diff --git a/README.md b/README.md index 5797ed8..c754dac 100644 --- a/README.md +++ b/README.md @@ -29,7 +29,9 @@ JavaObjectDeserialization: "Yaml.load", "fromXML", "ObjectMapper.readValue", - "JSON.parseObject" + "JSON.parseObject", + "writeOutputobject", + "objectInputStream" SSRF: "HttpClient", "Socket", diff --git a/javaid.py b/javaid.py index 80b4d71..96530ad 100644 --- a/javaid.py +++ b/javaid.py @@ -30,7 +30,9 @@ "Yaml.load", "fromXML", "ObjectMapper.readValue", - "JSON.parseObject" + "JSON.parseObject", + "writeOutputobject", + "objectInputStream" SSRF: "HttpClient", "URL",