞_CVE-2022-42889 | l3yx's bloghttps://l3yx.github.io/2022/12/17/%E7%94%A8CodeQL%E5%88%86%E6%9E%90%E6%BC%8F%E6%B4%9E-CVE-2022-42889/
https://github.com/colorfish32/JavaSecurityLearning/tree/main#漏洞挖掘
https://github.com/wh1t3p1g/tabbyhttps://github.com/wh1t3p1g/tabby
https://github.com/colorfish32/JavaSecurityLearning/tree/main#后记
https://private-user-images.githubusercontent.com/75228348/433195179-3541e7fb-7ce1-419b-876d-cdc2a4207ad9.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.e8aHOaDR4drz-9zSy1W0Ba9Wgid-JLtyiO2QqmKzE_c
Readme https://github.com/colorfish32/JavaSecurityLearning/tree/main#readme-ov-file
Please reload this pagehttps://github.com/colorfish32/JavaSecurityLearning/tree/main
Activityhttps://github.com/colorfish32/JavaSecurityLearning/activity
0 forkshttps://github.com/colorfish32/JavaSecurityLearning/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fcolorfish32%2FJavaSecurityLearning&report=colorfish32+%28user%29
Releaseshttps://github.com/colorfish32/JavaSecurityLearning/releases
Packages 0https://github.com/users/colorfish32/packages?repo_name=JavaSecurityLearning
Please reload this pagehttps://github.com/colorfish32/JavaSecurityLearning/tree/main
Contributorshttps://github.com/colorfish32/JavaSecurityLearning/graphs/contributors
Please reload this pagehttps://github.com/colorfish32/JavaSecurityLearning/tree/main
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.