# Java

## Java

- [About This Book](https://p4d0rn.gitbook.io/java/readme.md)
- [反射](https://p4d0rn.gitbook.io/java/prerequisites/fan-she.md)
- [反射基本使用](https://p4d0rn.gitbook.io/java/prerequisites/fan-she/reflection.md)
- [高版本JDK反射绕过](https://p4d0rn.gitbook.io/java/prerequisites/fan-she/reflection2.md)
- [反射调用命令执行](https://p4d0rn.gitbook.io/java/prerequisites/fan-she/exec.md)
- [反射构造HashMap](https://p4d0rn.gitbook.io/java/prerequisites/fan-she/reflect_hashmap.md)
- [方法句柄](https://p4d0rn.gitbook.io/java/prerequisites/fan-she/methodhandle.md)
- [类加载](https://p4d0rn.gitbook.io/java/prerequisites/lei-jia-zai.md)
- [动态加载字节码](https://p4d0rn.gitbook.io/java/prerequisites/lei-jia-zai/classloader.md)
- [双亲委派模型](https://p4d0rn.gitbook.io/java/prerequisites/lei-jia-zai/parents_delegate.md)
- [BCEL](https://p4d0rn.gitbook.io/java/prerequisites/lei-jia-zai/bcel.md)
- [SPI](https://p4d0rn.gitbook.io/java/prerequisites/lei-jia-zai/spi.md)
- [RMI & JNDI](https://p4d0rn.gitbook.io/java/prerequisites/rmi-and-jndi.md)
- [RPC Intro](https://p4d0rn.gitbook.io/java/prerequisites/rmi-and-jndi/rpc.md)
- [RMI](https://p4d0rn.gitbook.io/java/prerequisites/rmi-and-jndi/rmi.md)
- [JEP 290](https://p4d0rn.gitbook.io/java/prerequisites/rmi-and-jndi/jep.md)
- [JNDI](https://p4d0rn.gitbook.io/java/prerequisites/rmi-and-jndi/jndi.md)
- [Misc](https://p4d0rn.gitbook.io/java/prerequisites/misc.md)
- [Unsafe](https://p4d0rn.gitbook.io/java/prerequisites/misc/unsafe.md)
- [代理模式](https://p4d0rn.gitbook.io/java/prerequisites/misc/proxy.md)
- [JMX](https://p4d0rn.gitbook.io/java/prerequisites/misc/jmx.md)
- [JDWP](https://p4d0rn.gitbook.io/java/prerequisites/misc/jdwp.md)
- [JPDA](https://p4d0rn.gitbook.io/java/prerequisites/misc/jpda.md)
- [JVMTI](https://p4d0rn.gitbook.io/java/prerequisites/misc/jvmti.md)
- [JNA](https://p4d0rn.gitbook.io/java/prerequisites/misc/jna.md)
- [Java Security Manager](https://p4d0rn.gitbook.io/java/prerequisites/misc/securitymanager.md)
- [URLDNS](https://p4d0rn.gitbook.io/java/serial-journey/urldns.md)
- [SerialVersionUID](https://p4d0rn.gitbook.io/java/serial-journey/serialversionuid.md)
- [Commons Collection 🥏](https://p4d0rn.gitbook.io/java/serial-journey/commons-collection.md)
- [CC1-TransformedMap](https://p4d0rn.gitbook.io/java/serial-journey/commons-collection/cc1_transformedmap.md)
- [CC1-LazyMap](https://p4d0rn.gitbook.io/java/serial-journey/commons-collection/cc1_lazymap.md)
- [CC6](https://p4d0rn.gitbook.io/java/serial-journey/commons-collection/cc6.md)
- [CC3](https://p4d0rn.gitbook.io/java/serial-journey/commons-collection/cc3.md)
- [CC2](https://p4d0rn.gitbook.io/java/serial-journey/commons-collection/cc2.md)
- [FastJson 🪁](https://p4d0rn.gitbook.io/java/serial-journey/fastjson.md)
- [FastJson-Basic Usage](https://p4d0rn.gitbook.io/java/serial-journey/fastjson/fastjsonbasic.md)
- [FastJson-TemplatesImpl](https://p4d0rn.gitbook.io/java/serial-journey/fastjson/fastjson_templatesimpl.md)
- [FastJson-JdbcRowSetImpl](https://p4d0rn.gitbook.io/java/serial-journey/fastjson/fastjson_jdbcrowsetimpl.md)
- [FastJson-ByPass](https://p4d0rn.gitbook.io/java/serial-journey/fastjson/fastjson-bypass.md)
- [Jackson的原生反序列化利用](https://p4d0rn.gitbook.io/java/serial-journey/fastjson/jackson.md)
- [Other Components](https://p4d0rn.gitbook.io/java/serial-journey/other-components.md)
- [SnakeYaml](https://p4d0rn.gitbook.io/java/serial-journey/other-components/snakeyaml.md)
- [C3P0](https://p4d0rn.gitbook.io/java/serial-journey/other-components/c3p0.md)
- [AspectJWeaver](https://p4d0rn.gitbook.io/java/serial-journey/other-components/aspectjweaver.md)
- [Rome](https://p4d0rn.gitbook.io/java/serial-journey/other-components/rome.md)
- [Spring](https://p4d0rn.gitbook.io/java/serial-journey/other-components/spring.md)
- [Hessian](https://p4d0rn.gitbook.io/java/serial-journey/other-components/hessian.md)
- [Hessian\_Only\_JDK](https://p4d0rn.gitbook.io/java/serial-journey/other-components/hessian_only_jdk.md)
- [Kryo](https://p4d0rn.gitbook.io/java/serial-journey/other-components/kryo.md)
- [Dubbo](https://p4d0rn.gitbook.io/java/serial-journey/other-components/dubbo.md)
- [JavaAgent](https://p4d0rn.gitbook.io/java/rasp/javaagent.md)
- [JVM](https://p4d0rn.gitbook.io/java/rasp/jvm.md)
- [ByteCode](https://p4d0rn.gitbook.io/java/rasp/bytecode.md)
- [JNI](https://p4d0rn.gitbook.io/java/rasp/jni.md)
- [ASM 🪡](https://p4d0rn.gitbook.io/java/rasp/asm.md)
- [ASM Intro](https://p4d0rn.gitbook.io/java/rasp/asm/asm0.md)
- [Class Generation](https://p4d0rn.gitbook.io/java/rasp/asm/asm1.md)
- [Class Transformation](https://p4d0rn.gitbook.io/java/rasp/asm/asm2.md)
- [Rasp防御命令执行](https://p4d0rn.gitbook.io/java/rasp/rasp1.md)
- [OpenRASP](https://p4d0rn.gitbook.io/java/rasp/openrasp.md)
- [Tomcat-Architecture](https://p4d0rn.gitbook.io/java/memory-shell/tomcat.md)
- [Servlet API](https://p4d0rn.gitbook.io/java/memory-shell/servlet-api.md)
- [Listener](https://p4d0rn.gitbook.io/java/memory-shell/servlet-api/listener.md)
- [Filter](https://p4d0rn.gitbook.io/java/memory-shell/servlet-api/filter.md)
- [Servlet](https://p4d0rn.gitbook.io/java/memory-shell/servlet-api/servlet.md)
- [Tomcat-Middlewares](https://p4d0rn.gitbook.io/java/memory-shell/tomcat-middlewares.md)
- [Tomcat-Valve](https://p4d0rn.gitbook.io/java/memory-shell/tomcat-middlewares/valve.md)
- [Tomcat-Executor](https://p4d0rn.gitbook.io/java/memory-shell/tomcat-middlewares/executor.md)
- [Tomcat-Upgrade](https://p4d0rn.gitbook.io/java/memory-shell/tomcat-middlewares/upgrade.md)
- [Agent MemShell](https://p4d0rn.gitbook.io/java/memory-shell/agent.md)
- [WebSocket](https://p4d0rn.gitbook.io/java/memory-shell/websocket.md)
- [IDEA本地调试Tomcat](https://p4d0rn.gitbook.io/java/memory-shell/de_tomcat.md)
- [MySQL JDBC Attack](https://p4d0rn.gitbook.io/java/jdbc-attack/mysql.md)
- [H2 JDBC Attack](https://p4d0rn.gitbook.io/java/jdbc-attack/h2.md)
- [FreeMarker](https://p4d0rn.gitbook.io/java/templates/freemarker.md)
- [Thymeleaf](https://p4d0rn.gitbook.io/java/templates/thymeleaf.md)
- [Enjoy](https://p4d0rn.gitbook.io/java/templates/enjoy.md)
- [ActiveMQ CNVD-2023-69477](https://p4d0rn.gitbook.io/java/messagequeue/activemq.md)
- [AMQP CVE-2023-34050](https://p4d0rn.gitbook.io/java/messagequeue/amqp.md)
- [Spring-Kafka CVE-2023-34040](https://p4d0rn.gitbook.io/java/messagequeue/kafka.md)
- [RocketMQ CVE-2023-33246](https://p4d0rn.gitbook.io/java/messagequeue/rocketmq-cve-2023-33246.md)
- [Shiro Intro](https://p4d0rn.gitbook.io/java/shiro/shiro.md)
- [Request URI ByPass](https://p4d0rn.gitbook.io/java/shiro/cve-2010-3863.md)
- [Context Path ByPass](https://p4d0rn.gitbook.io/java/shiro/cve-2016-6802.md)
- [Remember Me反序列化 CC-Shiro](https://p4d0rn.gitbook.io/java/shiro/cc-shiro.md)
- [CB1与无CC依赖的反序列化链](https://p4d0rn.gitbook.io/java/shiro/cb1.md)
- [Deserialization Twice](https://p4d0rn.gitbook.io/java/others/desertwice.md)
- [A New Blazer 4 getter RCE](https://p4d0rn.gitbook.io/java/others/newgetter.md)
- [Apache Commons Jxpath](https://p4d0rn.gitbook.io/java/others/jxpath.md)
- [El Attack](https://p4d0rn.gitbook.io/java/others/elattack.md)
- [Spel Attack](https://p4d0rn.gitbook.io/java/others/spel.md)
- [C3P0原生反序列化的JNDI打法](https://p4d0rn.gitbook.io/java/others/c3p0.md)
- [Log4j](https://p4d0rn.gitbook.io/java/others/log4j2.md)
- [Echo Tech](https://p4d0rn.gitbook.io/java/others/echo-tech.md)
- [SpringBoot Under Tomcat](https://p4d0rn.gitbook.io/java/others/echo-tech/sbtomcat.md)
- [CTF 🚩](https://p4d0rn.gitbook.io/java/others/ctf.md)
- [长城杯-b4bycoffee (ROME反序列化)](https://p4d0rn.gitbook.io/java/others/ctf/b4bycoffee.md)
- [MTCTF2022(CB+Shiro绕过)](https://p4d0rn.gitbook.io/java/others/ctf/mtctf2022.md)
- [CISCN 2023 西南赛区半决赛 (Hessian原生JDK+Kryo反序列化)](https://p4d0rn.gitbook.io/java/others/ctf/seacloud.md)
- [CISCN 2023 初赛 (高版本Commons Collections下其他依赖的利用)](https://p4d0rn.gitbook.io/java/others/ctf/deserbug.md)
- [CISCN 2021 总决赛 ezj4va (AspectJWeaver写字节码文件到classpath)](https://p4d0rn.gitbook.io/java/others/ctf/ezj4va.md)
- [D^3CTF2023 (新的getter+高版本JNDI不出网+Hessian异常toString)](https://p4d0rn.gitbook.io/java/others/ctf/d3java.md)
- [WMCTF2023（CC链花式玩法+盲读文件）](https://p4d0rn.gitbook.io/java/others/ctf/wmctf2023.md)
- [第六届安洵杯网络安全挑战赛（CB PriorityQueue替代+Postgresql JDBC Attack+FreeMarker）](https://p4d0rn.gitbook.io/java/others/ctf/axb2023.md)
- [CodeQL 🧶](https://p4d0rn.gitbook.io/java/code-inspector/codeql.md)
- [Tutorial](https://p4d0rn.gitbook.io/java/code-inspector/codeql/tutorial.md)
- [Intro](https://p4d0rn.gitbook.io/java/code-inspector/codeql/tutorial/intro.md)
- [Module](https://p4d0rn.gitbook.io/java/code-inspector/codeql/tutorial/module.md)
- [Predicate](https://p4d0rn.gitbook.io/java/code-inspector/codeql/tutorial/predicate.md)
- [Query](https://p4d0rn.gitbook.io/java/code-inspector/codeql/tutorial/query.md)
- [Type](https://p4d0rn.gitbook.io/java/code-inspector/codeql/tutorial/type.md)
- [CodeQL 4 Java](https://p4d0rn.gitbook.io/java/code-inspector/codeql/codeql-4-java.md)
- [Basics](https://p4d0rn.gitbook.io/java/code-inspector/codeql/codeql-4-java/basics.md)
- [DFA](https://p4d0rn.gitbook.io/java/code-inspector/codeql/codeql-4-java/dfa.md)
- [Example](https://p4d0rn.gitbook.io/java/code-inspector/codeql/codeql-4-java/codeql4java.md)
- [SootUp ✨](https://p4d0rn.gitbook.io/java/code-inspector/sootup.md)
- [Intro](https://p4d0rn.gitbook.io/java/code-inspector/sootup/intro.md)
- [Jimple](https://p4d0rn.gitbook.io/java/code-inspector/sootup/jimple.md)
- [DFA](https://p4d0rn.gitbook.io/java/code-inspector/sootup/dfa.md)
- [CG](https://p4d0rn.gitbook.io/java/code-inspector/sootup/cg.md)
- [Tabby 🔦](https://p4d0rn.gitbook.io/java/code-inspector/tabby.md)
- [install](https://p4d0rn.gitbook.io/java/code-inspector/tabby/install.md)
- [Theory](https://p4d0rn.gitbook.io/java/code-inspector/theory.md)
- [Static Analysis](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis.md)
- [Intro](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/intro.md)
- [IR & CFG](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/ir.md)
- [DFA](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/dfa.md)
- [DFA-Foundation](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/dfa-foundation.md)
- [Interprocedural Analysis](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/inter.md)
- [Pointer Analysis](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/pta.md)
- [Pointer Analysis Foundation](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/pta-foundation.md)
- [PTA-Context Sensitivity](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/pta-cs.md)
- [Taint Anlysis](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/taint.md)
- [Datalog](https://p4d0rn.gitbook.io/java/code-inspector/theory/static-analysis/datalog.md)