From b86bd1f986c858e58bc9615d6906d1b28032d30a Mon Sep 17 00:00:00 2001 From: freegit9527 <3225783817@qq.com> Date: Sat, 28 Apr 2018 11:24:26 +0800 Subject: [PATCH 1/2] Update javaid.py --- javaid.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/javaid.py b/javaid.py index 80b4d71..96530ad 100644 --- a/javaid.py +++ b/javaid.py @@ -30,7 +30,9 @@ "Yaml.load", "fromXML", "ObjectMapper.readValue", - "JSON.parseObject" + "JSON.parseObject", + "writeOutputobject", + "objectInputStream" SSRF: "HttpClient", "URL", From fa8f697611a46ff89468f447f3287de13163ed1e Mon Sep 17 00:00:00 2001 From: freegit9527 <3225783817@qq.com> Date: Sat, 28 Apr 2018 11:26:21 +0800 Subject: [PATCH 2/2] Update README.md --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 5797ed8..c754dac 100644 --- a/README.md +++ b/README.md @@ -29,7 +29,9 @@ JavaObjectDeserialization: "Yaml.load", "fromXML", "ObjectMapper.readValue", - "JSON.parseObject" + "JSON.parseObject", + "writeOutputobject", + "objectInputStream" SSRF: "HttpClient", "Socket",