feat: support simple obfuscation (#13)

Author: ReaJason

bom/build.gradle

@@ -6,6 +6,7 @@ dependencies {
     constraints {
         api 'net.bytebuddy:byte-buddy:1.+'
         api 'org.ow2.asm:asm-commons:9.7.1'
+        api 'com.github.jar-analyzer:class-obf:1.5.0'
 
         api 'javax.servlet:javax.servlet-api:3.0.1'
         api 'jakarta.servlet:jakarta.servlet-api:6.0.0'

build.gradle

@@ -12,10 +12,6 @@ allprojects {
             implementation platform(project(':bom'))
         }
     }
-
-    repositories {
-        mavenCentral()
-    }
 }
 
 idea {

generator/build.gradle

@@ -39,6 +39,7 @@ dependencies {
     implementation project(":memshell-java8")
     implementation 'net.bytebuddy:byte-buddy'
     implementation 'org.ow2.asm:asm-commons'
+    implementation 'com.github.jar-analyzer:class-obf'
 
     implementation 'javax.servlet:javax.servlet-api'
     implementation 'javax.websocket:javax.websocket-api'

generator/src/main/java/com/reajason/javaweb/memshell/MemShellGenerator.java

@@ -4,6 +4,8 @@
 import com.reajason.javaweb.memshell.generator.*;
 import com.reajason.javaweb.memshell.server.AbstractShell;
 import com.reajason.javaweb.memshell.utils.CommonUtil;
+import me.n1ar4.clazz.obfuscator.api.ClassObf;
+import me.n1ar4.clazz.obfuscator.config.BaseConfig;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.commons.lang3.tuple.Pair;
 
@@ -46,12 +48,39 @@ public static GenerateResult generate(ShellConfig shellConfig, InjectorConfig in
 
         byte[] shellBytes = generateShellBytes(shellConfig, shellToolConfig);
 
+        if (shellConfig.isObfuscate()) {
+            BaseConfig config = BaseConfig.Default();
+            config.setIgnorePublic(true);
+            config.setEnableMethodName(false);
+            config.setEnableFieldName(false);
+            config.setEnableAES(false);
+            config.setEnableAdvanceString(false);
+            config.setQuiet(true);
+
+            ClassObf classObf = new ClassObf(config);
+            shellBytes = classObf.run(shellBytes).getData();
+        }
+
         injectorConfig.setInjectorClass(injectorClass);
         injectorConfig.setShellClassName(shellToolConfig.getShellClassName());
         injectorConfig.setShellClassBytes(shellBytes);
 
         InjectorGenerator injectorGenerator = new InjectorGenerator(shellConfig, injectorConfig);
         byte[] injectorBytes = injectorGenerator.generate();
+
+        if (shellConfig.isObfuscate()) {
+            BaseConfig config = BaseConfig.Default();
+            config.setIgnorePublic(true);
+            config.setEnableMethodName(false);
+            config.setEnableFieldName(false);
+            config.setEnableAES(false);
+            config.setEnableAdvanceString(false);
+            config.setQuiet(true);
+
+            ClassObf classObf = new ClassObf(config);
+            injectorBytes = classObf.run(injectorBytes).getData();
+        }
+
         Map<String, byte[]> innerClassBytes = injectorGenerator.getInnerClassBytes();
 
         return GenerateResult.builder()

integration-test/src/test/java/com/reajason/javaweb/integration/ShellAssertionTool.java

@@ -232,8 +232,13 @@ public static GenerateResult generate(String urlPattern, Server server, String s
                 .targetJreVersion(targetJdkVersion)
                 .debug(true)
                 .shrink(true)
+                .obfuscate(true)
                 .build();
 
+        if (ShellTool.NeoreGeorg.equals(shellTool)) {
+            shellConfig.setObfuscate(false);
+        }
+
         ShellToolConfig shellToolConfig = null;
         String uniqueName = shellTool + RandomStringUtils.randomAlphabetic(5) + shellType + RandomStringUtils.randomAlphabetic(5) + packer.name();
         switch (shellTool) {

memshell-agent/memshell-agent-asm/build.gradle

@@ -6,10 +6,6 @@ plugins {
 group = 'com.reajason.javaweb'
 version = '1.0.0'
 
-repositories {
-    mavenCentral()
-}
-
 java {
     toolchain {
         languageVersion = JavaLanguageVersion.of(8)

memshell-agent/memshell-agent-bytebuddy/build.gradle

@@ -5,9 +5,6 @@ plugins {
 group = 'com.reajason.javaweb'
 version = '1.0.0'
 
-repositories {
-    mavenCentral()
-}
 
 dependencies {
     testImplementation platform('org.junit:junit-bom:5.10.0')

memshell-agent/memshell-agent-javassist/build.gradle

@@ -5,10 +5,6 @@ plugins {
 group = 'com.reajason.javaweb'
 version = '1.0.0'
 
-repositories {
-    mavenCentral()
-}
-
 dependencies {
     testImplementation platform('org.junit:junit-bom:5.10.0')
     testImplementation 'org.junit.jupiter:junit-jupiter'

settings.gradle

@@ -2,6 +2,14 @@ plugins {
     id 'org.gradle.toolchains.foojay-resolver-convention' version '0.9.0'
 }
 
+dependencyResolutionManagement {
+    repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
+    repositories {
+        mavenCentral()
+        maven { url 'https://jitpack.io' }
+    }
+}
+
 rootProject.name = 'MemShellParty'
 
 include 'bom'

vul/vul-springboot1/build.gradle

@@ -8,10 +8,6 @@ java {
     sourceCompatibility = JavaVersion.VERSION_1_8
 }
 
-repositories {
-    mavenCentral()
-}
-
 configurations {
     providedRuntime
 }