An open API service indexing awesome lists of open source software.

https://github.com/threezh1/java-security

存放了学习JAVA过程中总结的笔记以及程序例子。Stored notes and program examples summarized in the process of learning JAVA.
https://github.com/threezh1/java-security

Last synced: about 1 year ago
JSON representation

存放了学习JAVA过程中总结的笔记以及程序例子。Stored notes and program examples summarized in the process of learning JAVA.

Awesome Lists containing this project

README

          

# java-security

存放了学习JAVA过程中总结的笔记以及程序例子

Stored notes and program examples summarized in the process of learning JAVA

## JAVA学习总结文章

- [JAVA反序列化 & Commons-Collections-3.1 反序列化分析](https://threezh1.com/2020/12/10/JAVA%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%9F%BA%E7%A1%80_CommonCollection31%E5%88%86%E6%9E%90/)
- [JAVA RMI 反序列化攻击 & JEP290 Bypass分析](https://threezh1.com/2020/12/19/JAVA_RMI_Learn/)
- [JAVA JNDI注入基础与高版本限制绕过](https://threezh1.com/2021/01/02/JAVA_JNDI_Learn/)

## 代码库

- java_web_learn 原来《JAVA WEB安全》的几个源码
- java_unserialize 反序列化
- Commons_collection3_1 Commons_collection3.1反序列化例子
- SimpleProxy 静态代理和动态代理
- SimpleRMI_1 使用Naming的RMI
- SimpleRMI_2 使用Registry的RMI
- SimpleRMI_3 RMI反序列化攻击所用的例子
- SimpleRMI_DiyStubAndSkeleton 自定义的Stub和Skeleton
- java_jep290 RMI攻击Bypass jep290限制
- java_jndi 基础例子与JNDI注入