apache shiro
参考文章
https://xz.aliyun.com/t/7793
http://blog.topsec.com.cn/apache-shiro-反序列化漏洞原理详解/
https://blog.csdn.net/m0_46363249/article/details/122259407
https://baijiahao.baidu.com/s?id=1673619880958819406&wfr=spider&for=pc
https://blog.csdn.net/weixin_45605352/article/details/116846678
https://www.cnblogs.com/h0cksr/p/16189780.html
https://su18.org/post/shiro-2/#cve-2016-4437
https://su18.org/post/shiro-2/#cve-2019-12422
https://github.com/Y4tacker/JavaSec#12shiro
https://www.freebuf.com/articles/web/312195.html