├── .gitignore ├── LICENSE ├── README.md ├── img └── 1.png ├── pom.xml └── src └── main ├── java └── org │ └── sec │ ├── Main.java │ ├── app │ ├── Application.java │ ├── Command.java │ └── Logo.java │ ├── core │ ├── asm │ │ ├── CallGraphClassVisitor.java │ │ ├── CallGraphMethodAdapter.java │ │ ├── DOSClassVisitor.java │ │ ├── DOSMethodAdapter.java │ │ ├── DiscoveryClassVisitor.java │ │ ├── LogClassVisitor.java │ │ ├── LogMethodAdapter.java │ │ ├── MethodCallClassVisitor.java │ │ ├── MethodCallMethodAdapter.java │ │ ├── RCEClassVisitor.java │ │ ├── RCEMethodAdapter.java │ │ ├── RedirectClassVisitor.java │ │ ├── RedirectMethodAdapter.java │ │ ├── SSRFClassVisitor.java │ │ ├── SSRFMethodAdapter.java │ │ ├── SqlInjectClassVisitor.java │ │ ├── SqlInjectMethodAdapter.java │ │ ├── XXEClassVisitor.java │ │ └── XXEMethodAdapter.java │ ├── inherit │ │ ├── InheritanceMap.java │ │ └── InheritanceUtil.java │ ├── jvm │ │ ├── CoreMethodAdapter.java │ │ ├── GotoState.java │ │ ├── LocalVariables.java │ │ └── OperandStack.java │ ├── service │ │ ├── CallGraphService.java │ │ ├── DOSService.java │ │ ├── DiscoveryService.java │ │ ├── InheritanceService.java │ │ ├── LogService.java │ │ ├── MethodCallService.java │ │ ├── RCEService.java │ │ ├── RedirectService.java │ │ ├── SSRFService.java │ │ ├── SortService.java │ │ ├── SpringService.java │ │ ├── SqlInjectService.java │ │ └── XXEService.java │ ├── spring │ │ ├── SpringConstant.java │ │ ├── SpringController.java │ │ ├── SpringMapping.java │ │ ├── SpringParam.java │ │ └── asm │ │ │ ├── SpringAnnoAdapter.java │ │ │ ├── SpringClassVisitor.java │ │ │ ├── SpringMethodAdapter.java │ │ │ └── SpringPathAnnoAdapter.java │ └── util │ │ ├── ClassUtil.java │ │ ├── DirUtil.java │ │ ├── IOUtil.java │ │ └── JarUtil.java │ ├── data │ ├── Output.java │ └── ResultOutput.java │ ├── log │ ├── SLF4J.java │ └── SLF4JProcessor.java │ └── model │ ├── CallGraph.java │ ├── ClassFile.java │ ├── ClassReference.java │ ├── MethodReference.java │ └── ResultInfo.java └── resources └── log4j.properties /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/README.md -------------------------------------------------------------------------------- /img/1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/img/1.png -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/pom.xml -------------------------------------------------------------------------------- /src/main/java/org/sec/Main.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/Main.java -------------------------------------------------------------------------------- /src/main/java/org/sec/app/Application.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/app/Application.java -------------------------------------------------------------------------------- /src/main/java/org/sec/app/Command.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/app/Command.java -------------------------------------------------------------------------------- /src/main/java/org/sec/app/Logo.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/app/Logo.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/CallGraphClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/CallGraphClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/CallGraphMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/CallGraphMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/DOSClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/DOSClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/DOSMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/DOSMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/DiscoveryClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/DiscoveryClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/LogClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/LogClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/LogMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/LogMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/MethodCallClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/MethodCallClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/MethodCallMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/MethodCallMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/RCEClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/RCEClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/RCEMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/RCEMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/RedirectClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/RedirectClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/RedirectMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/RedirectMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/SSRFClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/SSRFClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/SSRFMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/SSRFMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/SqlInjectClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/SqlInjectClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/SqlInjectMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/SqlInjectMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/XXEClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/XXEClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/asm/XXEMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/asm/XXEMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/inherit/InheritanceMap.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/inherit/InheritanceMap.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/inherit/InheritanceUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/inherit/InheritanceUtil.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/jvm/CoreMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/jvm/CoreMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/jvm/GotoState.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/jvm/GotoState.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/jvm/LocalVariables.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/jvm/LocalVariables.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/jvm/OperandStack.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/jvm/OperandStack.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/CallGraphService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/CallGraphService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/DOSService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/DOSService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/DiscoveryService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/DiscoveryService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/InheritanceService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/InheritanceService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/LogService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/LogService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/MethodCallService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/MethodCallService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/RCEService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/RCEService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/RedirectService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/RedirectService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/SSRFService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/SSRFService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/SortService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/SortService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/SpringService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/SpringService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/SqlInjectService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/SqlInjectService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/service/XXEService.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/service/XXEService.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/SpringConstant.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/SpringConstant.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/SpringController.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/SpringController.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/SpringMapping.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/SpringMapping.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/SpringParam.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/SpringParam.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/asm/SpringAnnoAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/asm/SpringAnnoAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/asm/SpringClassVisitor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/asm/SpringClassVisitor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/asm/SpringMethodAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/asm/SpringMethodAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/spring/asm/SpringPathAnnoAdapter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/spring/asm/SpringPathAnnoAdapter.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/util/ClassUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/util/ClassUtil.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/util/DirUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/util/DirUtil.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/util/IOUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/util/IOUtil.java -------------------------------------------------------------------------------- /src/main/java/org/sec/core/util/JarUtil.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/core/util/JarUtil.java -------------------------------------------------------------------------------- /src/main/java/org/sec/data/Output.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/data/Output.java -------------------------------------------------------------------------------- /src/main/java/org/sec/data/ResultOutput.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/data/ResultOutput.java -------------------------------------------------------------------------------- /src/main/java/org/sec/log/SLF4J.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/log/SLF4J.java -------------------------------------------------------------------------------- /src/main/java/org/sec/log/SLF4JProcessor.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/log/SLF4JProcessor.java -------------------------------------------------------------------------------- /src/main/java/org/sec/model/CallGraph.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/model/CallGraph.java -------------------------------------------------------------------------------- /src/main/java/org/sec/model/ClassFile.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/model/ClassFile.java -------------------------------------------------------------------------------- /src/main/java/org/sec/model/ClassReference.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/model/ClassReference.java -------------------------------------------------------------------------------- /src/main/java/org/sec/model/MethodReference.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/model/MethodReference.java -------------------------------------------------------------------------------- /src/main/java/org/sec/model/ResultInfo.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/java/org/sec/model/ResultInfo.java -------------------------------------------------------------------------------- /src/main/resources/log4j.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j5s/SpringInspector/HEAD/src/main/resources/log4j.properties --------------------------------------------------------------------------------