feat: support rhino and jinjava packer

This commit is contained in:
ReaJason
2025-01-30 17:24:14 +08:00
parent a6cc7705c3
commit 6113ea717f
17 changed files with 164 additions and 18 deletions
@@ -4,8 +4,8 @@ import com.reajason.javaweb.GeneratorMain;
import com.reajason.javaweb.memshell.SpringWebFluxShell;
import com.reajason.javaweb.memshell.SpringWebMvcShell;
import com.reajason.javaweb.memshell.config.*;
import com.reajason.javaweb.memshell.packer.jar.JarPacker;
import com.reajason.javaweb.memshell.packer.Packers;
import com.reajason.javaweb.memshell.packer.jar.JarPacker;
import lombok.SneakyThrows;
import lombok.extern.slf4j.Slf4j;
import org.testcontainers.containers.GenericContainer;
@@ -151,6 +151,8 @@ public class ShellAssertionTool {
case JEXL -> VulTool.postData(url + "/jexl2", content);
case Aviator -> VulTool.postData(url + "/aviator", content);
case Groovy -> VulTool.postData(url + "/groovy", content);
case Rhino -> VulTool.postData(url + "/rhino", content);
case JinJava -> VulTool.postData(url + "/jinjava", content);
case Freemarker -> VulTool.postData(url + "/freemarker", content);
case Velocity -> VulTool.postData(url + "/velocity", content);
case Deserialize -> VulTool.postData(url + "/java_deserialize", content);
@@ -50,6 +50,8 @@ public class Tomcat8ExpressionContainerTest {
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.JXPath),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Aviator),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Groovy),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Rhino),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.JinJava),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Freemarker),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Velocity)
);