Skip to content
This repository was archived by the owner on Jul 25, 2024. It is now read-only.

Commit fb86cc3

Browse files
SummerSecSummerSec
committed
HTTPUtils
1 parent c0ccf3f commit fb86cc3

22 files changed

Lines changed: 1206 additions & 129 deletions

‎.idea/artifacts/yaml_payload.xml‎

Lines changed: 14 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎.idea/compiler.xml‎

Lines changed: 3 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎.idea/misc.xml‎

Lines changed: 5 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎README.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,3 +7,8 @@ TODO
77
* 多线程
88
*
99

10+
11+
12+
## 参考项目
13+
14+
https://github.com/woodpecker-appstore/springboot-vuldb

‎SnakeYAML/pom.xml‎

Lines changed: 0 additions & 19 deletions
This file was deleted.

‎SnakeYAML/src/main/java/com/AwesomeScriptEngineFactory.java‎

Lines changed: 0 additions & 92 deletions
This file was deleted.

‎pom.xml‎

Lines changed: 20 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,11 @@
88
<artifactId>SpringBootExploit</artifactId>
99
<packaging>pom</packaging>
1010
<version>1.0-SNAPSHOT</version>
11-
<modules>
12-
<module>SnakeYAML</module>
13-
</modules>
11+
1412

1513
<properties>
16-
<maven.compiler.source>8</maven.compiler.source>
17-
<maven.compiler.target>8</maven.compiler.target>
14+
<maven.compiler.source>6</maven.compiler.source>
15+
<maven.compiler.target>6</maven.compiler.target>
1816
</properties>
1917

2018
<build>
@@ -63,6 +61,11 @@
6361
</build>
6462

6563
<dependencies>
64+
<dependency>
65+
<groupId>com.googlecode.juniversalchardet</groupId>
66+
<artifactId>juniversalchardet</artifactId>
67+
<version>1.0.3</version>
68+
</dependency>
6669
<dependency>
6770
<groupId>javax.servlet.jsp</groupId>
6871
<artifactId>jsp-api</artifactId>
@@ -74,6 +77,7 @@
7477
<artifactId>tomcat-embed-core</artifactId>
7578
<version>9.0.36</version>
7679
</dependency>
80+
7781
<dependency>
7882
<groupId>com.nqzero</groupId>
7983
<artifactId>permit-reflect</artifactId>
@@ -95,11 +99,22 @@
9599
<version>8.0.10</version>
96100
</dependency>
97101

102+
98103
<dependency>
99104
<groupId>org.javassist</groupId>
100105
<artifactId>javassist</artifactId>
101106
<version>3.15.0-GA</version>
102107
</dependency>
108+
<dependency>
109+
<groupId>org.springframework</groupId>
110+
<artifactId>spring-expression</artifactId>
111+
<version>5.3.1</version>
112+
</dependency>
113+
<dependency>
114+
<groupId>com.alibaba</groupId>
115+
<artifactId>fastjson</artifactId>
116+
<version>1.2.73</version>
117+
</dependency>
103118
</dependencies>
104119

105120

‎src/main/java/com/drops/main/main.java‎

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,6 @@
66
import javafx.scene.Scene;
77
import javafx.stage.Stage;
88

9-
import java.io.IOException;
10-
119
public class main extends Application {
1210

1311
public static void main(String[] args) {

‎src/main/java/com/drops/poc/SpringBootInfo.java‎

Lines changed: 91 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,91 @@
1+
package com.drops.poc;
2+
3+
import com.drops.utils.PropertiesBean;
4+
5+
import java.util.ArrayList;
6+
import java.util.HashMap;
7+
import java.util.List;
8+
import java.util.Map;
9+
10+
/**
11+
* @ClassName: SpringBootInfo
12+
* @Description: TODO
13+
* @Author: Summer
14+
* @Date: 2021/7/27 16:58
15+
* @Version: v1.0.0
16+
* @Description: Spring Boot Info
17+
**/
18+
public class SpringBootInfo {
19+
List<String> pointListV1 = new ArrayList<>();
20+
List<String> pointListV2 = new ArrayList<>();
21+
Map<String,String> h2Headers = new HashMap<>();
22+
boolean SpringbootVersionV1 = false;
23+
String[] basicPoint = new String[]{"cloudfoundryapplication","hystrix.stream" };
24+
PropertiesBean properties;
25+
26+
public SpringBootInfo(){
27+
h2Headers.put("Cache-Control", "max-age=0");
28+
29+
pointListV1.add("autoconfig");
30+
pointListV1.add("heapdump");
31+
pointListV1.add("dump");
32+
pointListV1.add("mappings");
33+
pointListV1.add("auditevents");
34+
pointListV1.add("beans");
35+
pointListV1.add("health");
36+
pointListV1.add("configprops");
37+
pointListV1.add("info");
38+
pointListV1.add("loggers");
39+
pointListV1.add("threaddump");
40+
pointListV1.add("metrics");
41+
pointListV1.add("trace");
42+
pointListV1.add("env/spring.jmx.enabled");
43+
44+
45+
46+
pointListV2.add("actuator/auditevents");
47+
pointListV2.add("actuator/beans");
48+
pointListV2.add("actuator/health");
49+
pointListV2.add("actuator/conditions");
50+
pointListV2.add("actuator/configprops");
51+
pointListV2.add("actuator/info");
52+
pointListV2.add("actuator/loggers");
53+
pointListV2.add("actuator/threaddump");
54+
pointListV2.add("actuator/metrics");
55+
pointListV2.add("actuator/httptrace");
56+
pointListV2.add("actuator/mappings");
57+
pointListV2.add("actuator/jolokia");
58+
pointListV2.add("actuator/hystrix.stream");
59+
pointListV2.add("actuator/env/spring.jmx.enabled");
60+
61+
pointListV2.add("monitor/auditevents");
62+
pointListV2.add("monitor/beans");
63+
pointListV2.add("monitor/conditions");
64+
pointListV2.add("monitor/configprops");
65+
pointListV2.add("monitor/env");
66+
pointListV2.add("monitor/info");
67+
pointListV2.add("monitor/loggers");
68+
pointListV2.add("monitor/heapdump");
69+
pointListV2.add("monitor/threaddump");
70+
pointListV2.add("monitor/metrics");
71+
pointListV2.add("monitor/scheduledtasks");
72+
pointListV2.add("monitor/httptrace");
73+
pointListV2.add("monitor/mappings");
74+
pointListV2.add("monitor/jolokia");
75+
pointListV2.add("monitor/hystrix.stream");
76+
}
77+
78+
79+
80+
81+
private void parseProperties(PropertiesBean properties){
82+
if (properties.getHaveInfo()){
83+
System.out.println("\tJVM信息:\t\t"+properties.getJvmName());
84+
System.out.println("\t端口信息:\t\t"+properties.getServerPort());
85+
System.out.println("\tJava版本:\t\t"+properties.getJavaVersion());
86+
System.out.println("\t用户名:\t\t"+properties.getUserName());
87+
}
88+
}
89+
90+
91+
}

‎src/main/java/com/drops/poc/SpringBootInfoCheck.java‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
package com.drops.poc;
2+
3+
import com.drops.ui.MainController;
4+
5+
/**
6+
* @ClassName: SpringBootInfoCheck
7+
* @Description: TODO
8+
* @Author: Summer
9+
* @Date: 2021/7/28 9:23
10+
* @Version: v1.0.0
11+
* @Description:
12+
**/
13+
public class SpringBootInfoCheck {
14+
public String url;
15+
public String method;
16+
public Integer timeout;
17+
private MainController mainController;
18+
private static final String DefalutEncoding = "UTF-8";
19+
20+
21+
public SpringBootInfoCheck(){}
22+
23+
public void CheckPointInfo(String target, String method, Integer timeout){
24+
25+
26+
}
27+
// Spring Boot env端点存在环境属性覆盖和XStream反序列化漏洞
28+
public void checkEnvPointV1(String target ){
29+
30+
}
31+
32+
33+
34+
35+
36+
}

0 commit comments

Comments
 (0)