https://wanth3f1ag.top/javasec/ Recent content in Javasec on root@wanth3f1ag https://wanth3f1ag.top/images/avatar.jpg https://wanth3f1ag.top/images/avatar.jpg Hugo en Thu, 09 Apr 2026 10:38:36 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BJava-Agent-%E5%AD%A6%E4%B9%A0/ Thu, 09 Apr 2026 10:38:36 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BJava-Agent-%E5%AD%A6%E4%B9%A0/ https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BSpring-Controller%E5%86%85%E5%AD%98%E9%A9%AC/ Sun, 05 Apr 2026 12:05:09 +0800 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BSpring-Controller%E5%86%85%E5%AD%98%E9%A9%AC/ Spring Controller内存马 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BTomcat-%E5%86%85%E5%AD%98%E9%A9%AC%E5%A6%82%E4%BD%95%E5%9B%9E%E6%98%BE/ Wed, 18 Mar 2026 20:19:11 +0800 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BTomcat-%E5%86%85%E5%AD%98%E9%A9%AC%E5%A6%82%E4%BD%95%E5%9B%9E%E6%98%BE/ 不得不佩服前人的伟大 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BFilter%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/ Wed, 18 Mar 2026 14:50:52 +0800 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BFilter%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/ Java内存马基础及Filter型内存马 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BServlet%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/ Wed, 18 Mar 2026 14:50:52 +0800 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BServlet%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/ Servlet型内存马 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BListener%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/ Wed, 18 Mar 2026 14:50:52 +0800 https://wanth3f1ag.top/posts/Java%E5%86%85%E5%AD%98%E9%A9%AC%E4%B9%8BListener%E5%9E%8B%E5%86%85%E5%AD%98%E9%A9%AC/ Listener型内存马 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8B%E5%B7%85%E5%B3%B0%E6%9E%81%E5%AE%A22024-Ezjava/ Tue, 17 Mar 2026 11:17:40 +0800 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8B%E5%B7%85%E5%B3%B0%E6%9E%81%E5%AE%A22024-Ezjava/ https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BLilCTF2025-blade-cc/ Mon, 09 Mar 2026 16:01:06 +0800 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BLilCTF2025-blade-cc/ 复现一下java题 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BVNCTF2026-black-coffee/ Sun, 08 Mar 2026 12:28:56 +0800 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BVNCTF2026-black-coffee/ 复现一下java题 https://wanth3f1ag.top/posts/Java%E4%B9%8Bfastjson1-2-68-commons-io-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5%E5%88%A9%E7%94%A8%E9%93%BE%E5%AD%A6%E4%B9%A0/ Sun, 01 Mar 2026 13:07:28 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8Bfastjson1-2-68-commons-io-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5%E5%88%A9%E7%94%A8%E9%93%BE%E5%AD%A6%E4%B9%A0/ fastjson1.2.68 commons-io 任意文件写入利用链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson1-2-6x%E7%BB%95%E8%BF%87/ Sat, 28 Feb 2026 13:37:02 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson1-2-6x%E7%BB%95%E8%BF%87/ Fastjson1.2.62-1.2.68补丁绕过 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson1.2.4x%E7%BB%95%E8%BF%87/ Sat, 28 Feb 2026 13:30:28 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson1.2.4x%E7%BB%95%E8%BF%87/ Fastjson1.2.41-1.2.47补丁绕过 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BAspectjweaver%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%87%B3%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5/ Sat, 28 Feb 2026 11:36:00 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BAspectjweaver%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%87%B3%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5/ Aspectjweaver反序列化 https://wanth3f1ag.top/posts/java%E4%B9%8BTomcat-session%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E/ Fri, 27 Feb 2026 14:32:39 +0800 https://wanth3f1ag.top/posts/java%E4%B9%8BTomcat-session%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E/ CVE-2020-9484 https://wanth3f1ag.top/posts/Java%E4%B9%8BPostgreSQL%20JDBC%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5%E6%BC%8F%E6%B4%9E/ Fri, 27 Feb 2026 14:08:50 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BPostgreSQL%20JDBC%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%86%99%E5%85%A5%E6%BC%8F%E6%B4%9E/ 尽量多放代码块不放图片吧，感觉上篇放图片太多了加载有点慢 https://wanth3f1ag.top/posts/java%E4%B9%8BPostgreSQL-JDBC-RCE/ Fri, 27 Feb 2026 13:09:53 +0800 https://wanth3f1ag.top/posts/java%E4%B9%8BPostgreSQL-JDBC-RCE/ CVE-2022-21724 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJNDI%E6%B3%A8%E5%85%A5/ Thu, 05 Feb 2026 10:11:27 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJNDI%E6%B3%A8%E5%85%A5/ https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJNDI%E5%9F%BA%E7%A1%80/ Tue, 03 Feb 2026 15:11:30 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJNDI%E5%9F%BA%E7%A1%80/ 废话比较多，但对初学者很友好，尽可能地深入代码层去分析原理和过程 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%E9%AB%98%E7%89%88%E6%9C%AC%E8%A7%A6%E5%8F%91toString%E7%9A%84%E5%87%A0%E7%A7%8D%E6%96%B9%E6%B3%95/ Mon, 02 Feb 2026 14:51:31 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%E9%AB%98%E7%89%88%E6%9C%AC%E8%A7%A6%E5%8F%91toString%E7%9A%84%E5%87%A0%E7%A7%8D%E6%96%B9%E6%B3%95/ 继续JDK17 https://wanth3f1ag.top/posts/Java%E4%B9%8BJDK17%E5%BC%BA%E5%B0%81%E8%A3%85-%E9%AB%98%E7%89%88%E6%9C%ACJDK%E5%8F%8D%E5%B0%84%E8%B0%83%E7%94%A8/ Sun, 01 Feb 2026 11:52:26 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BJDK17%E5%BC%BA%E5%B0%81%E8%A3%85-%E9%AB%98%E7%89%88%E6%9C%ACJDK%E5%8F%8D%E5%B0%84%E8%B0%83%E7%94%A8/ 学点高级玩意儿 https://wanth3f1ag.top/posts/Java%E4%B9%8BLog4j2%E7%9A%84JNDI%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/ Tue, 27 Jan 2026 23:20:57 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BLog4j2%E7%9A%84JNDI%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/ 神奇的开发加上一切的巧合 https://wanth3f1ag.top/posts/Java%E4%B8%AD%E5%8A%A8%E6%80%81%E5%8A%A0%E8%BD%BD%E5%AD%97%E8%8A%82%E7%A0%81%E7%9A%84%E5%87%A0%E7%A7%8D%E6%96%B9%E5%BC%8F/ Fri, 23 Jan 2026 11:28:53 +0800 https://wanth3f1ag.top/posts/Java%E4%B8%AD%E5%8A%A8%E6%80%81%E5%8A%A0%E8%BD%BD%E5%AD%97%E8%8A%82%E7%A0%81%E7%9A%84%E5%87%A0%E7%A7%8D%E6%96%B9%E5%BC%8F/ Java动态加载字节码 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Fri, 23 Jan 2026 11:22:52 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Java反序列化 https://wanth3f1ag.top/posts/jfinal-CMSv5-1-0-Fastjson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/ Fri, 12 Dec 2025 19:06:52 +0800 https://wanth3f1ag.top/posts/jfinal-CMSv5-1-0-Fastjson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/ 一个比较简单的漏洞拿来当复习了 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95WAF%E6%96%B0%E5%A7%BF%E5%8A%BF/ Mon, 08 Dec 2025 18:26:35 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95WAF%E6%96%B0%E5%A7%BF%E5%8A%BF/ 又是让我学到了 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BEventListenerList%E8%A7%A6%E5%8F%91%E4%BB%BB%E6%84%8FtoString/ Mon, 08 Dec 2025 12:17:27 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BEventListenerList%E8%A7%A6%E5%8F%91%E4%BB%BB%E6%84%8FtoString/ EventListenerList触发任意toString https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJackson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Fri, 05 Dec 2025 18:04:39 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJackson%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ 懵懵懂懂 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BPolarCTF-Java%E6%96%B9%E5%90%91%E9%A2%98%E8%A7%A3/ Thu, 04 Dec 2025 10:38:20 +0800 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BPolarCTF-Java%E6%96%B9%E5%90%91%E9%A2%98%E8%A7%A3/ PolarCTF-Java方向题解 https://wanth3f1ag.top/posts/Java%E4%B9%8BSpring%E5%9F%BA%E7%A1%80/ Tue, 02 Dec 2025 16:16:47 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BSpring%E5%9F%BA%E7%A1%80/ 主要是写给自己看的，之前对Spring了解少之甚少 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8B%E5%B7%85%E5%B3%B0%E6%9E%81%E5%AE%A22023-BabyURL/ Tue, 02 Dec 2025 14:57:47 +0800 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8B%E5%B7%85%E5%B3%B0%E6%9E%81%E5%AE%A22023-BabyURL/ https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJackson%E5%8E%9F%E7%94%9F%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Tue, 02 Dec 2025 12:45:49 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BJackson%E5%8E%9F%E7%94%9F%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BCISCN2023-Deserbug/ Mon, 01 Dec 2025 12:05:42 +0800 https://wanth3f1ag.top/posts/Java%E9%A2%98%E7%9B%AE%E4%B9%8BCISCN2023-Deserbug/ CISCN2023 Deserbug https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BHessian%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Sun, 23 Nov 2025 13:31:40 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BHessian%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Java反序列化之Hessian反序列化 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BResin%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Thu, 20 Nov 2025 15:55:29 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BResin%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Java反序列化之Resin反序列化 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BROME%E5%8E%9F%E7%94%9F%E9%93%BE/ Tue, 18 Nov 2025 19:56:20 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BROME%E5%8E%9F%E7%94%9F%E9%93%BE/ Java反序列化之ROME原生链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson1.2.24%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Tue, 18 Nov 2025 16:33:03 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson1.2.24%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ <h1 id="0x01前言">0x01前言</h1> <p>最近工作比较忙，给自己休整了几天，正好过两天就周末了要出门也没空学啥，所以打算把学习任务提前一下。原谅自己学习进度太慢了。。。</p> <h1 id="0x02fastjson的序列化和反序列化">0x02Fastjson的序列化和反序列化</h1> <p>fastjson 是阿里巴巴开发的 java语言编写的高性能 JSON 库，用于将数据在 Json 和 Java Object之间相互转换。它没有用java的序列化机制，而是自定义了一套序列化机制。</p> <p>在fastjson中提供了两种接口函数</p> <ul> <li><code>JSON#toJSONString()</code>实现对象的序列化操作</li> <li><code>JSON#parseObject()/JSON#parse()</code>实现对象的反序列化操作</li> </ul> <p>但是对于Fastjson来说，并不是所有的java对象都能被序列化为JSON，只有JavaBean格式的对象才能被Fastjson转化成JSON格式</p> <p>我们写个demo来看看序列化和反序列化流程的走向</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-java" data-lang="java"><span class="line"><span class="cl"><span class="kd">class</span> <span class="nc">Person</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="c1">//使用Alt+Insert键可以快速生成属性的getter和setter方法</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="n">name</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kt">int</span><span class="w"> </span><span class="n">age</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="n">String</span><span class="w"> </span><span class="nf">getName</span><span class="p">()</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="s">&#34;执行了getName方法&#34;</span><span class="p">);</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">name</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">setName</span><span class="p">(</span><span class="n">String</span><span class="w"> </span><span class="n">name</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="s">&#34;执行了setName方法&#34;</span><span class="p">);</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">name</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">name</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kt">int</span><span class="w"> </span><span class="nf">getAge</span><span class="p">()</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="s">&#34;执行了getAge方法&#34;</span><span class="p">);</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="n">age</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="kd">public</span><span class="w"> </span><span class="kt">void</span><span class="w"> </span><span class="nf">setAge</span><span class="p">(</span><span class="kt">int</span><span class="w"> </span><span class="n">age</span><span class="p">)</span><span class="w"> </span><span class="p">{</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="n">System</span><span class="p">.</span><span class="na">out</span><span class="p">.</span><span class="na">println</span><span class="p">(</span><span class="s">&#34;执行了setAge方法&#34;</span><span class="p">);</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="k">this</span><span class="p">.</span><span class="na">age</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="n">age</span><span class="p">;</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="p">}</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="p">}</span><span class="w"> </span></span></span></code></pre></div><p>然后我们写个序列化和反序列化的操作</p> https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96jdk8u20%E5%8E%9F%E7%94%9F%E9%93%BE/ Thu, 11 Sep 2025 12:03:28 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96jdk8u20%E5%8E%9F%E7%94%9F%E9%93%BE/ Java反序列化之jdk8u20原生链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96jdk7u21%E5%8E%9F%E7%94%9F%E9%93%BE/ Tue, 09 Sep 2025 10:19:06 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96jdk7u21%E5%8E%9F%E7%94%9F%E9%93%BE/ Java反序列化之jJDK7u21原生链 https://wanth3f1ag.top/posts/Java%E4%B9%8BMySQL%20JDBC%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Thu, 04 Sep 2025 15:11:36 +0800 https://wanth3f1ag.top/posts/Java%E4%B9%8BMySQL%20JDBC%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ MySQL JDBC Attack https://wanth3f1ag.top/posts/Java%E4%BB%8E0%E5%88%B01%E7%9A%84%E5%AD%A6%E4%B9%A0/ Tue, 26 Aug 2025 20:48:35 +0800 https://wanth3f1ag.top/posts/Java%E4%BB%8E0%E5%88%B01%E7%9A%84%E5%AD%A6%E4%B9%A0/ Java从0到1的学习 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BShiro%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Thu, 31 Jul 2025 14:50:00 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BShiro%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Java反序列化之Shiro反序列化 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson%E5%8E%9F%E7%94%9F%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Mon, 07 Jul 2025 10:07:06 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8BFastjson%E5%8E%9F%E7%94%9F%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/ Java反序列化之Fastjson原生反序列化 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CB%E9%93%BE/ Sun, 06 Jul 2025 11:45:42 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CB%E9%93%BE/ Java反序列化CB链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC7%E9%93%BE/ Sat, 28 Jun 2025 20:20:26 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC7%E9%93%BE/ Java反序列化CC7链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC5%E9%93%BE/ Sat, 28 Jun 2025 19:50:24 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC5%E9%93%BE/ Java反序列化CC5链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC2%E9%93%BE/ Wed, 25 Jun 2025 23:24:03 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC2%E9%93%BE/ Java反序列化CC2链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC4%E9%93%BE/ Wed, 25 Jun 2025 22:00:18 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC4%E9%93%BE/ Java反序列化CC4链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC3%E9%93%BE/ Wed, 18 Jun 2025 11:22:38 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC3%E9%93%BE/ Java反序列化CC3链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96URLDNS%E5%88%A9%E7%94%A8%E9%93%BE/ Sun, 15 Jun 2025 15:17:52 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96URLDNS%E5%88%A9%E7%94%A8%E9%93%BE/ Java反序列化URLDNS利用链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC6%E9%93%BE/ Sat, 07 Jun 2025 20:10:46 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC6%E9%93%BE/ Java反序列化CC6链 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC1%E9%93%BE/ Tue, 27 May 2025 18:28:41 +0800 https://wanth3f1ag.top/posts/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96CC1%E9%93%BE/ Java反序列化CC1链