archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-21 22:50:42 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

refactor: change godzilla websocket base64 to raw

Browse Source
This commit is contained in:
ReaJason
2026-01-18 23:49:41 +08:00
parent bf50918a99
commit b49ad1581f
14 changed files with 128 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integration-test/src/test/java/com/reajason/javaweb/integration/memshell/tomcat/Tomcat10WebSocketBypassNginxTest.java
+40
View File
@@ -1,12 +1,14 @@
package com.reajason.javaweb.integration.memshell.tomcat;
import com.reajason.javaweb.godzilla.BlockingJavaWebSocketClient;
import com.reajason.javaweb.godzilla.GodzillaManager;
import com.reajason.javaweb.integration.ShellAssertion;
import com.reajason.javaweb.memshell.MemShellResult;
import com.reajason.javaweb.memshell.ServerType;
import com.reajason.javaweb.memshell.ShellTool;
import com.reajason.javaweb.memshell.ShellType;
import com.reajason.javaweb.memshell.config.CommandConfig;
import com.reajason.javaweb.memshell.config.GodzillaConfig;
import com.reajason.javaweb.memshell.config.ShellToolConfig;
import com.reajason.javaweb.packer.Packers;
import lombok.extern.slf4j.Slf4j;
@@ -20,6 +22,7 @@ import org.testcontainers.junit.jupiter.Container;
import org.testcontainers.junit.jupiter.Testcontainers;
import java.io.File;
import java.io.IOException;
import static org.junit.jupiter.api.Assertions.assertThrows;
import static org.junit.jupiter.api.Assertions.assertTrue;
@@ -63,6 +66,43 @@ public class Tomcat10WebSocketBypassNginxTest {
assertTrue(response.contains("uid="));
}
@Test
public void testGodzillaWs() {
String url = getUrl();
String server = ServerType.TOMCAT;
String serverVersion = "Unknown";
int targetJdkVersion = Opcodes.V1_8;
String shellType = ShellType.JAKARTA_BYPASS_NGINX_WEBSOCKET;
String shellTool = ShellTool.Godzilla;
Packers packer = Packers.Base64;
Pair<String, String> urls = ShellAssertion.getUrls(url, shellType, shellTool, packer);
String shellUrl = urls.getLeft();
String urlPattern = urls.getRight();
ShellToolConfig shellToolConfig = ShellAssertion.getShellToolConfig(shellType, shellTool, packer);
MemShellResult generateResult = ShellAssertion.generate(urlPattern, server, serverVersion, shellType, shellTool, targetJdkVersion, shellToolConfig, packer);
ShellAssertion.packerResultAndInject(generateResult, url, shellTool, shellType, packer, null);
GodzillaConfig godzillaConfig = (GodzillaConfig) generateResult.getShellToolConfig();
// direct connect ws will cause failed
assertThrows(IllegalStateException.class, () -> {
try (GodzillaManager godzillaManager = GodzillaManager.builder()
.entrypoint(shellUrl).pass(godzillaConfig.getPass())
.key(godzillaConfig.getKey()).build()) {
godzillaManager.start();
}
}, "WebSocket connection is not open.");
// connect by valve bypass will success
try (GodzillaManager godzillaManager = GodzillaManager.builder()
.entrypoint(shellUrl).pass(godzillaConfig.getPass())
.key(godzillaConfig.getKey()).header(godzillaConfig.getHeaderName()
, godzillaConfig.getHeaderValue()).build()) {
assertTrue(godzillaManager.start());
assertTrue(godzillaManager.test());
} catch (IOException e) {
e.printStackTrace();
}
}
public static String getUrl() {
String host = compose.getServiceHost("nginx", 80);
int port = compose.getServicePort("nginx", 80);
integration-test/src/test/java/com/reajason/javaweb/integration/memshell/tomcat/Tomcat8WebSocketBypassNginxTest.java
+39
View File
@@ -1,12 +1,14 @@
package com.reajason.javaweb.integration.memshell.tomcat;
import com.reajason.javaweb.godzilla.BlockingJavaWebSocketClient;
import com.reajason.javaweb.godzilla.GodzillaManager;
import com.reajason.javaweb.integration.ShellAssertion;
import com.reajason.javaweb.memshell.MemShellResult;
import com.reajason.javaweb.memshell.ServerType;
import com.reajason.javaweb.memshell.ShellTool;
import com.reajason.javaweb.memshell.ShellType;
import com.reajason.javaweb.memshell.config.CommandConfig;
import com.reajason.javaweb.memshell.config.GodzillaConfig;
import com.reajason.javaweb.memshell.config.ShellToolConfig;
import com.reajason.javaweb.packer.Packers;
import lombok.extern.slf4j.Slf4j;
@@ -20,6 +22,7 @@ import org.testcontainers.junit.jupiter.Container;
import org.testcontainers.junit.jupiter.Testcontainers;
import java.io.File;
import java.io.IOException;
import static org.junit.jupiter.api.Assertions.assertThrows;
import static org.junit.jupiter.api.Assertions.assertTrue;
@@ -70,4 +73,40 @@ public class Tomcat8WebSocketBypassNginxTest {
String response = BlockingJavaWebSocketClient.sendRequestWaitResponseWithHeader(shellUrl, "id", commandConfig.getHeaderName(), commandConfig.getHeaderValue());
assertTrue(response.contains("uid="));
}
@Test
public void testGodzillaWs() {
String url = getUrl();
String server = ServerType.TOMCAT;
String serverVersion = "Unknown";
int targetJdkVersion = Opcodes.V1_8;
String shellType = ShellType.BYPASS_NGINX_WEBSOCKET;
String shellTool = ShellTool.Godzilla;
Packers packer = Packers.Base64;
Pair<String, String> urls = ShellAssertion.getUrls(url, shellType, shellTool, packer);
String shellUrl = urls.getLeft();
String urlPattern = urls.getRight();
ShellToolConfig shellToolConfig = ShellAssertion.getShellToolConfig(shellType, shellTool, packer);
MemShellResult generateResult = ShellAssertion.generate(urlPattern, server, serverVersion, shellType, shellTool, targetJdkVersion, shellToolConfig, packer);
ShellAssertion.packerResultAndInject(generateResult, url, shellTool, shellType, packer, null);
GodzillaConfig godzillaConfig = (GodzillaConfig) generateResult.getShellToolConfig();
// direct connect ws will cause failed
assertThrows(IllegalStateException.class, () -> {
try (GodzillaManager godzillaManager = GodzillaManager.builder()
.entrypoint(shellUrl).pass(godzillaConfig.getPass())
.key(godzillaConfig.getKey()).build()) {
godzillaManager.start();
}
}, "WebSocket connection is not open.");
// connect by valve bypass will success
try (GodzillaManager godzillaManager = GodzillaManager.builder()
.entrypoint(shellUrl).pass(godzillaConfig.getPass())
.key(godzillaConfig.getKey()).header(godzillaConfig.getHeaderName()
, godzillaConfig.getHeaderValue()).build()) {
assertTrue(godzillaManager.start());
assertTrue(godzillaManager.test());
} catch (IOException e) {
e.printStackTrace();
}
}
}