456 lines
18 KiB
Java
456 lines
18 KiB
Java
package hae.component.board.message;
|
||
|
||
import burp.api.montoya.MontoyaApi;
|
||
import burp.api.montoya.core.ByteArray;
|
||
import burp.api.montoya.http.message.HttpHeader;
|
||
import burp.api.montoya.http.message.HttpRequestResponse;
|
||
import burp.api.montoya.http.message.requests.HttpRequest;
|
||
import burp.api.montoya.http.message.responses.HttpResponse;
|
||
import burp.api.montoya.ui.UserInterface;
|
||
import burp.api.montoya.ui.editor.HttpRequestEditor;
|
||
import burp.api.montoya.ui.editor.HttpResponseEditor;
|
||
import hae.Config;
|
||
import hae.cache.CachePool;
|
||
import hae.utils.string.HashCalculator;
|
||
import hae.utils.string.StringProcessor;
|
||
|
||
import java.nio.charset.StandardCharsets;
|
||
import java.text.MessageFormat;
|
||
import java.util.*;
|
||
import javax.swing.JScrollPane;
|
||
import javax.swing.JSplitPane;
|
||
import javax.swing.JTabbedPane;
|
||
import javax.swing.JTable;
|
||
import javax.swing.SwingWorker;
|
||
import javax.swing.table.AbstractTableModel;
|
||
import javax.swing.table.DefaultTableModel;
|
||
import javax.swing.table.TableModel;
|
||
import javax.swing.table.TableRowSorter;
|
||
import java.util.concurrent.atomic.AtomicBoolean;
|
||
import java.util.stream.Collectors;
|
||
|
||
import static burp.api.montoya.ui.editor.EditorOptions.READ_ONLY;
|
||
|
||
public class MessageTableModel extends AbstractTableModel {
|
||
private final MontoyaApi api;
|
||
private final MessageTable messageTable;
|
||
private final JTabbedPane messageTab;
|
||
private final JSplitPane splitPane;
|
||
private final List<MessageEntry> log = new ArrayList<MessageEntry>();
|
||
private LinkedList<MessageEntry> filteredLog;
|
||
|
||
public MessageTableModel(MontoyaApi api) {
|
||
this.filteredLog = new LinkedList<>();
|
||
this.api = api;
|
||
|
||
messageTab = new JTabbedPane();
|
||
UserInterface userInterface = api.userInterface();
|
||
HttpRequestEditor requestViewer = userInterface.createHttpRequestEditor(READ_ONLY);
|
||
HttpResponseEditor responseViewer = userInterface.createHttpResponseEditor(READ_ONLY);
|
||
messageTab.addTab("Request", requestViewer.uiComponent());
|
||
messageTab.addTab("Response", responseViewer.uiComponent());
|
||
|
||
// 请求条目表格
|
||
messageTable = new MessageTable(MessageTableModel.this, requestViewer, responseViewer);
|
||
messageTable.setDefaultRenderer(Object.class, new MessageRenderer(filteredLog, messageTable));
|
||
messageTable.setAutoCreateRowSorter(true);
|
||
|
||
// Length字段根据大小进行排序
|
||
TableRowSorter<DefaultTableModel> sorter = (TableRowSorter<DefaultTableModel>) messageTable.getRowSorter();
|
||
sorter.setComparator(4, new Comparator<String>() {
|
||
@Override
|
||
public int compare(String s1, String s2) {
|
||
Integer age1 = Integer.parseInt(s1);
|
||
Integer age2 = Integer.parseInt(s2);
|
||
return age1.compareTo(age2);
|
||
}
|
||
});
|
||
|
||
// Color字段根据颜色顺序进行排序
|
||
sorter.setComparator(5, new Comparator<String>() {
|
||
@Override
|
||
public int compare(String s1, String s2) {
|
||
int index1 = getIndex(s1);
|
||
int index2 = getIndex(s2);
|
||
return Integer.compare(index1, index2);
|
||
}
|
||
private int getIndex(String color) {
|
||
for (int i = 0; i < Config.color.length; i++) {
|
||
if (Config.color[i].equals(color)) {
|
||
return i;
|
||
}
|
||
}
|
||
return -1;
|
||
}
|
||
});
|
||
messageTable.setRowSorter(sorter);
|
||
messageTable.setAutoResizeMode(JTable.AUTO_RESIZE_OFF);
|
||
|
||
splitPane = new JSplitPane(JSplitPane.VERTICAL_SPLIT);
|
||
// 请求/相应文本框
|
||
JScrollPane scrollPane = new JScrollPane(messageTable);
|
||
scrollPane.setHorizontalScrollBarPolicy(JScrollPane.HORIZONTAL_SCROLLBAR_ALWAYS);
|
||
scrollPane.setVerticalScrollBarPolicy(JScrollPane.VERTICAL_SCROLLBAR_ALWAYS);
|
||
splitPane.setLeftComponent(scrollPane);
|
||
splitPane.setRightComponent(messageTab);
|
||
}
|
||
|
||
public void add(HttpRequestResponse messageInfo, String comment, String color) {
|
||
synchronized(log) {
|
||
HttpRequest httpRequest = messageInfo.request();
|
||
String url = httpRequest.url();
|
||
String method = httpRequest.method();
|
||
|
||
HttpResponse httpResponse = messageInfo.response();
|
||
String status = String.valueOf(httpResponse.statusCode());
|
||
String length = String.valueOf(httpResponse.body().length());
|
||
|
||
MessageEntry logEntry = new MessageEntry(messageInfo, method, url, comment, length, color, status);
|
||
|
||
try {
|
||
// 比较Hash，如若存在重复的请求或响应，则不放入消息内容里
|
||
byte[] reqByteA = httpRequest.toByteArray().getBytes();
|
||
byte[] resByteA = httpResponse.toByteArray().getBytes();
|
||
boolean isDuplicate = false;
|
||
|
||
if (log.size() > 0) {
|
||
for (MessageEntry entry : log) {
|
||
HttpRequestResponse reqResMessage = entry.getRequestResponse();
|
||
byte[] reqByteB = reqResMessage.request().toByteArray().getBytes();
|
||
byte[] resByteB = reqResMessage.response().toByteArray().getBytes();
|
||
try {
|
||
// 通过URL、请求和响应报文、匹配数据内容，多维度进行对比
|
||
if ((entry.getUrl().toString().equals(url.toString()) || (Arrays.equals(reqByteB, reqByteA) || Arrays.equals(resByteB, resByteA))) && (areMapsEqual(getCacheData(reqByteB), getCacheData(reqByteA)) && areMapsEqual(getCacheData(resByteB), getCacheData(resByteA)))) {
|
||
isDuplicate = true;
|
||
break;
|
||
}
|
||
} catch (Exception ignored) {
|
||
}
|
||
}
|
||
}
|
||
|
||
if (!isDuplicate) {
|
||
log.add(logEntry);
|
||
}
|
||
} catch (Exception ignored) {
|
||
}
|
||
}
|
||
|
||
}
|
||
|
||
public void deleteByHost(String filterText) {
|
||
filteredLog.clear();
|
||
List<Integer> rowsToRemove = new ArrayList<>();
|
||
for (int i = 0; i < log.size(); i++) {
|
||
MessageEntry entry = log.get(i);
|
||
String host = StringProcessor.getHostByUrl(entry.getUrl());
|
||
if (!host.isEmpty()) {
|
||
if (StringProcessor.matchFromEnd(host, filterText) || filterText.contains("*")) {
|
||
rowsToRemove.add(i);
|
||
}
|
||
}
|
||
}
|
||
|
||
for (int i = rowsToRemove.size() - 1; i >= 0; i--) {
|
||
int row = rowsToRemove.get(i);
|
||
log.remove(row);
|
||
}
|
||
|
||
if (!rowsToRemove.isEmpty()) {
|
||
int[] rows = rowsToRemove.stream().mapToInt(Integer::intValue).toArray();
|
||
fireTableRowsDeleted(rows[0], rows[rows.length - 1]);
|
||
}
|
||
}
|
||
|
||
public void applyHostFilter(String filterText) {
|
||
filteredLog.clear();
|
||
fireTableDataChanged();
|
||
String cleanedText = StringProcessor.replaceFirstOccurrence(filterText, "*.", "");
|
||
|
||
for (MessageEntry entry : log) {
|
||
String host = StringProcessor.getHostByUrl(entry.getUrl());
|
||
if (!host.isEmpty()) {
|
||
if (filterText.contains("*.") && StringProcessor.matchFromEnd(host, cleanedText)) {
|
||
filteredLog.add(entry);
|
||
} else if (host.equals(filterText) || filterText.contains("*")) {
|
||
filteredLog.add(entry);
|
||
}
|
||
}
|
||
}
|
||
|
||
fireTableDataChanged();
|
||
}
|
||
|
||
public void applyMessageFilter(String tableName, String filterText) {
|
||
filteredLog.clear();
|
||
for (MessageEntry entry : log) {
|
||
HttpRequestResponse requestResponse = entry.getRequestResponse();
|
||
HttpRequest httpRequest = requestResponse.request();
|
||
HttpResponse httpResponse = requestResponse.response();
|
||
|
||
String requestString = new String(httpRequest.toByteArray().getBytes(), StandardCharsets.UTF_8);
|
||
String requestBody = new String(httpRequest.body().getBytes(), StandardCharsets.UTF_8);
|
||
String requestHeaders = httpRequest.headers().stream()
|
||
.map(HttpHeader::toString)
|
||
.collect(Collectors.joining("\n"));
|
||
|
||
String responseString = new String(httpResponse.toByteArray().getBytes(), StandardCharsets.UTF_8);
|
||
String responseBody = new String(httpResponse.body().getBytes(), StandardCharsets.UTF_8);
|
||
String responseHeaders = httpResponse.headers().stream()
|
||
.map(HttpHeader::toString)
|
||
.collect(Collectors.joining("\n"));
|
||
|
||
// 标志变量，表示是否满足过滤条件
|
||
AtomicBoolean isMatched = new AtomicBoolean(false);
|
||
|
||
Config.globalRules.keySet().forEach(i -> {
|
||
for (Object[] objects : Config.globalRules.get(i)) {
|
||
String name = objects[1].toString();
|
||
String format = objects[4].toString();
|
||
String scope = objects[6].toString();
|
||
|
||
// 从注释中查看是否包含当前规则名，包含的再进行查询，有效减少无意义的检索时间
|
||
if (entry.getComment().contains(name)) {
|
||
if (name.equals(tableName)) {
|
||
// 标志变量，表示当前规则是否匹配
|
||
boolean isMatch = false;
|
||
|
||
switch (scope) {
|
||
case "any":
|
||
isMatch = matchingString(format, filterText, requestString) || matchingString(format, filterText, responseString);
|
||
break;
|
||
case "request":
|
||
isMatch = matchingString(format, filterText, requestString);
|
||
break;
|
||
case "response":
|
||
isMatch = matchingString(format, filterText, responseString);
|
||
break;
|
||
case "any header":
|
||
isMatch = matchingString(format, filterText, requestHeaders) || matchingString(format, filterText, responseHeaders);
|
||
break;
|
||
case "request header":
|
||
isMatch = matchingString(format, filterText, requestHeaders);
|
||
break;
|
||
case "response header":
|
||
isMatch = matchingString(format, filterText, responseHeaders);
|
||
break;
|
||
case "any body":
|
||
isMatch = matchingString(format, filterText, requestBody) || matchingString(format, filterText, responseBody);
|
||
break;
|
||
case "request body":
|
||
isMatch = matchingString(format, filterText, requestBody);
|
||
break;
|
||
case "response body":
|
||
isMatch = matchingString(format, filterText, responseBody);
|
||
break;
|
||
default:
|
||
break;
|
||
}
|
||
|
||
isMatched.set(isMatch);
|
||
break;
|
||
}
|
||
}
|
||
}
|
||
});
|
||
|
||
if (isMatched.get()) {
|
||
filteredLog.add(entry);
|
||
}
|
||
}
|
||
|
||
fireTableDataChanged();
|
||
messageTable.lastSelectedIndex = -1;
|
||
}
|
||
|
||
private boolean matchingString(String format, String filterText, String target) {
|
||
boolean isMatch = true;
|
||
|
||
try {
|
||
MessageFormat mf = new MessageFormat(format);
|
||
Object[] parsedObjects = mf.parse(filterText);
|
||
|
||
for (Object parsedObject : parsedObjects) {
|
||
if (!target.contains(parsedObject.toString())) {
|
||
isMatch = false;
|
||
break;
|
||
}
|
||
}
|
||
} catch (Exception e) {
|
||
isMatch = false;
|
||
}
|
||
|
||
return isMatch;
|
||
}
|
||
|
||
private Map<String, Map<String, Object>> getCacheData(byte[] content) {
|
||
String hashIndex = HashCalculator.calculateHash(content);
|
||
return CachePool.getFromCache(hashIndex);
|
||
}
|
||
|
||
private boolean areMapsEqual(Map<String, Map<String, Object>> map1, Map<String, Map<String, Object>> map2) {
|
||
if (map1 == null || map2 == null) {
|
||
return false;
|
||
}
|
||
if (map1.size() != map2.size()) {
|
||
return false;
|
||
}
|
||
|
||
for (String key : map1.keySet()) {
|
||
if (!map2.containsKey(key)) {
|
||
return false;
|
||
}
|
||
if (!areInnerMapsEqual(map1.get(key), map2.get(key))) {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
private boolean areInnerMapsEqual(Map<String, Object> innerMap1, Map<String, Object> innerMap2) {
|
||
if (innerMap1.size() != innerMap2.size()) {
|
||
return false;
|
||
}
|
||
|
||
for (String key : innerMap1.keySet()) {
|
||
if (!innerMap2.containsKey(key)) {
|
||
return false;
|
||
}
|
||
Object value1 = innerMap1.get(key);
|
||
Object value2 = innerMap2.get(key);
|
||
|
||
// 如果值是Map，则递归对比
|
||
if (value1 instanceof Map && value2 instanceof Map) {
|
||
if (!areInnerMapsEqual((Map<String, Object>) value1, (Map<String, Object>) value2)) {
|
||
return false;
|
||
}
|
||
} else if (!value1.equals(value2)) {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
|
||
public JSplitPane getSplitPane()
|
||
{
|
||
return splitPane;
|
||
}
|
||
|
||
public MessageTable getMessageTable()
|
||
{
|
||
return messageTable;
|
||
}
|
||
|
||
public List<MessageEntry> getLogs() {
|
||
return log;
|
||
}
|
||
|
||
|
||
@Override
|
||
public int getRowCount() {
|
||
return filteredLog.size();
|
||
}
|
||
|
||
@Override
|
||
public int getColumnCount() {
|
||
return 6;
|
||
}
|
||
|
||
@Override
|
||
public Object getValueAt(int rowIndex, int columnIndex)
|
||
{
|
||
if (filteredLog.isEmpty()) {
|
||
return "";
|
||
}
|
||
MessageEntry messageEntry = filteredLog.get(rowIndex);
|
||
|
||
return switch (columnIndex) {
|
||
case 0 -> messageEntry.getMethod();
|
||
case 1 -> messageEntry.getUrl();
|
||
case 2 -> messageEntry.getComment();
|
||
case 3 -> messageEntry.getStatus();
|
||
case 4 -> messageEntry.getLength();
|
||
case 5 -> messageEntry.getColor();
|
||
default -> "";
|
||
};
|
||
}
|
||
|
||
@Override
|
||
public String getColumnName(int columnIndex)
|
||
{
|
||
return switch (columnIndex) {
|
||
case 0 -> "Method";
|
||
case 1 -> "URL";
|
||
case 2 -> "Comment";
|
||
case 3 -> "Status";
|
||
case 4 -> "Length";
|
||
case 5 -> "Color";
|
||
default -> "";
|
||
};
|
||
}
|
||
|
||
public class MessageTable extends JTable {
|
||
private MessageEntry MessageEntry;
|
||
private SwingWorker<Object, Void> currentWorker;
|
||
// 设置响应报文返回的最大长度为3MB
|
||
private final int MAX_LENGTH = 3145728;
|
||
private int lastSelectedIndex = -1;
|
||
private final HttpRequestEditor requestEditor;
|
||
private final HttpResponseEditor responseEditor;
|
||
|
||
public MessageTable(TableModel messageTableModel, HttpRequestEditor requestEditor, HttpResponseEditor responseEditor) {
|
||
super(messageTableModel);
|
||
this.requestEditor = requestEditor;
|
||
this.responseEditor = responseEditor;
|
||
}
|
||
|
||
@Override
|
||
public void changeSelection(int row, int col, boolean toggle, boolean extend) {
|
||
super.changeSelection(row, col, toggle, extend);
|
||
int selectedIndex = convertRowIndexToModel(row);
|
||
if (lastSelectedIndex != selectedIndex) {
|
||
lastSelectedIndex = selectedIndex;
|
||
MessageEntry = filteredLog.get(selectedIndex);
|
||
|
||
requestEditor.setRequest(HttpRequest.httpRequest("Loading..."));
|
||
responseEditor.setResponse(HttpResponse.httpResponse("Loading..."));
|
||
|
||
if (currentWorker != null && !currentWorker.isDone()) {
|
||
currentWorker.cancel(true);
|
||
}
|
||
|
||
currentWorker = new SwingWorker<>() {
|
||
@Override
|
||
protected ByteArray[] doInBackground() {
|
||
ByteArray requestByte = MessageEntry.getRequestResponse().request().toByteArray();
|
||
ByteArray responseByte = MessageEntry.getRequestResponse().response().toByteArray();
|
||
|
||
if (responseByte.length() > MAX_LENGTH) {
|
||
String ellipsis = "\r\n......";
|
||
responseByte = responseByte.subArray(0, MAX_LENGTH).withAppended(ellipsis);
|
||
}
|
||
|
||
return new ByteArray[]{requestByte, responseByte};
|
||
}
|
||
|
||
@Override
|
||
protected void done() {
|
||
if (!isCancelled()) {
|
||
try {
|
||
ByteArray[] result = (ByteArray[]) get();
|
||
requestEditor.setRequest(HttpRequest.httpRequest(MessageEntry.getRequestResponse().httpService(), result[0]));
|
||
responseEditor.setResponse(HttpResponse.httpResponse(result[1]));
|
||
} catch (Exception ignored) {
|
||
}
|
||
}
|
||
}
|
||
};
|
||
currentWorker.execute();
|
||
}
|
||
}
|
||
}
|
||
}
|