java反射和反序列化破解单例模式和填补漏洞方法

反射:

    public class Destruct {

    public static void main(String[] args) throws Exception {

        Class clazz=Class.forName("co.sxt.in.Design");
        Constructor<Design> c=clazz.getDeclaredConstructor(); 
        c.setAccessible(true);  //拜访私有属性跳过安全检讨
        Design d3=c.newInstance();
        Design d4=c.newInstance();

        System.out.println(d3);
        System.out.println(d4); //此时会创立两个不同的对象

}    public class Destruct {

    public stati