archive/MemShellParty
1
0
Fork 0
mirror of https://github.com/ReaJason/MemShellParty.git synced 2026-09-21 22:50:42 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

test: support bypass CSRF

Browse Source
This commit is contained in:
ReaJason
2025-11-20 00:36:25 +08:00
parent 2675991711
commit f41a0a82b6
5 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
integration-test/src/test/java/com/reajason/javaweb/integration/ShellAssertion.java
+3 -3
View File
@@ -174,7 +174,7 @@ public class ShellAssertion {
private static void neoreGeorgIsOk(GenericContainer<?> container, GenericContainer<?> pythonContainer, String shellUrl, NeoreGeorgConfig shellToolConfig) throws Exception {
URL url = new URL(shellUrl);
shellUrl = "http://app:" + container.getExposedPorts().stream().findFirst().get() + url.getPath();
String stdout = pythonContainer.execInContainer("python", "/app/neoreg.py", "-k", "key", "-H", shellToolConfig.getHeaderName() + ": " + shellToolConfig.getHeaderValue(), "-u", shellUrl).getStdout();
String stdout = pythonContainer.execInContainer("python", "/app/neoreg.py", "-k", "key", "-H", shellToolConfig.getHeaderName() + ": " + shellUrl + "?" + shellToolConfig.getHeaderValue(), "-u", shellUrl).getStdout();
log.info(stdout);
assertTrue(stdout.contains("All seems fine"));
}
@@ -231,8 +231,8 @@ public class ShellAssertion {
AntSwordManager antSwordManager = AntSwordManager.builder()
.entrypoint(entrypoint)
.pass(shellConfig.getPass())
.header(shellConfig.getHeaderName()
, shellConfig.getHeaderValue()).build();
.header(shellConfig.getHeaderName(), shellConfig.getHeaderValue())
.build();
assertTrue(antSwordManager.getInfo().contains("ok"));
}
integration-test/src/test/java/com/reajason/javaweb/integration/VulTool.java
+3
View File
@@ -37,6 +37,7 @@ public class VulTool {
.build();
Request request = new Request.Builder()
.url(uploadUrl).post(requestBody)
.header("Referer", uploadUrl)
.build();
try (Response response = new OkHttpClient().newCall(request).execute()) {
System.out.println(response.body().string());
@@ -51,6 +52,7 @@ public class VulTool {
.build();
Request request = new Request.Builder()
.header("Content-Type", "application/x-www-form-urlencoded")
.header("Referer", uploadUrl)
.url(uploadUrl).post(requestBody)
.build();
try (Response response = new OkHttpClient().newCall(request).execute()) {
@@ -66,6 +68,7 @@ public class VulTool {
.build();
Request request = new Request.Builder()
.header("Content-Type", "application/x-www-form-urlencoded")
.header("Referer", uploadUrl)
.url(uploadUrl).post(requestBody)
.build();
try (Response response = new OkHttpClient().newCall(request).execute()) {