René's URL Explorer Experiment


Title: :new:EL表达式注入 · tipcake/JavaSecurityLearning@a044522 · GitHub

Open Graph Title: :new:EL表达式注入 · tipcake/JavaSecurityLearning@a044522

X Title: :new:EL表达式注入 · tipcake/JavaSecurityLearning@a044522

Description: 记录一下 Java 安全学习历程，也算是半条学习路线了. Contribute to tipcake/JavaSecurityLearning development by creating an account on GitHub.

Opengraph URL: /tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/commit/:name(/*path)
route-controllercommit
route-actionshow
fetch-noncev2:6301ac0a-a1b9-8753-dc4e-1c92046f0e01
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idD7C0:24384D:2F56B98:3F5A17E:6A653129
html-safe-nonce78040e62883fe02f8ee3d143bbfc67c087885c0e7eef2a6a2c4c3c5d56da54a8
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEN0MwOjI0Mzg0RDoyRjU2Qjk4OjNGNUExN0U6NkE2NTMxMjkiLCJ2aXNpdG9yX2lkIjoiNjM1NDE2NDAwMDY2MDY0NjgxIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmacbe57c64ef5db946cb55bb6fa6b60bdb93a747c17b5ea4f35005ccb5975b2d18a
hovercard-subject-tagrepository:615604185
github-keyboard-shortcutsrepository,commits,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///commit/show
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192
twitter:imagehttps://opengraph.githubassets.com/7e316f0fbe7515c3b07f9e6d02fd98814a7b5cb3fc7ab387b0cc43625fad64ef/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/7e316f0fbe7515c3b07f9e6d02fd98814a7b5cb3fc7ab387b0cc43625fad64ef/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:updated_time1664183281
hostnamegithub.com
expected-hostnamegithub.com
None52c76df668885aaff23b50bdca1fa1ea44ac9c1553e888ebc70ff1e4daa4625b
turbo-cache-controlno-cache
go-importgithub.com/tipcake/JavaSecurityLearning git https://github.com/tipcake/JavaSecurityLearning.git
octolytics-dimension-user_id110111562
octolytics-dimension-user_logintipcake
octolytics-dimension-repository_id615604185
octolytics-dimension-repository_nwotipcake/JavaSecurityLearning
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id512705272
octolytics-dimension-repository_parent_nwoDrun1baby/JavaSecurityLearning
octolytics-dimension-repository_network_root_id512705272
octolytics-dimension-repository_network_root_nwoDrun1baby/JavaSecurityLearning
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release309153364422b3c499922d1a2a6404910a58ed8e
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Ftipcake%2FJavaSecurityLearning%2Fcommit%2Fa0445222a79b6e0b466a6887af73f486e918f192
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
Code QualityEnforce quality at mergehttps://github.com/features/code-quality
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Ftipcake%2FJavaSecurityLearning%2Fcommit%2Fa0445222a79b6e0b466a6887af73f486e918f192
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fcommit%2Fshow&source=header-repo&source_repo=tipcake%2FJavaSecurityLearning
Reloadhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192
Reloadhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192
Reloadhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192
tipcake https://github.com/tipcake
JavaSecurityLearninghttps://github.com/tipcake/JavaSecurityLearning
Drun1baby/JavaSecurityLearninghttps://github.com/Drun1baby/JavaSecurityLearning
Notifications https://github.com/login?return_to=%2Ftipcake%2FJavaSecurityLearning
Fork 0 https://github.com/login?return_to=%2Ftipcake%2FJavaSecurityLearning
Star 0 https://github.com/login?return_to=%2Ftipcake%2FJavaSecurityLearning
Code https://github.com/tipcake/JavaSecurityLearning
Pull requests 0 https://github.com/tipcake/JavaSecurityLearning/pulls
Actions https://github.com/tipcake/JavaSecurityLearning/actions
Projects https://github.com/tipcake/JavaSecurityLearning/projects
Security and quality 0 https://github.com/tipcake/JavaSecurityLearning/security
Insights https://github.com/tipcake/JavaSecurityLearning/pulse
Code https://github.com/tipcake/JavaSecurityLearning
Pull requests https://github.com/tipcake/JavaSecurityLearning/pulls
Actions https://github.com/tipcake/JavaSecurityLearning/actions
Projects https://github.com/tipcake/JavaSecurityLearning/projects
Security and quality https://github.com/tipcake/JavaSecurityLearning/security
Insights https://github.com/tipcake/JavaSecurityLearning/pulse
Browse fileshttps://github.com/tipcake/JavaSecurityLearning/tree/a0445222a79b6e0b466a6887af73f486e918f192
https://github.com/tipcake/JavaSecurityLearning/tree/a0445222a79b6e0b466a6887af73f486e918f192
https://github.com/Drun1baby
Drun1babyhttps://github.com/tipcake/JavaSecurityLearning/commits?author=Drun1baby
96f0894https://github.com/tipcake/JavaSecurityLearning/commit/96f08949b5976f907772c0315bf213a0b185dc52
BasicELVul.imlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-6ddfffa004363c8577753e88cea1fc3ec1e9998799c2b9ca228b8615f6f9e66d
pom.xmlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-c29acf2362bb2a945ddf52af10349033b64761e59a4e6ca1991bd4d17f00979d
HelloServlet.javahttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-d7df5bb44e52ee95e1cae9a1064fa84c9948d203310f19141c6210edfa80aafe
ScriptEngineExec.javahttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-dfa0fedf019615e3760f4f8d12ea1e7e663e0f7788755a36314c8f5b565965a8
juelExec.javahttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-662e50258085d006628f5217b87d38b40ee5bda6b7a181e053352a1c77feced1
BasicVul.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-dd871a2b5fcf62fbbd330390c299d30286963afdaed9664ad907d075f30e78f4
web.xmlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-710ee066043c9ad29c126dbd6466aa7ed880ff0e31abf3a3c2407849bd244221
index.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-6b4e1bf766f67f651f249d832c0424ced8278d02ed814e327b7c471b0fb65a3c
tag.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-505bb8241ea637de4969467f454e14f3adabdbbe7699cce55b3f763e2266cfbe
BasicVul.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-1b0213348378114db93bdbcdb4f3dacceef4ce58ce61e4adf66058a42a5e861f
MANIFEST.MFhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-617c71534f5d8ef3743819df148827953f81cdbc1cdc7618b8cd67cd4c27a2c7
HelloServlet.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-b563ccc7fa125de75e6364f119118ae96a5202ee59932c0df97caa1843304575
web.xmlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-49c68222d470c925788e3d84fe3ca3ad0f48c461e1a60319174993420152997d
index.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-f7a30a9647a8b6392b15bc0d3843973213f2cc847dbf6b85f3d7377487ac6532
spring-EL-CVE.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-189884e6dc91ce2731a2c2d4f1c8aeaf879062dc43787bef840826a0e1cb4c36
HelloServlet.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-bd1a0c934305c94232bc7390e4f31783f23a89cc450379be9ed4ff7ddbccbe61
ScriptEngineExec.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-636b2165f5705b0c64d9a6bdebbd6cf9ab4b488cbc07bb6cfe8d2d979a1e3244
juelExec.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-4e8f27af3f8e9b2f1a6883bf56c2f1b10b0f2c2211d67541cc333c6c1639f7d2
BasicJsp.imlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-50d3e2b5008e0f9c62172aba13ef80bc953d5c37615b7515efbaf3ce5034ca7f
pom.xmlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-7af9c1eba30c624b83aa48954e5f40e926aea95589ec1c5d18c0f4437a6ad050
Site.javahttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-6f80c816e72215a45cd46b54d6c206521f3523bb2641564c30803edb94a8e577
ELFunc.javahttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-abf7236a2383754b3a72e34df37c7d78e43e766013b9d02494106e3d7b140188
test.tldhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-2e41739a3aa98807ec3018912da18e59a3605226043f266d2883f4bd56905468
web.xmlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-877d3fafd5eb0c9c264a45e091ceeabb15d7f3c0bcfb7e56678cd8a9e1864684
ban.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-8e5471312d1a363954f395b698562d1c55619f7a2fd8b1c7a6fd96433733cf40
javaMethod.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-d1c2b4507003580687aaeff30b85eee5cbebb8086ebda4d0dbbe8fd02767a7c1
object.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-0c770b02eca7dbfe39ec9181bb15f2f3b73864cb44b648388ed2bf6e91ceb201
operator.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-d6c772c37a2cec7b25053e888fe1d608ed1fa689083adb6d09c20abc2cf73677
Site.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-de86254e9f2d734b4c685d16efa8dd3eedcb172aafb8a57d50f64e9fb32cabef
ELFunc.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-86be1e9bda64fe2374f439071c3669dd53330a28bb1e5ce5a9d9a683e9e13333
test.tldhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-a518d6e6bd756c35f46a63fa128f904b2c00ed57c5c1ae6695ad24614c0b2106
web.xmlhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-b23a26938cfb739d8157c625d90fce559fb3182fc005dffbccde62bb1dffeeb9
ban.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-3724ddb40387d74c93e76ec7de25bf5b796c47b6c213d45e6c3b07ef295924eb
el-demo.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-c8edbfbd6e090676cb30061eb5be26d6c91bc41fb5b12780dd7d26c870f54db7
javaMethod.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-18e8a8eb6b93e7517093e262b19a7306b66aeae0d8bfbfc3a546206f34735163
object.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-001e652041ddc1923a7b1317299e007f8aa19638d80b54e9af596fbd2d006cb0
operator.jsphttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-3d7349ebe4e9c2d3e4ac4b357148bccee56e914d203dda1051879fe25ed6f892
Site.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-de487f122c6b2797c82271350524602f053ac593dce24d82ee4dfb5666397ba2
ELFunc.classhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-45a2674fa7db397019343f6e571112d02b9561513ddcfdd632141da737adfcb6
README.mdhttps://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5
‎JavaSecurity/EL/BasicELVul/BasicELVul.iml‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-6ddfffa004363c8577753e88cea1fc3ec1e9998799c2b9ca228b8615f6f9e66d
‎JavaSecurity/EL/BasicELVul/pom.xml‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-c29acf2362bb2a945ddf52af10349033b64761e59a4e6ca1991bd4d17f00979d
‎JavaSecurity/EL/BasicELVul/src/main/java/drunkbaby/basicelvul/HelloServlet.java‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-d7df5bb44e52ee95e1cae9a1064fa84c9948d203310f19141c6210edfa80aafe
‎JavaSecurity/EL/BasicELVul/src/main/java/drunkbaby/basicelvul/ScriptEngineExec.java‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-dfa0fedf019615e3760f4f8d12ea1e7e663e0f7788755a36314c8f5b565965a8
‎JavaSecurity/EL/BasicELVul/src/main/java/drunkbaby/basicelvul/juelExec.java‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-662e50258085d006628f5217b87d38b40ee5bda6b7a181e053352a1c77feced1
‎JavaSecurity/EL/BasicELVul/src/main/webapp/BasicVul.jsp‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-dd871a2b5fcf62fbbd330390c299d30286963afdaed9664ad907d075f30e78f4
‎JavaSecurity/EL/BasicELVul/src/main/webapp/WEB-INF/web.xml‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-710ee066043c9ad29c126dbd6466aa7ed880ff0e31abf3a3c2407849bd244221
‎JavaSecurity/EL/BasicELVul/src/main/webapp/index.jsp‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-6b4e1bf766f67f651f249d832c0424ced8278d02ed814e327b7c471b0fb65a3c
‎JavaSecurity/EL/BasicELVul/src/main/webapp/tag.jsp‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-505bb8241ea637de4969467f454e14f3adabdbbe7699cce55b3f763e2266cfbe
‎JavaSecurity/EL/BasicELVul/target/BasicELVul-1.0-SNAPSHOT/BasicVul.jsp‎https://github.com/tipcake/JavaSecurityLearning/commit/a0445222a79b6e0b466a6887af73f486e918f192#diff-1b0213348378114db93bdbcdb4f3dacceef4ce58ce61e4adf66058a42a5e861f
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.