mirror of
https://github.com/elicpeter/nyx.git
synced 2026-06-09 19:45:13 +02:00
49 lines
1.4 KiB
Java
49 lines
1.4 KiB
Java
|
import java.io.*;
|
||
|
|
import java.util.Random;
|
||
|
|
import java.security.MessageDigest;
|
||
|
|
|
||
|
|
class Positive {
|
||
|
|
// java.deser.readobject
|
||
|
|
void triggerDeser(InputStream is) throws Exception {
|
||
|
|
ObjectInputStream ois = new ObjectInputStream(is);
|
||
|
|
Object obj = ois.readObject();
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.cmdi.runtime_exec
|
||
|
|
void triggerRuntimeExec(String cmd) throws Exception {
|
||
|
|
Runtime.getRuntime().exec(cmd);
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.reflection.class_forname
|
||
|
|
void triggerClassForName(String name) throws Exception {
|
||
|
|
Class.forName(name);
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.reflection.method_invoke
|
||
|
|
void triggerMethodInvoke(Object target) throws Exception {
|
||
|
|
java.lang.reflect.Method m = target.getClass().getMethod("run");
|
||
|
|
m.invoke(target);
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.sqli.execute_concat
|
||
|
|
void triggerSqlConcat(java.sql.Statement stmt, String user) throws Exception {
|
||
|
|
stmt.executeQuery("SELECT * FROM users WHERE name = '" + user + "'");
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.crypto.insecure_random
|
||
|
|
void triggerInsecureRandom() {
|
||
|
|
Random r = new Random();
|
||
|
|
int token = r.nextInt();
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.crypto.weak_digest
|
||
|
|
void triggerWeakDigest() throws Exception {
|
||
|
|
MessageDigest md = MessageDigest.getInstance("MD5");
|
||
|
|
}
|
||
|
|
|
||
|
|
// java.xss.getwriter_print
|
||
|
|
void triggerGetWriterPrint(javax.servlet.http.HttpServletResponse resp) throws Exception {
|
||
|
|
resp.getWriter().println("<html>" + "data" + "</html>");
|
||
|
|
}
|
||
|
|
}
|