feat: support CC payload generate

vul/vul-webapp-deserialize/build.gradle

@@ -16,6 +16,8 @@ configurations {
     cb183
     cb170
     cb161
+    cc321
+    cc40
 }
 
 dependencies {
@@ -24,6 +26,8 @@ dependencies {
     cb183 'commons-beanutils:commons-beanutils:1.8.3'
     cb170 'commons-beanutils:commons-beanutils:1.7.0'
     cb161 'commons-beanutils:commons-beanutils:1.6.1'
+    cc321 'commons-collections:commons-collections:3.2.1'
+    cc40 'org.apache.commons:commons-collections4:4.0'
 
     implementation 'com.caucho:hessian:4.0.66'
     providedCompile 'javax.servlet:javax.servlet-api:3.1.0'
@@ -40,6 +44,8 @@ war {
         copy { from configurations.cb183 into "src/main/webapp/WEB-INF/dep" }
         copy { from configurations.cb170 into "src/main/webapp/WEB-INF/dep" }
         copy { from configurations.cb161 into "src/main/webapp/WEB-INF/dep" }
+        copy { from configurations.cc321 into "src/main/webapp/WEB-INF/dep" }
+        copy { from configurations.cc40 into "src/main/webapp/WEB-INF/dep" }
     }
 }
 

vul/vul-webapp-deserialize/src/main/java/JavaReadObjCC321jServlet.java

@@ -0,0 +1,17 @@
+import javax.servlet.annotation.WebServlet;
+import java.util.Collections;
+import java.util.List;
+
+/**
+ * @author ReaJason
+ * @since 2024/12/10
+ */
+@WebServlet("/java_deserialize/cc321")
+public class JavaReadObjCC321jServlet extends BaseDeserializeServlet {
+
+    @Override
+    List<String> getDependentPaths() {
+        return Collections.singletonList("commons-collections-3.2.1.jar");
+    }
+
+}

vul/vul-webapp-deserialize/src/main/java/JavaReadObjCC40jServlet.java

@@ -0,0 +1,17 @@
+import javax.servlet.annotation.WebServlet;
+import java.util.Collections;
+import java.util.List;
+
+/**
+ * @author ReaJason
+ * @since 2024/12/10
+ */
+@WebServlet("/java_deserialize/cc40")
+public class JavaReadObjCC40jServlet extends BaseDeserializeServlet {
+
+    @Override
+    List<String> getDependentPaths() {
+        return Collections.singletonList("commons-collections4-4.0.jar");
+    }
+
+}

vul/vul-webapp/build.gradle

@@ -12,6 +12,6 @@ java {
 
 dependencies {
     implementation 'commons-fileupload:commons-fileupload:1.3.3'
-    implementation 'commons-beanutils:commons-beanutils:1.9.4'
+    implementation 'commons-beanutils:commons-beanutils:1.9.2'
     providedCompile "javax.servlet:servlet-api:2.5"
 }