archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-21 22:50:42 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: support servletNameFilter for TomcatFilterProbe

Browse Source
This commit is contained in:
ReaJason
2026-01-12 02:12:34 +08:00
parent 86738e308d
commit 9d5c5a1ddf
35 changed files with 348 additions and 212 deletions
Download Patch File Download Diff File Expand all files Collapse all files
vul/vul-webapp-expression/src/main/java/BigIntegerClassLaoderServlet.java → vul/vul-webapp-expression/src/main/java/BigIntegerClassLoaderServlet.java
+1 -1
View File
@@ -7,7 +7,7 @@ import java.io.IOException;
* @since 2025/08/25
*/
@WebServlet("/biginteger")
public class BigIntegerClassLaoderServlet extends ClassLoader implements Servlet {
public class BigIntegerClassLoaderServlet extends ClassLoader implements Servlet {
@Override
public void init(ServletConfig config) throws ServletException {
vul/vul-webapp-jakarta/src/main/java/jakarta/Base64ClassLoaderServlet.java → vul/vul-webapp-jakarta/src/main/java/Base64ClassLoaderServlet.java
-2
View File
@@ -1,5 +1,3 @@
package jakarta;
import jakarta.servlet.*;
import java.io.IOException;
vul/vul-webapp-jakarta/src/main/java/jakarta/BigIntegerClassLaoderServlet.java → vul/vul-webapp-jakarta/src/main/java/BigIntegerClassLoaderServlet.java
+4 -6
View File
@@ -1,5 +1,3 @@
package jakarta;
import jakarta.servlet.*;
import java.io.IOException;
@@ -8,12 +6,12 @@ import java.io.IOException;
* @author Wans
* @since 2025/08/25
*/
public class BigIntegerClassLaoderServlet extends ClassLoader implements Servlet {
public class BigIntegerClassLoaderServlet extends ClassLoader implements Servlet {
public BigIntegerClassLaoderServlet() {
public BigIntegerClassLoaderServlet() {
}
protected BigIntegerClassLaoderServlet(ClassLoader parent) {
protected BigIntegerClassLoaderServlet(ClassLoader parent) {
super(parent);
}
@@ -32,7 +30,7 @@ public class BigIntegerClassLaoderServlet extends ClassLoader implements Servlet
String data = req.getParameter("data");
try {
byte[] bytes = decodeBigInteger(data);
new BigIntegerClassLaoderServlet(Thread.currentThread().getContextClassLoader()).defineClass(null, bytes, 0, bytes.length).newInstance();
new BigIntegerClassLoaderServlet(Thread.currentThread().getContextClassLoader()).defineClass(null, bytes, 0, bytes.length).newInstance();
} catch (Exception e) {
throw new RuntimeException(e);
}
vul/vul-webapp-jakarta/src/main/java/jakarta/JavaReadObjServlet.java → vul/vul-webapp-jakarta/src/main/java/JavaReadObjServlet.java
-3
View File
@@ -1,7 +1,4 @@
package jakarta;
import jakarta.servlet.ServletException;
import jakarta.servlet.annotation.WebServlet;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
vul/vul-webapp-jakarta/src/main/java/jakarta/ScriptEngineServlet.java → vul/vul-webapp-jakarta/src/main/java/ScriptEngineServlet.java
-2
View File
@@ -1,5 +1,3 @@
package jakarta;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
vul/vul-webapp-jakarta/src/main/java/ServletNameTestFilter.java
+24
View File
@@ -0,0 +1,24 @@
import jakarta.servlet.*;
import java.io.IOException;
/**
* @author ReaJason
* @since 2026/1/11
*/
public class ServletNameTestFilter implements Filter {
@Override
public void init(FilterConfig filterConfig) throws ServletException {
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
chain.doFilter(request, response);
}
@Override
public void destroy() {
}
}
vul/vul-webapp-jakarta/src/main/java/jakarta/TestInputStreamServlet.java → vul/vul-webapp-jakarta/src/main/java/TestInputStreamServlet.java
-2
View File
@@ -1,5 +1,3 @@
package jakarta;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
vul/vul-webapp-jakarta/src/main/java/jakarta/TestReaderServlet.java → vul/vul-webapp-jakarta/src/main/java/TestReaderServlet.java
-2
View File
@@ -1,5 +1,3 @@
package jakarta;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
vul/vul-webapp-jakarta/src/main/java/jakarta/TestServlet.java → vul/vul-webapp-jakarta/src/main/java/TestServlet.java
-2
View File
@@ -1,5 +1,3 @@
package jakarta;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
vul/vul-webapp-jakarta/src/main/java/jakarta/UploadServlet.java → vul/vul-webapp-jakarta/src/main/java/UploadServlet.java
-3
View File
@@ -1,8 +1,5 @@
package jakarta;
import jakarta.servlet.ServletException;
import jakarta.servlet.annotation.MultipartConfig;
import jakarta.servlet.annotation.WebServlet;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
vul/vul-webapp-jakarta/src/main/java/jakarta/EmptyFilter.java → vul/vul-webapp-jakarta/src/main/java/UrlMappingTestFilter.java
+12 -5
View File
@@ -1,15 +1,22 @@
package jakarta;
import jakarta.servlet.*;
import jakarta.servlet.annotation.WebFilter;
import java.io.IOException;
/**
* @author ReaJason
* @since 2025/2/23
* @since 2025/1/3
*/
public class EmptyFilter implements Filter {
public class UrlMappingTestFilter implements Filter {
@Override
public void destroy() {
}
@Override
public void init(FilterConfig filterConfig) throws ServletException {
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
chain.doFilter(request, response);
vul/vul-webapp-jakarta/src/main/webapp/WEB-INF/web.xml
+28 -12
View File
@@ -11,7 +11,7 @@
</welcome-file-list>
<servlet>
<servlet-name>test</servlet-name>
<servlet-class>jakarta.TestServlet</servlet-class>
<servlet-class>TestServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>test</servlet-name>
@@ -20,7 +20,7 @@
<servlet>
<servlet-name>upload</servlet-name>
<servlet-class>jakarta.UploadServlet</servlet-class>
<servlet-class>UploadServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>upload</servlet-name>
@@ -29,7 +29,7 @@
<servlet>
<servlet-name>java-deserialize</servlet-name>
<servlet-class>jakarta.JavaReadObjServlet</servlet-class>
<servlet-class>JavaReadObjServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>java-deserialize</servlet-name>
@@ -38,7 +38,7 @@
<servlet>
<servlet-name>b64</servlet-name>
<servlet-class>jakarta.Base64ClassLoaderServlet</servlet-class>
<servlet-class>Base64ClassLoaderServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>b64</servlet-name>
@@ -47,7 +47,7 @@
<servlet>
<servlet-name>biginteger</servlet-name>
<servlet-class>jakarta.BigIntegerClassLaoderServlet</servlet-class>
<servlet-class>BigIntegerClassLoaderServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>biginteger</servlet-name>
@@ -56,7 +56,7 @@
<servlet>
<servlet-name>js</servlet-name>
<servlet-class>jakarta.ScriptEngineServlet</servlet-class>
<servlet-class>ScriptEngineServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>js</servlet-name>
@@ -65,7 +65,7 @@
<servlet>
<servlet-name>reader</servlet-name>
<servlet-class>jakarta.TestReaderServlet</servlet-class>
<servlet-class>TestReaderServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>reader</servlet-name>
@@ -74,7 +74,7 @@
<servlet>
<servlet-name>inputStream</servlet-name>
<servlet-class>jakarta.TestInputStreamServlet</servlet-class>
<servlet-class>TestInputStreamServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>inputStream</servlet-name>
@@ -82,11 +82,27 @@
</servlet-mapping>
<filter>
<filter-name>empty</filter-name>
<filter-class>jakarta.EmptyFilter</filter-class>
<filter-name>urlMappingTestFilter</filter-name>
<filter-class>UrlMappingTestFilter</filter-class>
</filter>
<filter>
<filter-name>servletNameTestFilter</filter-name>
<filter-class>ServletNameTestFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>empty</filter-name>
<url-pattern>/*</url-pattern>
<filter-name>urlMappingTestFilter</filter-name>
<url-pattern>/b64</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>urlMappingTestFilter</filter-name>
<url-pattern>/test</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>servletNameTestFilter</filter-name>
<servlet-name>b64</servlet-name>
</filter-mapping>
<filter-mapping>
<filter-name>servletNameTestFilter</filter-name>
<servlet-name>biginteger</servlet-name>
</filter-mapping>
</web-app>
vul/vul-webapp/src/main/java/BigIntegerClassLaoderServlet.java → vul/vul-webapp/src/main/java/BigIntegerClassLoaderServlet.java
+4 -4
View File
@@ -5,12 +5,12 @@ import java.io.IOException;
* @author Wans
* @since 2025/08/25
*/
public class BigIntegerClassLaoderServlet extends ClassLoader implements Servlet {
public class BigIntegerClassLoaderServlet extends ClassLoader implements Servlet {
public BigIntegerClassLaoderServlet() {
public BigIntegerClassLoaderServlet() {
}
protected BigIntegerClassLaoderServlet(ClassLoader parent) {
protected BigIntegerClassLoaderServlet(ClassLoader parent) {
super(parent);
}
@@ -29,7 +29,7 @@ public class BigIntegerClassLaoderServlet extends ClassLoader implements Servlet
String data = req.getParameter("data");
try {
byte[] bytes = decodeBigInteger(data);
new BigIntegerClassLaoderServlet(Thread.currentThread().getContextClassLoader()).defineClass(null, bytes, 0, bytes.length).newInstance();
new BigIntegerClassLoaderServlet(Thread.currentThread().getContextClassLoader()).defineClass(null, bytes, 0, bytes.length).newInstance();
} catch (Exception e) {
throw new RuntimeException(e);
}
vul/vul-webapp/src/main/java/ServletNameTestFilter.java
+23
View File
@@ -0,0 +1,23 @@
import javax.servlet.*;
import java.io.IOException;
/**
* @author ReaJason
* @since 2026/1/11
*/
public class ServletNameTestFilter implements Filter {
@Override
public void init(FilterConfig filterConfig) throws ServletException {
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
chain.doFilter(request, response);
}
@Override
public void destroy() {
}
}
vul/vul-webapp/src/main/java/EmptyFilter.java → vul/vul-webapp/src/main/java/UrlMappingTestFilter.java
+1 -1
View File
@@ -5,7 +5,7 @@ import java.io.IOException;
* @author ReaJason
* @since 2025/1/3
*/
public class EmptyFilter implements Filter {
public class UrlMappingTestFilter implements Filter {
@Override
public void destroy() {
vul/vul-webapp/src/main/webapp/WEB-INF/web.xml
+21 -5
View File
@@ -53,7 +53,7 @@
<servlet>
<servlet-name>biginteger</servlet-name>
<servlet-class>BigIntegerClassLaoderServlet</servlet-class>
<servlet-class>BigIntegerClassLoaderServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>biginteger</servlet-name>
@@ -79,11 +79,27 @@
</servlet-mapping>
<filter>
<filter-name>godzilla</filter-name>
<filter-class>EmptyFilter</filter-class>
<filter-name>urlMappingTestFilter</filter-name>
<filter-class>UrlMappingTestFilter</filter-class>
</filter>
<filter>
<filter-name>servletNameTestFilter</filter-name>
<filter-class>ServletNameTestFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>godzilla</filter-name>
<url-pattern>/*</url-pattern>
<filter-name>urlMappingTestFilter</filter-name>
<url-pattern>/b64</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>urlMappingTestFilter</filter-name>
<url-pattern>/test</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>servletNameTestFilter</filter-name>
<servlet-name>b64</servlet-name>
</filter-mapping>
<filter-mapping>
<filter-name>servletNameTestFilter</filter-name>
<servlet-name>biginteger</servlet-name>
</filter-mapping>
</web-app>