feat: support bsh packer

This commit is contained in:
ReaJason
2025-01-30 18:09:44 +08:00
parent 1f94ca41f6
commit b9c05453ef
17 changed files with 85 additions and 36 deletions
@@ -152,12 +152,14 @@ public class ShellAssertionTool {
case Aviator -> VulTool.postData(url + "/aviator", content);
case Groovy -> VulTool.postData(url + "/groovy", content);
case Rhino -> VulTool.postData(url + "/rhino", content);
case BSH -> VulTool.postData(url + "/bsh", content);
case JinJava -> VulTool.postData(url + "/jinjava", content);
case Freemarker -> VulTool.postData(url + "/freemarker", content);
case Velocity -> VulTool.postData(url + "/velocity", content);
case Deserialize -> VulTool.postData(url + "/java_deserialize", content);
case Base64 -> VulTool.postData(url + "/b64", content);
case XxlJob -> VulTool.xxlJobExecutor(url + "/run", content);
default -> throw new IllegalStateException("Unexpected value: " + packer);
}
}
}
@@ -49,6 +49,7 @@ public class Tomcat8ExpressionContainerTest {
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.JEXL),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.JXPath),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Aviator),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.BSH),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Groovy),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.Rhino),
arguments(imageName, Constants.FILTER, ShellTool.Godzilla, Packers.JinJava),
@@ -60,6 +61,7 @@ public class Tomcat8ExpressionContainerTest {
@AfterAll
static void tearDown() {
String logs = container.getLogs();
log.info(logs);
assertThat("Logs should not contain any exceptions", logs, doesNotContainException());
}