fastjson auto type derivation search

Overview

Fastjson Auto Type Discovery and Visualization

Blackhat USA 2021 Session ---- How I Used a JSON Deserialization 0day to Steal Your Money on the Blockchain

Usage

The main entry is AutoTypeDiscovery.

Edit the first line at the static main function to set the jar file or directory you want to analyze.

Run , wait and get the output.

And data is saved to the cytoscape dir for visualization ( just for fun ;-) ). Open index.html in the browser.

You might also like...

A spring cloud infrastructure provides various of commonly used cloud components and auto-configurations for high project consistency

A spring cloud infrastructure provides various of commonly used cloud components and auto-configurations for high project consistency

A spring cloud infrastructure provides various of commonly used cloud components and auto-configurations for high project consistency.

Feb 8, 2022

AREX auto-instrumentation for Java.

AREX An Open Source Testing Framework with Real World Data Introduction Installation Getting Started Contributing License Introduction As your applica

Jan 4, 2023

Photo live wallpaper with auto dark mode and power-efficient animations

Photo live wallpaper with auto dark mode and power-efficient animations

Pallax Android: Photo Live Wallpaper Pallax Android is an Android app that lets you convert your current static home screen background into a stunning

Dec 17, 2022

Auto-Unit-Test-Case-Generator automatically generates high-level code-coverage JUnit test suites for Java, widely used within the ANT Group.

中文README传送门 What is Auto-Unit-Test-Case-Generator Auto-Unit-Test-Case-Generator generates JUnit test suites for Java class just as its name. During te

Dec 22, 2022

OpenAPI JSON Schema Generator allows auto-generation of API client libraries with a focus on JSON schema given an OpenAPI Spec

OpenAPI JSON Schema Generator IMPORTANT: before the first release, one will need to build the project locally to use the enhancements, bug fixes in th

Dec 31, 2022

dOOv (Domain Object Oriented Validation) a fluent API for type-safe bean validation and mapping

dOOv (Domain Object Oriented Validation) dOOv is a fluent API for typesafe domain model validation and mapping. It uses annotations, code generation a

Nov 20, 2022

An annotation processor for generating type-safe bean mappers

MapStruct - Java bean mappings, the easy way! What is MapStruct? Requirements Using MapStruct Maven Gradle Documentation and getting help Building fro

Dec 31, 2022

A type-safe HTTP client for Android and the JVM

Retrofit A type-safe HTTP client for Android and Java. For more information please see the website. Download Download the latest JAR or grab from Mave

Jan 5, 2023

Properly implements shields being able to block endcrystal blasts, as they should; like every other explosion type.

Endcrystal-Shield Properly implements shields being able to block endcrystal blasts, as they should; like every other explosion type. Mojang CONFIRMED

Jul 7, 2022

HasorDB is a Full-featured database access tool, Providing object mapping,Richer type handling than Mybatis, Dynamic SQL

HasorDB is a Full-featured database access tool, Providing object mapping,Richer type handling than Mybatis, Dynamic SQL

HasorDB is a Full-featured database access tool, Providing object mapping,Richer type handling than Mybatis, Dynamic SQL, stored procedures, more dialect 20+, nested transactions, multiple data sources, conditional constructors, INSERT strategies, multiple statements/multiple results. And compatible with Spring and MyBatis usage.

Oct 27, 2022

Java library for the Siren Hypermedia Type Specification

This is a java library to help with the creation and use of Hypermedia entities as specified by the Siren hypermedia specification. See https://github

May 8, 2022

dOOv (Domain Object Oriented Validation) a fluent API for type-safe bean validation and mapping

dOOv (Domain Object Oriented Validation) dOOv is a fluent API for typesafe domain model validation and mapping. It uses annotations, code generation a

Nov 20, 2022

fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and queues.

fastutil is a collection of type-specific Java classes that extend the Java Collections Framework by providing several containers, such as maps, sets, lists and prority queues, implementing the interfaces of the java.util package; it also provides big (64-bit) arrays, sets, lists, and fast, practical I/O classes for binary and text files.

Jan 7, 2023

ForgetMeChunk - a simple client side mod that removes a type of light update when unloading chunks

ForgetMeChunk is a simple client side mod that removes a type of light update when unloading chunks. This fixes the large lag spikes you sometimes get when crossing a chunk border.

Nov 24, 2022

A mod for Fabric that makes it easier to see what type of axolotl is in your inventory by changing the texture and adding a tooltip

A mod for Fabric that makes it easier to see what type of axolotl is in your inventory by changing the texture and adding a tooltip

AxolotlViewer for Fabric AxolotlViewer makes it easier to see what type of axolotl is in your inventory. It adds the colour of the axolotl to the buck

Jan 2, 2023
Owner
RonnyX
I love Watermelon, Air-conditioner and SUMMER
RonnyX
Beagle helps you identify keywords, phrases, regexes, and complex search queries of interest in streams of text documents.

Beagle Beagle is a detector of interesting things in text. Its intended use is in-stream search applications. Suppose you need to monitor a stream of

TokenMill 49 Dec 3, 2022
Android Auto Apps Downloader (AAAD) is an app for Android Phones that downloads popular Android Auto 3rd party apps and installs them in the correct way to have them in Android Auto.

Android Auto Apps Downloader (AAAD) is an app for Android Phones that downloads popular Android Auto 3rd party apps and installs them in the correct way to have them in Android Auto.

Gabriele Rizzo 865 Jan 2, 2023
Path Finding Visualizer for Breadth first search, Depth first search, Best first search and A* search made with java swing

Path-Finding-Visualizer Purpose This is a tool to visualize search algorithms Algorithms featured Breadth First Search Deapth First Search Gready Best

Leonard 11 Oct 20, 2022
Search API with spelling correction using ngram-index algorithm: implementation using Java Spring-boot and MySQL ngram full text search index

Search API to handle Spelling-Corrections Based on N-gram index algorithm: using MySQL Ngram Full-Text Parser Sample Screen-Recording Screen.Recording

Hardik Singh Behl 5 Dec 4, 2021
Auto updating launcher for JavaFX Applications

FXLauncher Auto updating launcher for JavaFX Applications. Combined with JavaFX native packaging, you get a native installer with automatic app update

Edvin Syse 694 Dec 27, 2022
Create your own auto-update framework

Read the documentation, explore the JavaDoc, or see it in action Create a framework: design the environment and lifecycle (—bootstrap) to make your ow

null 698 Dec 29, 2022
Auto reply app helping you move away from less private messengers like WhatsApp and Facebook Messenger

Watomatic - Auto reply for WhatsApp so you can stop using it Watomatic sends an automated reply to everyone contacting you on WhatsApp. This is especi

Deekshith Allamaneni 335 Dec 28, 2022
Client for anarchy servers that has bots / auto-modules and other stuff.

AutoBot is a module styled client for anarchy servers that offers bots and auto-modules like ElytraBot which is a pathfinding bot for elytras

null 43 Dec 27, 2022
这是一个自动化的托管系统,目前支持网易云,bilibili,米游社原神签到,测试地址https://auto.oldwu.top

AutoPlan_Helper 这是一个自动化的托管系统,目前支持网易云签到刷歌,bilibili,米游社原神签到 目前项目属于测试阶段,可能会有些莫名其妙的bug,敬请谅解 如果觉得好用,点个star吧 开源地址 wyt1215819315 / autoplan 目前已经实现 b站每日自动经验任务

null 501 Jan 1, 2023
Auto Code Audit Framework for Java

前言 笔者最近在研究java自动化代码审计这方面的内容,也看了一些相关的文章,其中主要是跟着4ra1n师傅的文章进行学习的。目前学到的有两种自动化审计思路,一是AST,二是ASM。前者基于java源代码,后者基于字节码。

r2 61 Nov 30, 2022