Code Monkey home page Code Monkey logo

javasec's Introduction

JavaSec

Java Security Coding Memory by Boogpop

  • Templates
  • Pocs
  • SerializeUtils
  • GUI (developing)
  • CLI (developing)

0、aspectjweaver

任意文件写入

1、Hessian

内涵Hessian反序列化所有利用链

  • Xbean
  • Resin
  • LazyValue*N
  • Jackson/Fastjson
  • springaop
  • ProxyLazyValue*N

2、CommonCollections

CommonCollections1-11+几条野链+二次

  • CC1-11
  • CCD1
  • RMI二次反序列化

3、CommonBeantuils

  • CB1
  • CB2

4、Fastjson/Jackson

蕴含fastjson/jackson的所有getter chain

  • Ldap JNDI
  • Templates
  • Signobject二次
  • Tostring 所有起点

5、Rhino

  • Rhino1
  • Rhino2

6、Rome

Rome反序列化所有反序列化链及其变种、总共七条。

7、Hibernate

  • Hibernate1
  • Hibernate2

8、JDBC-Attack

所有类型的JDBC漏洞

  • Mysql
  • postgresql
  • IBM DB2
  • Derby
  • Modeshape
  • Sqlite (unfinished)
  • H2

9、CTF Java Writeup

有一些CTF比赛中的Java题解在里面

10、Serialize&&Reflection Utils

蕴含一些轮子

11、Memshell

暂时还未完全覆盖。

  • Tomcat(servlet、filter)
  • Spring(controller、interceptor)
  • Nacos
  • Http

javasec's People

Contributors

boogipop avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar

Forkers

zhenrenbumeng

javasec's Issues

hessian xslt 链反序列化报错

E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\bin\java.exe "-javaagent:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\lib\idea_rt.jar=3686:C:\Program Files\JetBrains\IntelliJ IDEA 2023.3.2\bin" -Dfile.encoding=UTF-8 -classpath E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\charsets.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\access-bridge-64.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\cldrdata.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\dnsns.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\jaccess.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\localedata.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\nashorn.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\sunec.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\sunjce_provider.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\sunmscapi.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\sunpkcs11.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\ext\zipfs.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\jce.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\jsse.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\management-agent.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\resources.jar;E:\jdk\java-1.8.0-openjdk-1.8.0.161-1.b14.ojdkbuild.windows.x86_64\jre\lib\rt.jar;D:\workspace\JavaSec\target\classes;C:\Users\admin.m2\repository\io\minio\minio\8.3.3\minio-8.3.3.jar;C:\Users\admin.m2\repository\com\carrotsearch\thirdparty\simple-xml-safe\2.7.1\simple-xml-safe-2.7.1.jar;C:\Users\admin.m2\repository\com\google\guava\guava\30.1.1-jre\guava-30.1.1-jre.jar;C:\Users\admin.m2\repository\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar;C:\Users\admin.m2\repository\com\google\guava\listenablefuture\9999.0-empty-to-avoid-conflict-with-guava\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\admin.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar;C:\Users\admin.m2\repository\com\google\errorprone\error_prone_annotations\2.5.1\error_prone_annotations-2.5.1.jar;C:\Users\admin.m2\repository\com\google\j2objc\j2objc-annotations\1.3\j2objc-annotations-1.3.jar;C:\Users\admin.m2\repository\com\squareup\okhttp3\okhttp\4.8.1\okhttp-4.8.1.jar;C:\Users\admin.m2\repository\com\squareup\okio\okio\2.7.0\okio-2.7.0.jar;C:\Users\admin.m2\repository\org\jetbrains\kotlin\kotlin-stdlib-common\1.3.70\kotlin-stdlib-common-1.3.70.jar;C:\Users\admin.m2\repository\org\jetbrains\kotlin\kotlin-stdlib\1.3.72\kotlin-stdlib-1.3.72.jar;C:\Users\admin.m2\repository\org\jetbrains\annotations\13.0\annotations-13.0.jar;C:\Users\admin.m2\repository\com\fasterxml\jackson\core\jackson-annotations\2.11.2\jackson-annotations-2.11.2.jar;C:\Users\admin.m2\repository\com\fasterxml\jackson\core\jackson-core\2.11.2\jackson-core-2.11.2.jar;C:\Users\admin.m2\repository\com\fasterxml\jackson\core\jackson-databind\2.11.2\jackson-databind-2.11.2.jar;C:\Users\admin.m2\repository\org\bouncycastle\bcprov-jdk15on\1.69\bcprov-jdk15on-1.69.jar;C:\Users\admin.m2\repository\com\thoughtworks\xstream\xstream\1.4.16\xstream-1.4.16.jar;C:\Users\admin.m2\repository\io\github\x-stream\mxparser\1.2.1\mxparser-1.2.1.jar;C:\Users\admin.m2\repository\xmlpull\xmlpull\1.1.3.1\xmlpull-1.1.3.1.jar;C:\Users\admin.m2\repository\com\caucho\resin\4.0.64\resin-4.0.64.jar;C:\Users\admin.m2\repository\com\caucho\javaee-16\4.0.64\javaee-16-4.0.64.jar;C:\Users\admin.m2\repository\com\caucho\quercus\4.0.64\quercus-4.0.64.jar;C:\Users\admin.m2\repository\javax\activation\activation\1.1\activation-1.1.jar;C:\Users\admin.m2\repository\javax\mail\mail\1.4.1\mail-1.4.1.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-starter-web\2.6.7\spring-boot-starter-web-2.6.7.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-starter\2.6.7\spring-boot-starter-2.6.7.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot\2.6.7\spring-boot-2.6.7.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-autoconfigure\2.6.7\spring-boot-autoconfigure-2.6.7.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-starter-logging\2.6.7\spring-boot-starter-logging-2.6.7.jar;C:\Users\admin.m2\repository\ch\qos\logback\logback-classic\1.2.11\logback-classic-1.2.11.jar;C:\Users\admin.m2\repository\ch\qos\logback\logback-core\1.2.11\logback-core-1.2.11.jar;C:\Users\admin.m2\repository\org\apache\logging\log4j\log4j-to-slf4j\2.17.2\log4j-to-slf4j-2.17.2.jar;C:\Users\admin.m2\repository\org\apache\logging\log4j\log4j-api\2.17.2\log4j-api-2.17.2.jar;C:\Users\admin.m2\repository\org\slf4j\jul-to-slf4j\1.7.36\jul-to-slf4j-1.7.36.jar;C:\Users\admin.m2\repository\jakarta\annotation\jakarta.annotation-api\1.3.5\jakarta.annotation-api-1.3.5.jar;C:\Users\admin.m2\repository\org\yaml\snakeyaml\1.29\snakeyaml-1.29.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-starter-tomcat\2.6.7\spring-boot-starter-tomcat-2.6.7.jar;C:\Users\admin.m2\repository\org\apache\tomcat\embed\tomcat-embed-el\9.0.62\tomcat-embed-el-9.0.62.jar;C:\Users\admin.m2\repository\org\apache\tomcat\embed\tomcat-embed-websocket\9.0.62\tomcat-embed-websocket-9.0.62.jar;C:\Users\admin.m2\repository\org\springframework\spring-web\5.3.19\spring-web-5.3.19.jar;C:\Users\admin.m2\repository\org\springframework\spring-webmvc\5.3.19\spring-webmvc-5.3.19.jar;C:\Users\admin.m2\repository\commons-collections\commons-collections\3.2.2\commons-collections-3.2.2.jar;C:\Users\admin.m2\repository\commons-logging\commons-logging\1.2\commons-logging-1.2.jar;C:\Users\admin.m2\repository\org\apache\commons\commons-collections4\4.0\commons-collections4-4.0.jar;C:\Users\admin.m2\repository\org\springframework\spring-core\4.1.3.RELEASE\spring-core-4.1.3.RELEASE.jar;C:\Users\admin.m2\repository\commons-beanutils\commons-beanutils\1.9.0\commons-beanutils-1.9.0.jar;C:\Users\admin.m2\repository\org\springframework\spring-beans\4.1.3.RELEASE\spring-beans-4.1.3.RELEASE.jar;C:\Users\admin.m2\repository\org\apache\shiro\shiro-core\1.2.4\shiro-core-1.2.4.jar;C:\Users\admin.m2\repository\org\slf4j\slf4j-api\1.6.4\slf4j-api-1.6.4.jar;C:\Users\admin.m2\repository\org\apache\flex\blazeds\flex-messaging-common\4.8.0\flex-messaging-common-4.8.0.jar;C:\Users\admin.m2\repository\org\apache\flex\blazeds\flex-messaging-core\4.8.0\flex-messaging-core-4.8.0.jar;C:\Users\admin.m2\repository\com\rometools\rome\2.1.0\rome-2.1.0.jar;C:\Users\admin.m2\repository\com\rometools\rome-utils\2.1.0\rome-utils-2.1.0.jar;C:\Users\admin.m2\repository\org\jdom\jdom2\2.0.6.1\jdom2-2.0.6.1.jar;C:\Users\admin.m2\repository\rome\rome\1.0\rome-1.0.jar;C:\Users\admin.m2\repository\jdom\jdom\1.0\jdom-1.0.jar;C:\Users\admin.m2\repository\org\springframework\spring-aop\5.0.0.RELEASE\spring-aop-5.0.0.RELEASE.jar;C:\Users\admin.m2\repository\org\postgresql\postgresql\42.3.1\postgresql-42.3.1.jar;C:\Users\admin.m2\repository\org\checkerframework\checker-qual\3.5.0\checker-qual-3.5.0.jar;C:\Users\admin.m2\repository\com\google\code\gson\gson\2.10.1\gson-2.10.1.jar;C:\Users\admin.m2\repository\com\ibm\db2\jcc\11.5.0.0\jcc-11.5.0.0.jar;C:\Users\admin.m2\repository\org\apache\derby\derby\10.10.1.1\derby-10.10.1.1.jar;C:\Users\admin.m2\repository\org\modeshape\modeshape-jdbc\5.4.1.Final\modeshape-jdbc-5.4.1.Final.jar;C:\Users\admin.m2\repository\org\modeshape\modeshape-common\5.4.1.Final\modeshape-common-5.4.1.Final.jar;C:\Users\admin.m2\repository\org\modeshape\modeshape-jcr-api\5.4.1.Final\modeshape-jcr-api-5.4.1.Final.jar;C:\Users\admin.m2\repository\org\modeshape\modeshape-jdbc-local\5.4.1.Final\modeshape-jdbc-local-5.4.1.Final.jar;C:\Users\admin.m2\repository\org\codehaus\jettison\jettison\1.3.3\jettison-1.3.3.jar;C:\Users\admin.m2\repository\org\apache\httpcomponents\httpcore\4.4\httpcore-4.4.jar;C:\Users\admin.m2\repository\org\apache\httpcomponents\httpclient\4.4\httpclient-4.4.jar;C:\Users\admin.m2\repository\commons-codec\commons-codec\1.9\commons-codec-1.9.jar;C:\Users\admin.m2\repository\com\h2database\h2\1.4.191\h2-1.4.191.jar;C:\Users\admin.m2\repository\com\alibaba\fastjson\1.2.43\fastjson-1.2.43.jar;C:\Users\admin.m2\repository\org\aspectj\aspectjweaver\1.9.2\aspectjweaver-1.9.2.jar;C:\Users\admin.m2\repository\org\springframework\spring-context\4.1.3.RELEASE\spring-context-4.1.3.RELEASE.jar;C:\Users\admin.m2\repository\org\springframework\spring-expression\4.1.3.RELEASE\spring-expression-4.1.3.RELEASE.jar;C:\Users\admin.m2\repository\mysql\mysql-connector-java\8.0.19\mysql-connector-java-8.0.19.jar;C:\Users\admin.m2\repository\com\google\protobuf\protobuf-java\3.6.1\protobuf-java-3.6.1.jar;C:\Users\admin.m2\repository\com\caucho\hessian\4.0.63\hessian-4.0.63.jar;C:\Users\admin.m2\repository\org\springdoc\springdoc-openapi-ui\1.6.14\springdoc-openapi-ui-1.6.14.jar;C:\Users\admin.m2\repository\org\springdoc\springdoc-openapi-webmvc-core\1.6.14\springdoc-openapi-webmvc-core-1.6.14.jar;C:\Users\admin.m2\repository\org\springdoc\springdoc-openapi-common\1.6.14\springdoc-openapi-common-1.6.14.jar;C:\Users\admin.m2\repository\io\swagger\core\v3\swagger-core\2.2.7\swagger-core-2.2.7.jar;C:\Users\admin.m2\repository\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar;C:\Users\admin.m2\repository\com\fasterxml\jackson\dataformat\jackson-dataformat-yaml\2.14.0\jackson-dataformat-yaml-2.14.0.jar;C:\Users\admin.m2\repository\com\fasterxml\jackson\datatype\jackson-datatype-jsr310\2.14.0\jackson-datatype-jsr310-2.14.0.jar;C:\Users\admin.m2\repository\io\swagger\core\v3\swagger-annotations\2.2.7\swagger-annotations-2.2.7.jar;C:\Users\admin.m2\repository\io\swagger\core\v3\swagger-models\2.2.7\swagger-models-2.2.7.jar;C:\Users\admin.m2\repository\jakarta\validation\jakarta.validation-api\2.0.2\jakarta.validation-api-2.0.2.jar;C:\Users\admin.m2\repository\org\webjars\swagger-ui\4.15.5\swagger-ui-4.15.5.jar;C:\Users\admin.m2\repository\org\webjars\webjars-locator-core\0.52\webjars-locator-core-0.52.jar;C:\Users\admin.m2\repository\io\github\classgraph\classgraph\4.8.149\classgraph-4.8.149.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-starter-test\2.7.14\spring-boot-starter-test-2.7.14.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-test\2.7.14\spring-boot-test-2.7.14.jar;C:\Users\admin.m2\repository\org\springframework\boot\spring-boot-test-autoconfigure\2.7.14\spring-boot-test-autoconfigure-2.7.14.jar;C:\Users\admin.m2\repository\com\jayway\jsonpath\json-path\2.7.0\json-path-2.7.0.jar;C:\Users\admin.m2\repository\net\minidev\json-smart\2.4.7\json-smart-2.4.7.jar;C:\Users\admin.m2\repository\net\minidev\accessors-smart\2.4.7\accessors-smart-2.4.7.jar;C:\Users\admin.m2\repository\org\ow2\asm\asm\9.1\asm-9.1.jar;C:\Users\admin.m2\repository\jakarta\xml\bind\jakarta.xml.bind-api\2.3.3\jakarta.xml.bind-api-2.3.3.jar;C:\Users\admin.m2\repository\jakarta\activation\jakarta.activation-api\1.2.2\jakarta.activation-api-1.2.2.jar;C:\Users\admin.m2\repository\org\assertj\assertj-core\3.22.0\assertj-core-3.22.0.jar;C:\Users\admin.m2\repository\org\hamcrest\hamcrest\2.2\hamcrest-2.2.jar;C:\Users\admin.m2\repository\org\junit\jupiter\junit-jupiter\5.8.2\junit-jupiter-5.8.2.jar;C:\Users\admin.m2\repository\org\junit\jupiter\junit-jupiter-api\5.8.2\junit-jupiter-api-5.8.2.jar;C:\Users\admin.m2\repository\org\opentest4j\opentest4j\1.2.0\opentest4j-1.2.0.jar;C:\Users\admin.m2\repository\org\junit\platform\junit-platform-commons\1.8.2\junit-platform-commons-1.8.2.jar;C:\Users\admin.m2\repository\org\apiguardian\apiguardian-api\1.1.2\apiguardian-api-1.1.2.jar;C:\Users\admin.m2\repository\org\junit\jupiter\junit-jupiter-params\5.8.2\junit-jupiter-params-5.8.2.jar;C:\Users\admin.m2\repository\org\junit\jupiter\junit-jupiter-engine\5.8.2\junit-jupiter-engine-5.8.2.jar;C:\Users\admin.m2\repository\org\junit\platform\junit-platform-engine\1.8.2\junit-platform-engine-1.8.2.jar;C:\Users\admin.m2\repository\org\mockito\mockito-core\4.5.1\mockito-core-4.5.1.jar;C:\Users\admin.m2\repository\net\bytebuddy\byte-buddy\1.12.9\byte-buddy-1.12.9.jar;C:\Users\admin.m2\repository\net\bytebuddy\byte-buddy-agent\1.12.9\byte-buddy-agent-1.12.9.jar;C:\Users\admin.m2\repository\org\objenesis\objenesis\3.2\objenesis-3.2.jar;C:\Users\admin.m2\repository\org\mockito\mockito-junit-jupiter\4.5.1\mockito-junit-jupiter-4.5.1.jar;C:\Users\admin.m2\repository\org\skyscreamer\jsonassert\1.5.1\jsonassert-1.5.1.jar;C:\Users\admin.m2\repository\com\vaadin\external\google\android-json\0.0.20131108.vaadin1\android-json-0.0.20131108.vaadin1.jar;C:\Users\admin.m2\repository\org\springframework\spring-test\5.3.29\spring-test-5.3.29.jar;C:\Users\admin.m2\repository\org\xmlunit\xmlunit-core\2.9.1\xmlunit-core-2.9.1.jar;C:\Users\admin.m2\repository\javassist\javassist\3.12.1.GA\javassist-3.12.1.GA.jar;C:\Users\admin.m2\repository\org\apache\tomcat\embed\tomcat-embed-core\9.0.55\tomcat-embed-core-9.0.55.jar;C:\Users\admin.m2\repository\org\apache\tomcat\tomcat-annotations-api\9.0.55\tomcat-annotations-api-9.0.55.jar;C:\Users\admin.m2\repository\org\hibernate\hibernate-core\4.3.11.Final\hibernate-core-4.3.11.Final.jar;C:\Users\admin.m2\repository\org\jboss\logging\jboss-logging\3.1.3.GA\jboss-logging-3.1.3.GA.jar;C:\Users\admin.m2\repository\org\jboss\logging\jboss-logging-annotations\1.2.0.Beta1\jboss-logging-annotations-1.2.0.Beta1.jar;C:\Users\admin.m2\repository\org\jboss\spec\javax\transaction\jboss-transaction-api_1.2_spec\1.0.0.Final\jboss-transaction-api_1.2_spec-1.0.0.Final.jar;C:\Users\admin.m2\repository\dom4j\dom4j\1.6.1\dom4j-1.6.1.jar;C:\Users\admin.m2\repository\xml-apis\xml-apis\1.0.b2\xml-apis-1.0.b2.jar;C:\Users\admin.m2\repository\org\hibernate\common\hibernate-commons-annotations\4.0.5.Final\hibernate-commons-annotations-4.0.5.Final.jar;C:\Users\admin.m2\repository\org\hibernate\javax\persistence\hibernate-jpa-2.1-api\1.0.0.Final\hibernate-jpa-2.1-api-1.0.0.Final.jar;C:\Users\admin.m2\repository\org\javassist\javassist\3.18.1-GA\javassist-3.18.1-GA.jar;C:\Users\admin.m2\repository\antlr\antlr\2.7.7\antlr-2.7.7.jar;C:\Users\admin.m2\repository\org\jboss\jandex\1.1.0.Final\jandex-1.1.0.Final.jar;C:\Users\admin.m2\repository\rhino\js\1.7R2\js-1.7R2.jar;C:\Users\admin.m2\repository\javax\jcr\jcr\2.0\jcr-2.0.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-jcr-rmi\2.21.10\jackrabbit-jcr-rmi-2.21.10.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-jcr2dav\2.0-beta6\jackrabbit-jcr2dav-2.0-beta6.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-jcr2spi\2.0-beta6\jackrabbit-jcr2spi-2.0-beta6.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-spi\2.0-beta6\jackrabbit-spi-2.0-beta6.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-spi-commons\2.0-beta6\jackrabbit-spi-commons-2.0-beta6.jar;C:\Users\admin.m2\repository\commons-io\commons-io\1.4\commons-io-1.4.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-jcr-commons\2.0-beta6\jackrabbit-jcr-commons-2.0-beta6.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-api\2.0-beta6\jackrabbit-api-2.0-beta6.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-spi2dav\2.0-beta6\jackrabbit-spi2dav-2.0-beta6.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-webdav\2.0-beta6\jackrabbit-webdav-2.0-beta6.jar;C:\Users\admin.m2\repository\commons-httpclient\commons-httpclient\3.0\commons-httpclient-3.0.jar;C:\Users\admin.m2\repository\org\slf4j\jcl-over-slf4j\1.5.8\jcl-over-slf4j-1.5.8.jar;C:\Users\admin.m2\repository\org\apache\jackrabbit\jackrabbit-jcr-server\2.0-beta6\jackrabbit-jcr-server-2.0-beta6.jar;C:\Users\admin.m2\repository\org\slf4j\slf4j-simple\1.5.8\slf4j-simple-1.5.8.jar;C:\Users\admin.m2\repository\org\apache\xbean\xbean-naming\4.20\xbean-naming-4.20.jar com.javasec.pocs.hessian.HessianProxyLVFileWrite2
Exception in thread "main" com.caucho.hessian.io.HessianFieldException: sun.misc.URLClassPath.path: java.net.URL:java.lang.NullPointerException
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe.logDeserializeError(FieldDeserializer2FactoryUnsafe.java:532)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:169)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:265)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:166)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2199)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:265)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:166)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2199)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)
at com.caucho.hessian.io.ArrayDeserializer.readLengthList(ArrayDeserializer.java:142)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1766)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1715)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1699)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2123)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2107)
at com.caucho.hessian.io.MapDeserializer.readMap(MapDeserializer.java:114)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1691)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:237)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2123)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2107)
at com.javasec.utils.SerializeUtils.HessianDeserial(SerializeUtils.java:290)
at com.javasec.pocs.hessian.HessianProxyLVFileWrite2.main(HessianProxyLVFileWrite2.java:28)
Caused by: com.caucho.hessian.io.IOExceptionWrapper: java.net.URL:java.lang.NullPointerException
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:249)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:148)
at com.caucho.hessian.io.Hessian2Input.readObjectInstance(Hessian2Input.java:2202)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2123)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:2107)
at com.caucho.hessian.io.CollectionDeserializer.readLengthList(CollectionDeserializer.java:93)
at com.caucho.hessian.io.Hessian2Input.readObject(Hessian2Input.java:1788)
at com.caucho.hessian.io.FieldDeserializer2FactoryUnsafe$ObjectFieldDeserializer.deserialize(FieldDeserializer2FactoryUnsafe.java:165)
... 47 more
Caused by: java.lang.NullPointerException
at java.net.URL.readResolve(URL.java:1311)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.caucho.hessian.io.UnsafeDeserializer.resolve(UnsafeDeserializer.java:289)
at com.caucho.hessian.io.UnsafeDeserializer.readObject(UnsafeDeserializer.java:240)
... 54 more

Process finished with exit code 1

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.