Method ScanMain

BPScan/src/main/java/burp/scan/FastJsonScan.java:24–58

(IHttpRequestResponse baseRequestResponse, IBurpExtenderCallbacks callbacks, IExtensionHelpers helpers, PrintWriter stdout)

    static List<String> FastJsonPayload = YamlReader.getInstance(BurpExtender.getCallbacks()).getStringList("scanModule.FastJsonScan.payload");
    
    public synchronized static List<Object> ScanMain(IHttpRequestResponse baseRequestResponse, IBurpExtenderCallbacks callbacks, IExtensionHelpers helpers, PrintWriter stdout) throws IOException, InterruptedException {
        Features.clear();
        URL url = helpers.analyzeRequest(baseRequestResponse).getUrl();
        String baseurl = url.getProtocol() + "://" + url.getAuthority();
        if(scandone.contains(Common.MD5(baseurl))){
            List<String> headers = helpers.analyzeRequest(baseRequestResponse).getHeaders();
            int bodyOffset = helpers.analyzeRequest(baseRequestResponse.getRequest()).getBodyOffset();
            String resp =new  String(baseRequestResponse.getRequest());
            String respbody = resp.substring(bodyOffset);
            stdout.println("fastjson 测试请求包内容为:" + respbody.trim().replace("\\r",""));
            List<String> pocs = JsonParmAddPoc(respbody.trim().replace("\\r",""));
            if(pocs != null){
                stdout.println("成功获取poc！");
                for(String poc:pocs){
                    List<Object> Success = new ArrayList<>();
                    byte[] request_bodys = poc.getBytes();
                    byte[] body = helpers.buildHttpMessage(setHeader(headers), request_bodys);
                    IHttpRequestResponse requestResponse = callbacks.makeHttpRequest(baseRequestResponse.getHttpService(), body);
                    String data = Common.ceyeResult();
                    for(String randString:Features){
                        if(data.contains(randString)){
                            stdout.println("Fastjson Rce find! 匹配randString值为: " + randString);
                            scandone.add(Common.MD5(baseurl));
                            Success.add(requestResponse);
                            Success.add(randString);
                            return Success;
                        }
                    }
                }
            }
        }else{
            stdout.println(baseurl + " Fastjson rce已扫描，跳过～");
        }
        return null;
    }


    public static List<String> setHeader(List<String> headers){