From 175c20d230a4d3c31d38eaf36accb24945b29db1 Mon Sep 17 00:00:00 2001
From: qi4L <qi4l@qq.com>
Date: Wed, 31 Dec 2025 10:01:00 +0800
Subject: [PATCH] =?UTF-8?q?fix(com/qi4l/JYso/gadgets/utils/dirty/DirtyData?=
 =?UTF-8?q?Wrapper.java):=20=E4=BF=AE=E5=A4=8Dtype=E9=9A=8F=E6=9C=BA?=
 =?UTF-8?q?=E6=95=B0=E8=8C=83=E5=9B=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 AGENTS.md                                     | 33 +++++++++++++++++++
 .../gadgets/utils/dirty/DirtyDataWrapper.java |  2 +-
 2 files changed, 34 insertions(+), 1 deletion(-)
 create mode 100644 AGENTS.md

diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..cee8c16
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,33 @@
+# Repository Guidelines
+回答时使用中文来进行回答。
+
+## Project Structure & Module Organization
+- `src/main/java/com/qi4l/JYso`: core servers, controllers, gadget builders, and templates. Keep new code inside relevant packages (e.g., `controllers`, `gadgets`, `template`) to preserve classpath scanning.
+- `src/test/java`: regression samples and harness stubs; mirror production packages when adding tests.
+- `docs/`: usage notes and vulnerability background material—extend this when adding new exploit flows.
+- `libs/`: vendor JARs referenced via `build.gradle`. Avoid committing additional binaries without documenting the source.
+
+## Build, Test, and Development Commands
+- `./gradlew clean build` (Windows: `.\gradlew.bat clean build`): compiles sources, runs unit tests, and assembles the default JARs.
+- `./gradlew shadowJar`: produces the fat JAR with `com.qi4l.JYso.Starter` as the entry point in `build/libs/JYso-1.3.6.jar`.
+- `java -jar build/libs/JYso-1.3.6.jar --help`: quick smoke check that lists CLI options without contacting remote targets.
+
+## Coding Style & Naming Conventions
+- Java 8 source level, 4-space indentation, UTF-8 encoding enforced by Gradle.
+- Classes/interfaces: `UpperCamelCase`; methods/fields: `lowerCamelCase`; constants: `UPPER_SNAKE_CASE`.
+- Preserve the existing package naming (`com.qi4l.JYso.*`) and keep controller annotations adjacent to the class declaration for discoverability.
+- Favor focused helpers over long procedural methods; inline comments only when the intent is not obvious (e.g., protocol quirks).
+
+## Testing Guidelines
+- Use the default Gradle `test` task; tests should extend JUnit 4 or 5 (see existing examples under `src/test/java/com/example/demo`).
+- Name test classes `*Test` and mirror the production package path.
+- When adding complex gadgets, add at least a smoke test that exercises class resolution without hitting external services.
+
+## Commit & Pull Request Guidelines
+- Commit messages: short imperative subject (`Add Tomcat memshell helper`), include scope when clear (`controller`, `gadget`, `build`).
+- Group related edits; avoid bundling code generation, docs, and binaries in a single commit.
+- Pull requests should describe the behaviour change, list manual/automated tests, and mention any new configuration or network requirements. Attach reproduction steps or sample LDAP/HTTP commands when applicable.
+
+## Security & Configuration Tips
+- Never hard-code operator infrastructure; continue reading host/port data from CLI or encoded payload segments.
+- Validate any third-party gadget updates against the `libs/` directory and document new dependencies inside `build.gradle`.
diff --git a/src/main/java/com/qi4l/JYso/gadgets/utils/dirty/DirtyDataWrapper.java b/src/main/java/com/qi4l/JYso/gadgets/utils/dirty/DirtyDataWrapper.java
index 4f5b056..e95952a 100644
--- a/src/main/java/com/qi4l/JYso/gadgets/utils/dirty/DirtyDataWrapper.java
+++ b/src/main/java/com/qi4l/JYso/gadgets/utils/dirty/DirtyDataWrapper.java
@@ -51,7 +51,7 @@ public class DirtyDataWrapper {
                 String randStr1 = new RandomString((int) (Math.random() * 10) % 10 + 1, ThreadLocalRandom.current()).getString();
                 String randStr2 = new RandomString((int) (Math.random() * 10) % 10 + 1, ThreadLocalRandom.current()).getString();
                 // 随机选择封装对象
-                int type = (int) (Math.random() * 10) % 10 + 1;
+                int type = ThreadLocalRandom.current().nextInt(5);
                 switch (type) {
                     case 0:
                         List<Object> arrayList = new ArrayList<Object>();