![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250419063145-68034351e5e51.png\")
<\/p>\n\u4e00\u3001\u4eceFinalShell\u83b7\u53d6\u670d\u52a1\u5668\u57fa\u672c\u4fe1\u606f<\/p>\n
<\/p>\n
\u5982\u56fe\u64cd\u4f5c\u4f1a\u5bfc\u51fa\u4e00\u4e2ajson\u6587\u4ef6，\u53ef\u4ee5\u76f4\u63a5\u4fdd\u5b58\u5728\u684c\u9762，\u6216\u8005\u5176\u4ed6\u4f4d\u7f6e<\/p>\n
json\u683c\u5f0f\u5982\u4e0b：<\/p>\n
{"forwarding_auto_reconnect":false
\n,"custom_size":false
\n,"delete_time":0
\n,"secret_key_id":""
\n,"user_name":"root"
\n,"remote_port_forwarding":{}
\n,"conection_type":100
\n,"sort_time":0
\n,"description":""
\n,"proxy_id":"0"
\n,"authentication_type":1
\n,"drivestoredirect":true
\n,"delete_key_sequence":0
\n,"password":"xE4F2Pi13TnbkO8vo6wwmQNbqB77PUeI"
\n,"modified_time":1700460445433
\n,"host":"x.xx.xx.xx"
\n,"accelerate":false
\n,"id":"sn1xqbrr5womw787"
\n,"height":0
\n,"order":0
\n,"create_time":1700460445433
\n,"port_forwarding_list":[]
\n,"parent_update_time":0
\n,"rename_time":0
\n,"backspace_key_sequence":2
\n,"fullscreen":false
\n,"port":22
\n,"terminal_encoding":"UTF-8"
\n,"parent_id":"root"
\n,"exec_channel_enable":true
\n,"width":0
\n,"name":"xx.xx.xx.xx"
\n,"access_time":1719895278353} <\/p>\n
\u4e8c\u3001\u4ee3\u7801\u8bfb\u53d6\u5e76\u89e3\u6790\u83b7\u53d6\u8d26\u53f7\u660e\u6587\u4fe1\u606f<\/p>\n
package com.base.info.controller;<\/p>\n
import com.alibaba.fastjson.JSON;
\nimport com.fasterxml.jackson.annotation.JsonProperty;
\nimport lombok.Data;
\nimport lombok.NoArgsConstructor;
\nimport org.apache.commons.io.FileUtils;
\nimport org.apache.commons.io.FilenameUtils;
\nimport org.apache.commons.lang3.StringUtils;<\/p>\n
import javax.crypto.Cipher;
\nimport javax.crypto.SecretKey;
\nimport javax.crypto.SecretKeyFactory;
\nimport javax.crypto.spec.DESKeySpec;
\nimport java.io.ByteArrayOutputStream;
\nimport java.io.DataOutputStream;
\nimport java.io.File;
\nimport java.io.IOException;
\nimport java.math.BigInteger;
\nimport java.security.MessageDigest;
\nimport java.security.NoSuchAlgorithmException;
\nimport java.security.SecureRandom;
\nimport java.util.*;<\/p>\n
public class FinalShellDecodePass {
\n public static void main(String[] args) throws Exception {
\n \/\/ \u83b7\u53d6finalshell\u7684\u6240\u6709json\u6570\u636e,json\u6570\u636e\u6240\u5728\u6587\u4ef6\u5939
\n File file = new File("C:\\\\\\\\Users\\\\\\\\12118\\\\\\\\Desktop"); \/\/\u6211\u7684\u653e\u5728\u684c\u9762\u4e86，\u5982\u679cjson\u6587\u4ef6\u5728\u5176\u4ed6\u4f4d\u7f6e，\u9700\u8981\u66f4\u6539\u4e3a\u5bf9\u5e94\u8def\u5f84
\n \/\/ \u83b7\u53d6\u6240\u6709\u7684json\u6587\u4ef6
\n File[] files = file.listFiles(pathname -> "json".equalsIgnoreCase(FilenameUtils.getExtension(pathname.getName())));
\n \/\/ \u4e3b\u8981\u4fe1\u606f: ip\/\u7aef\u53e3\/\u7528\u6237\u540d\/\u5bc6\u7801
\n List<Map<String, Object>> infoList = new ArrayList<>(files.length);
\n for (File jsonFile : files) {
\n String s = FileUtils.readFileToString(jsonFile);
\n FinalShellConfig shellConfig = JSON.parseObject(s, FinalShellConfig.class);
\n \/\/ \u5bc6\u6587\u6539\u660e\u6587
\n String password = shellConfig.getPassword();
\n if (StringUtils.isNotBlank(password)) {
\n shellConfig.setPassword(decodePass(password));
\n }
\n String s1 = JSON.toJSONString(shellConfig);
\n System.err.println(s1);<\/p>\n
Map<String, Object> map = new LinkedHashMap<>();
\n map.put("\u4e3b\u673a", shellConfig.getHost());
\n map.put("\u7aef\u53e3", shellConfig.getPort());
\n map.put("\u7528\u6237\u540d", shellConfig.getUserName());
\n map.put("\u5bc6\u7801", shellConfig.getPassword());
\n infoList.add(map);
\n }
\n for (Map<String, Object> stringObjectMap : infoList) {
\n System.err.println(JSON.toJSONString(stringObjectMap));
\n }<\/p>\n
}<\/p>\n
public static byte[] desDecode(byte[] data, byte[] head) throws Exception {
\n SecureRandom sr = new SecureRandom();
\n DESKeySpec dks = new DESKeySpec(head);
\n SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
\n SecretKey securekey = keyFactory.generateSecret(dks);
\n Cipher cipher = Cipher.getInstance("DES");
\n cipher.init(2, securekey, sr);
\n return cipher.doFinal(data);
\n }<\/p>\n
public static String decodePass(String data) throws Exception {
\n if (data == null) {
\n return null;
\n } else {
\n String rs = "";
\n byte[] buf = Base64.getDecoder().decode(data);
\n byte[] head = new byte[8];
\n System.arraycopy(buf, 0, head, 0, head.length);
\n byte[] d = new byte[buf.length – head.length];
\n System.arraycopy(buf, head.length, d, 0, d.length);
\n byte[] bt = desDecode(d, ranDomKey(head));
\n rs = new String(bt);<\/p>\n
return rs;
\n }
\n }<\/p>\n
static byte[] ranDomKey(byte[] head) {
\n long ks = 3680984568597093857L \/ (long) (new Random((long) head[5])).nextInt(127);
\n Random random = new Random(ks);
\n int t = head[0];<\/p>\n
for (int i = 0; i < t; ++i) {
\n random.nextLong();
\n }<\/p>\n
long n = random.nextLong();
\n Random r2 = new Random(n);
\n long[] ld = new long[]{(long) head[4], r2.nextLong(), (long) head[7], (long) head[3], r2.nextLong(), (long) head[1], random.nextLong(), (long) head[2]};
\n ByteArrayOutputStream bos = new ByteArrayOutputStream();
\n DataOutputStream dos = new DataOutputStream(bos);
\n long[] var15 = ld;
\n int var14 = ld.length;<\/p>\n
for (int var13 = 0; var13 < var14; ++var13) {
\n long l = var15[var13];<\/p>\n
try {
\n dos.writeLong(l);
\n } catch (IOException var18) {
\n var18.printStackTrace();
\n }
\n }<\/p>\n
try {
\n dos.close();
\n } catch (IOException var17) {
\n var17.printStackTrace();
\n }<\/p>\n
byte[] keyData = bos.toByteArray();
\n keyData = md5(keyData);
\n return keyData;
\n }<\/p>\n
public static byte[] md5(byte[] data) {
\n String ret = null;
\n byte[] res = null;<\/p>\n
try {
\n MessageDigest m;
\n m = MessageDigest.getInstance("MD5");
\n m.update(data, 0, data.length);
\n res = m.digest();
\n ret = new BigInteger(1, res).toString(16);
\n } catch (NoSuchAlgorithmException e) {
\n e.printStackTrace();
\n }
\n return res;
\n }<\/p>\n
@NoArgsConstructor
\n @Data
\n static class FinalShellConfig {<\/p>\n
@JsonProperty("forwarding_auto_reconnect")
\n private Boolean forwardingAutoReconnect;
\n @JsonProperty("custom_size")
\n private Boolean customSize;
\n @JsonProperty("delete_time")
\n private Integer deleteTime;
\n @JsonProperty("secret_key_id")
\n private String secretKeyId;
\n @JsonProperty("user_name")
\n private String userName;
\n @JsonProperty("conection_type")
\n private Integer conectionType;
\n @JsonProperty("sort_time")
\n private Integer sortTime;
\n @JsonProperty("description")
\n private String description;
\n @JsonProperty("proxy_id")
\n private String proxyId;
\n @JsonProperty("authentication_type")
\n private Integer authenticationType;
\n @JsonProperty("drivestoredirect")
\n private Boolean drivestoredirect;
\n @JsonProperty("delete_key_sequence")
\n private Integer deleteKeySequence;
\n @JsonProperty("password")
\n private String password;
\n @JsonProperty("modified_time")
\n private Long modifiedTime;
\n @JsonProperty("host")
\n private String host;
\n @JsonProperty("accelerate")
\n private Boolean accelerate;
\n @JsonProperty("id")
\n private String id;
\n @JsonProperty("height")
\n private Integer height;
\n @JsonProperty("order")
\n private Integer order;
\n @JsonProperty("create_time")
\n private Long createTime;
\n @JsonProperty("port_forwarding_list")
\n private List<?> portForwardingList;
\n @JsonProperty("parent_update_time")
\n private Integer parentUpdateTime;
\n @JsonProperty("rename_time")
\n private Long renameTime;
\n @JsonProperty("backspace_key_sequence")
\n private Integer backspaceKeySequence;
\n @JsonProperty("fullscreen")
\n private Boolean fullscreen;
\n @JsonProperty("port")
\n private Integer port;
\n @JsonProperty("terminal_encoding")
\n private String terminalEncoding;
\n @JsonProperty("parent_id")
\n private String parentId;
\n @JsonProperty("exec_channel_enable")
\n private Boolean execChannelEnable;
\n @JsonProperty("width")
\n private Integer width;
\n @JsonProperty("name")
\n private String name;
\n @JsonProperty("access_time")
\n private Long accessTime;
\n }
\n}<\/p>\n
\u4e09\u3001\u6267\u884cmain\u65b9\u6cd5，\u83b7\u53d6\u4fe1\u606f<\/p>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250419063146-68034352bcd07.png\")
<\/p>\n
\u8fd9\u6837\u5c31\u83b7\u53d6\u5230\u4e86！<\/p>\n","protected":false},"excerpt":{"rendered":"
\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb1.4k\u6b21\uff0c\u70b9\u8d5e4\u6b21\uff0c\u6536\u85cf2\u6b21\u3002\u5982\u56fe\u64cd\u4f5c\u4f1a\u5bfc\u51fa\u4e00\u4e2ajson\u6587\u4ef6\uff0c\u53ef\u4ee5\u76f4\u63a5\u4fdd\u5b58\u5728\u684c\u9762\uff0c\u6216\u8005\u5176\u4ed6\u4f4d\u7f6e\u3002\u4e00\u3001\u4eceFinalShell\u83b7\u53d6\u670d\u52a1\u5668\u57fa\u672c\u4fe1\u606f\u3002\u4e8c\u3001\u4ee3\u7801\u8bfb\u53d6\u5e76\u89e3\u6790\u83b7\u53d6\u8d26\u53f7\u660e\u6587\u4fe1\u606f\u3002\u4e09\u3001\u6267\u884cmain\u65b9\u6cd5\uff0c\u83b7\u53d6\u4fe1\u606f\u3002_finalshell\u67e5\u770b\u5bc6\u7801<\/p>\n","protected":false},"author":2,"featured_media":26055,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[43,44],"topic":[],"class_list":["post-26057","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-43","tag-44"],"yoast_head":"\n