2024ciscn华北分区赛wp

module_waf=["xss_scan.HtmlXssScan","sqli_scan.UnionSqliScan.MySQLScan","sqli_scan.UnionSqliScan.MsSQLScan","xss_scan.JsXssScan"]
pos_waf=[["param"],["param","body","json"],["param","body"],["body","json"],["param","json"],["body"],["json"]]

flag_m=0
flag_p=0
module_waf=["xss_scan.HtmlXssScan","sqli_scan.UnionSqliScan.MySQLScan","sqli_scan.UnionSqliScan.MsSQLScan","xss_scan.JsXssScan"]
pos_waf=[["param"],["param","body","json"],["param","body"],["body","json"],["param","json"],["body"],["json"]]
for modules in module_waf:
    if module==modules:
        flag_m==1
if flag_m == 0:
    module ==''
for poss in pos_waf:
    if pos==poss:
        flag_p=1
if flag_p == 0:
    pos=''

data = ''.join(L)
blacklists = ["print","cat","flag","nc","bash","sh","curl","{{","}},""wget","ash","session","class","subclasses","for","popen","args","{%","%}"]
for i in blacklists:
    if i in data:
        data=" "

public String api(@RequestParam(value = "apistr",required = false,defaultValue = "") String apistr, Model model) {
        if (apistr.equals("")) {
            model.addAttribute("msg", "{ \"id\": 1, \"name\": \"admin\", \"age\": 21, \"phone\": \"13300000000\" }");
        } else {
            try {
                Fury fury = Fury.builder().withLanguage(Language.JAVA).requireClassRegistration(false).build();
                byte[] decode = Base64.getDecoder().decode(apistr);
                Object person = fury.deserialize(decode);
                JSONObject entries = JSONUtil.parseObj(person);
                model.addAttribute("msg", entries.toString());
            } catch (Exception var7) {
                model.addAttribute("msg", "error apistr");
            }
        }

        return "index";
}

String personbyte=person.getClass().getName();
if(personbyte!="com.fury.Bean.Person"){
    person=" ";
}