BEGINOUT
=== spring-shiro.xml ===
/sys/login/ = authc
/sys/logout/ = logout
/sys/common/captcha/ = anon
/sys/common/send_code/= anon
/sys/product/** = perms["admin:product"]
/sys/product_category/** = perms["admin:productCategory"]
/sys/attribute/** = perms["admin:attribute"]
/sys/order/** = perms["admin:order"]
/sys/payment/** = perms["admin:payment"]
/sys/user/** = perms["admin:user"]
/sys/user_rank/** = perms["admin:userRank"]
/sys/review/** = perms["admin:review"]
/sys/article/** = perms["admin:article"]
/sys/article_category/** = perms["admin:articleCategory"]
/sys/tag/** = perms["admin:tag"]
/sys/friend_link/** = perms["admin:friendLink"]
/sys/template/** = perms["admin:template"]
/sys/cache/** = perms["admin:cache"]
/sys/static/** = perms["admin:static"]
/sys/index/** = perms["admin:index"]
/sys/seo/** = perms["admin:seo"]
/sys/sitemap/** = perms["admin:sitemap"]
/sys/statistics/** = perms["admin:statistics"]
/sys/sales/** = perms["admin:sales"]
/sys/sales_ranking/** = perms["admin:salesRanking"]
/sys/purchase_ranking/** = perms["admin:purchaseRanking"]
/sys/deposit/** = perms["admin:deposit"]
/sys/setting/** = perms["admin:setting"]
/sys/area/** = perms["admin:area"]
/sys/payment_method/** = perms["admin:paymentMethod"]
/sys/payment_plugin/** = perms["admin:paymentPlugin"]
/sys/storage_plugin/** = perms["admin:storagePlugin"]
/sys/admin/** = perms["admin:admin"]
/sys/role/** = perms["admin:role"]
/sys/message/** = perms["admin:message"]
/sys/log/** = perms["admin:log"]
/sys/** = authc
=== grep cipher/rememberMe ===
/usr/local/apache-tomcat-8.0.24/webapps/ROOT/WEB-INF/classes/com/cz100/util/WebUtils.class:isNotEmpty (Ljava/lang/String;)Z setPath setDomain booleanValue ()Z setSecure (Z)V (Ljavax/servlet/http/Cookie;)V printStackTrace com/cz100/util/SettingUtils get ()Lcom/cz100/Setting; com/cz100/Setting
getCookiePath ()Ljava/lang/String; getCookieDomain valueOf (I)Ljava/lang/Integer; getId ()Ljava/lang/Long; java/lang/Long toString com/cz100/util/MyAESUtil encrypt &(Ljava/lang/String;)Ljava/lang/String; getAvatar
/usr/local/apache-tomcat-8.0.24/webapps/ROOT/WEB-INF/classes/com/cz100/util/MyAESUtil.class: z { | LOGGER Lorg/slf4j/Logger; key Ljava/lang/String; ()V Code LineNumberTable LocalVariableTable this Lcom/cz100/util/MyAESUtil; encrypt &(Ljava/lang/String;)Ljava/lang/String; raw [B skeySpec !Ljavax/crypto/spec/SecretKeySpec; cipher Ljavax/crypto/Cipher; encrypted e Ljava/lang/Exception; sSrc
StackMapTable d decrypt original originalString
/usr/local/apache-tomcat-8.0.24/webapps/ROOT/WEB-INF/classes/com/cz100/util/MyAESUtil.class:SourceFile MyAESUtil.java , - * + utf-8 } ~ javax/crypto/spec/SecretKeySpec AES , AES/ECB/PKCS5Padding � � javax/crypto/Cipher � � � � sun/misc/BASE64Encoder � � java/lang/Exception ( ) � � � � � sun/misc/BASE64Decoder � ~ java/lang/String jkl;POIU1234++== www.gowhere.so � � � � � � 3 4 java/lang/StringBuilder ������������������������ � � � � A 4 ������������������������ com/cz100/util/MyAESUtil � � � java/lang/Object getBytes (Ljava/lang/String;)[B ([BLjava/lang/String;)V getInstance )(Ljava/lang/String;)Ljavax/crypto/Cipher; init (ILjava/security/Key;)V doFinal ([B)[B encode ([B)Ljava/lang/String;
/usr/local/apache-tomcat-8.0.24/webapps/ROOT/WEB-INF/classes/com/cz100/filter/AuthenticationFilter.class: java/util/Map$Entry
com/cz100/entity/Admin admin_login_status � q r I J ! �"#$ � :org/apache/shiro/web/filter/authc/FormAuthenticationFilter java/lang/String java/lang/Exception *org/apache/shiro/authc/AuthenticationToken org/apache/shiro/subject/Subject javax/servlet/ServletRequest javax/servlet/ServletResponse org/apache/shiro/session/Session
java/util/Map java/util/Collection java/util/Iterator getUsername isRememberMe !(Ljavax/servlet/ServletRequest;)Z getHost p(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;ZLjava/lang/String;Ljava/lang/String;)V getHeader &(Ljava/lang/String;)Ljava/lang/String; equalsIgnoreCase (Ljava/lang/String;)Z addHeader '(Ljava/lang/String;Ljava/lang/String;)V sendError (I)V
DONE
ENDOUT