Andrey B. Panfilov andreybpanfilov
andreybpanfilov
/ DocumentumD2AACBackDoorPoC.java
Created
February 13, 2016 08:00
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import java.io.ByteArrayOutputStream; | |
| import java.io.ObjectOutputStream; | |
| import java.lang.reflect.Array; | |
| import java.lang.reflect.Field; | |
| import java.lang.reflect.InvocationHandler; | |
| import java.lang.reflect.Method; | |
| import java.lang.reflect.Proxy; | |
| import java.util.HashMap; | |
| import java.util.Map; |
andreybpanfilov
/ DmrContentBackDoorPoC.java
Created
January 8, 2016 11:09
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import java.io.ByteArrayOutputStream; | |
| import com.documentum.com.DfClientX; | |
| import com.documentum.fc.client.IDfMethodObject; | |
| import com.documentum.fc.client.IDfSession; | |
| import com.documentum.fc.client.IDfSysObject; | |
| import com.documentum.fc.client.IDfUser; | |
| import com.documentum.fc.client.content.IDfContent; | |
| import com.documentum.fc.client.impl.connection.docbase.IDocbaseConnection; | |
| import com.documentum.fc.client.impl.session.ISession; |
andreybpanfilov
/ DocumentumWebtopCommonsBeanutilsPoC.java
Created
February 28, 2016 09:33
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import java.io.ByteArrayOutputStream; | |
| import java.io.IOException; | |
| import java.io.InputStream; | |
| import java.io.ObjectOutputStream; | |
| import java.io.Serializable; | |
| import java.lang.reflect.Field; | |
| import java.math.BigInteger; | |
| import java.net.HttpURLConnection; | |
| import java.net.URL; | |
| import java.util.PriorityQueue; |
andreybpanfilov
/ DfcHell.groovy
Last active
March 29, 2016 10:58
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import com.documentum.com.DfClientX | |
| import com.documentum.dmcl.impl.DmclApi | |
| import com.documentum.fc.client.* | |
| import com.documentum.fc.common.DfId | |
| import com.documentum.fc.common.DfLoginInfo | |
| import com.documentum.fc.common.DfPreferences | |
| import com.documentum.fc.common.IDfAttr | |
| import com.documentum.fc.impl.util.holders.IntHolder | |
| import groovy.json.JsonOutput | |
| import org.codehaus.groovy.tools.shell.Groovysh |
andreybpanfilov
/ dfcdiagnostics.jsp
Created
June 15, 2016 14:53
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <%@ page import="java.io.ByteArrayOutputStream" %> | |
| <%@ page import="java.io.OutputStreamWriter" %> | |
| <%@ page import="java.io.PrintWriter" %> | |
| <%@ page import="java.lang.reflect.Field" %> | |
| <%@ page import="com.documentum.fc.common.DfPreferences" %> | |
| <%@ page import="com.documentum.fc.common.DfRuntimeException" %> | |
| <%@ page contentType="text/html;charset=UTF-8" language="java" %> | |
| <html> | |
| <head> | |
| <title>DFC Diagnostics</title> |
andreybpanfilov
/ CVE20160914POC.java
Created
June 23, 2016 02:24
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import java.io.ObjectOutputStream; | |
| import java.net.HttpURLConnection; | |
| import java.net.URL; | |
| import com.documentum.web.security.RandomIdCache; | |
| /** | |
| * @author Andrey B. Panfilov <andrey@panfilov.tel> | |
| */ | |
| public class CVE20160914POC { |
andreybpanfilov
/ DocumentumD2BeanShellPoc.java
Last active
July 3, 2016 15:40
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import java.io.ByteArrayOutputStream; | |
| import java.io.DataOutputStream; | |
| import java.io.InputStream; | |
| import java.io.ObjectOutputStream; | |
| import java.lang.reflect.Constructor; | |
| import java.lang.reflect.Field; | |
| import java.net.HttpURLConnection; | |
| import java.net.URL; | |
| import java.util.ArrayList; | |
| import java.util.Comparator; |
andreybpanfilov
/ DM_NONQUALIFIABLE.sql
Last active
October 2, 2016 11:12
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| CREATE OR REPLACE PACKAGE DM_NONQUALIFIABLE | |
| AS | |
| FUNCTION READ_VALUE (p_object_id IN VARCHAR2, | |
| p_type_name IN VARCHAR2, | |
| p_attr_name IN VARCHAR2) | |
| RETURN CLOB; | |
| FUNCTION READ_VALUE (p_property_bag IN BLOB, | |
| p_attribute_id IN INTEGER, | |
| p_object_id IN VARCHAR2, |
andreybpanfilov
/ threaddump.jsp
Created
November 1, 2016 15:16
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <%@page import="java.io.IOException" %> | |
| <%@page import="java.io.PrintWriter" %> | |
| <%@page import="java.lang.management.LockInfo" %> | |
| <%@page import="java.lang.management.ManagementFactory" %> | |
| <%@page import="java.lang.management.MonitorInfo" %> | |
| <%@ page import="java.lang.management.ThreadInfo" %> | |
| <%@ page import="java.lang.management.ThreadMXBean" %> | |
| <%@ page import="java.util.ArrayList" %> | |
| <%@ page import="java.util.Collections" %> | |
| <%@ page import="java.util.List" %> |
andreybpanfilov
/ dfcsessions.jsp
Last active
November 2, 2016 07:44
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <%@ page import="java.lang.management.LockInfo" %> | |
| <%@ page import="java.lang.management.ManagementFactory" %> | |
| <%@ page import="java.lang.management.MonitorInfo" %> | |
| <%@ page import="java.lang.management.ThreadInfo" %> | |
| <%@ page import="java.lang.management.ThreadMXBean" %> | |
| <%@ page import="java.lang.reflect.Field" %> | |
| <%@ page import="java.net.Socket" %> | |
| <%@ page import="java.util.Collection" %> | |
| <%@ page import="com.documentum.fc.client.impl.connection.docbase.IDocbaseConnection" %> | |
| <%@ page import="com.documentum.fc.client.impl.connection.docbase.IDocbaseRpcClient" %> |
OlderNewer