您的位置:首页 > 移动开发 > Android开发

Android存在安全缺陷:可被黑客窃听和监视

2012-02-25 23:27 204 查看
今天尝试着测试一下Weblogic 11g的MDB功能,发现尽管引入了weblogic.jar,可是仍然有很多J2EE的Class找不到。我本地没有安装Weblogic,只好一个类库,一个类库的找。后来在网上发现,原来在Weblogic 10以后,应该使用wlfullclient.jar来取代weblogic.jar。可以使用下面的办法生成wlfullclient.jar。

1. Change directories to the server/lib directory.
cd WL_HOME/server/lib

2. Use the following command to create wlfullclient.jar in the server/lib directory:
java -jar wljarbuilder.jar

3. You can now copy and bundle the wlfullclient.jar with client applications.
转自:http://space.itpub.net/51146/viewspace-663826

4.classpath加入wlfullclient.jar

5.测试代码
import java.io.IOException;
import java.net.MalformedURLException;
import java.text.SimpleDateFormat;
import java.util.Calendar;
import java.util.Date;
import java.util.Hashtable;

import javax.management.MBeanAttributeInfo;
import javax.management.MBeanInfo;
import javax.management.MBeanServerConnection;
import javax.management.MalformedObjectNameException;
import javax.management.ObjectName;
import javax.management.remote.JMXConnector;
import javax.management.remote.JMXConnectorFactory;
import javax.management.remote.JMXServiceURL;
import javax.naming.Context;

@SuppressWarnings("unused")
public class JmxMonitorWeblogic {

private static MBeanServerConnection connection;

private static JMXConnector connector;

private static final ObjectName service;

/*
* 实例化 DomainRuntimeServiceMBean 对象名,这样可以通过类使用此对象名.
*/
static {
try {
service = new ObjectName(
"com.bea:Name=DomainRuntimeService,Type=weblogic.management.mbeanservers.domainruntime.DomainRuntimeServiceMBean");
} catch (MalformedObjectNameException e) {
throw new AssertionError(e.getMessage());
}
}

public static void main(String[] args) throws Exception {
String hostname = "localhost";
String portString = "7001";
String username = "weblogic";
String password = "weblogic";
JmxMonitorWeblogic demo = new JmxMonitorWeblogic();
demo.initConnection(hostname, portString, username, password);

demo.printNameAndState(demo.getServerRuntimes());
//demo.getServletData();
//demo.printAppNameAndState();
//demo.printJMS();

// //得到运行时信息
// MBeanInfo runMBeanInfo = connection.getMBeanInfo(ObjectName.getInstance("com.bea:Location=AdminServer,Name=consoleapp,ServerRuntime=AdminServer,Type=ServerRuntime"));
// MBeanAttributeInfo[] attr = runMBeanInfo.getAttributes();
// for(int i=0;i<attr.length;i++){
// if("WorkManagerRuntimes".equals(attr[i].getName())){
// demo.print("Runtime Info", attr[i].getName());
// demo.print("Runtime Desc", attr[i].getDescription());
// }
// }
//
connector.close();
}

/*
* 实例化与 Domain Runtime MBean Server 的连接。
*/
private void initConnection(String hostname, String portString, String username, String password)
throws IOException, MalformedURLException {
String protocol = "t3";
Integer portInteger = Integer.valueOf(portString);
int port = portInteger.intValue();
String jndiroot = "/jndi/";
String mserver = "weblogic.management.mbeanservers.domainruntime";
JMXServiceURL serviceURL = new JMXServiceURL(protocol, hostname, port, jndiroot + mserver);
Hashtable<String, String> h = new Hashtable<String, String>();
h.put(Context.SECURITY_PRINCIPAL, username);
h.put(Context.SECURITY_CREDENTIALS, password);
h.put(JMXConnectorFactory.PROTOCOL_PROVIDER_PACKAGES, "weblogic.management.remote");
connector = JMXConnectorFactory.connect(serviceURL, h);
connection = connector.getMBeanServerConnection();
}

// private void initConnectionByJDK(String hostname, String portString,
// String username, String password) throws IOException,
// MalformedURLException {
// String protocol = "rmi";
// Integer portInteger = Integer.valueOf(portString);
// int port = portInteger.intValue();
// String jndiroot = "/jndi/iiop://" + hostname + ":" + port +"/";
// String mserver = "weblogic.management.mbeanservers.domainruntime";
// JMXServiceURL serviceURL = new JMXServiceURL(protocol, hostname, port,
// jndiroot + mserver);
// Hashtable<String,String> h = new Hashtable<String,String>();
// h.put(Context.SECURITY_PRINCIPAL, username);
// h.put(Context.SECURITY_CREDENTIALS, password);
// h.put(JMXConnectorFactory.PROTOCOL_PROVIDER_PACKAGES,"weblogic.management.remote");
// connector = JMXConnectorFactory.connect(serviceURL, h);
// connection = connector.getMBeanServerConnection();
// }

/*
* 打印一组 ServerRuntimeMBeans.此 MBean 是运行时 MBean 层次的根,此域中的每个服务器承载自己的实例.
*/
public ObjectName[] getServerRuntimes() throws Exception {
return (ObjectName[]) connection.getAttribute(service, "ServerRuntimes");
}

/*
* 迭代 ServerRuntimeMBean,获取名称和状态
*/
public void printNameAndState(ObjectName[] p_objNames) throws Exception {
ObjectName[] serverRT = p_objNames;
System.out.println("got server runtimes");
int length = (int) serverRT.length;
for (int i = 0; i < length; i++) {
print("===================Weblogic运行信息====================", "");
//域名称
String name = (String) connection.getAttribute(serverRT[i], "Name");
System.out.println("Server name: " + name);
//运行状态
String state = (String) connection.getAttribute(serverRT[i], "State");
System.out.println("Server state: " + state);
//开始时间
Long activationTime = (Long) connection.getAttribute(serverRT[i], "ActivationTime");
Calendar cal = Calendar.getInstance();
Date date = cal.getTime();
date.setTime(activationTime);
SimpleDateFormat formater = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
String strDateTime = formater.format(date);
System.out.println("Start running time: " + strDateTime);
//weblogic 的版本
String weblogicVersion = (String) connection.getAttribute(serverRT[i], "WeblogicVersion");
System.out.println("Weblogic Version: " + weblogicVersion);

//OS信息
ObjectName jvmServerRT = (ObjectName) connection.getAttribute(serverRT[i], "JVMRuntime");
print("=======================OS信息==========================", "");
print(" 操作系统", connection.getAttribute(jvmServerRT, "OSName").toString());
print(" 操作系统版本", connection.getAttribute(jvmServerRT, "OSVersion").toString());
print(" Java版本", connection.getAttribute(jvmServerRT, "JavaVersion").toString());
print(" Java提供商", connection.getAttribute(jvmServerRT, "JavaVMVendor").toString());

long runTime = (Long) connection.getAttribute(jvmServerRT, "Uptime") / 1000;
long day = runTime / (24 * 60 * 60);
long hour = runTime % (24 * 60 * 60) / (60 * 60);
long minute = runTime % (60 * 60) / 60;
long second = runTime % 60;
System.out.println(" 系统已经运行:" + day + "天" + hour + "小时" + minute + "分" + second + "秒");

}
}

/*
* 获取一组 WebApplicationComponentRuntimeMBean
*/
public void getServletData() throws Exception {
print("===================ServletData信息====================", "");
ObjectName[] serverRT = getServerRuntimes();
int length = (int) serverRT.length;
for (int i = 0; i < length; i++) {
ObjectName[] appRT = (ObjectName[]) connection.getAttribute(serverRT[i], "ApplicationRuntimes");
int appLength = (int) appRT.length;
for (int x = 0; x < appLength; x++) {
System.out.println("Application name: " + (String) connection.getAttribute(appRT[x], "Name"));
ObjectName[] compRT = (ObjectName[]) connection.getAttribute(appRT[x], "ComponentRuntimes");
int compLength = (int) compRT.length;
for (int y = 0; y < compLength; y++) {
System.out.println(" Component name: " + (String) connection.getAttribute(compRT[y], "Name"));
String componentType = (String) connection.getAttribute(compRT[y], "Type");
System.out.println(" type: " + componentType.toString());
if (componentType.toString().equals("WebAppComponentRuntime")) {
ObjectName[] servletRTs = (ObjectName[]) connection.getAttribute(compRT[y], "Servlets");
int servletLength = (int) servletRTs.length;
for (int z = 0; z < servletLength; z++) {
System.out.println(" Servlet name: "
+ (String) connection.getAttribute(servletRTs[z], "Name"));
System.out.println(" Servlet context path: "
+ (String) connection.getAttribute(servletRTs[z], "ContextPath"));
System.out.println(" Invocation Total Count : "
+ (Object) connection.getAttribute(servletRTs[z], "InvocationTotalCount"));
}
}
}
}
}
}

public void printAppNameAndState() throws Exception {
print("===================AppNameAndState====================", "");
ObjectName[] serverRT = getServerRuntimes();
for (int k = 0; k < serverRT.length; k++) {
ObjectName[] appRT = (ObjectName[]) connection.getAttribute(serverRT[k], "ApplicationRuntimes");
int length = appRT.length;

for (int i = 0; i < length; i++) {
String appName = (String) connection.getAttribute(appRT[i], "Name");

ObjectName[] compRT = (ObjectName[]) connection.getAttribute(appRT[i], "ComponentRuntimes");
for (int j = 0; j < compRT.length; j++) {
int appState = ((Integer) connection.getAttribute(compRT[j], "DeploymentState")).intValue();
String type = (String) connection.getAttribute(compRT[j], "Type");
System.out.println(k + "|" + j + "|Server name: " + appName + ". Server type: " + type
+ " Server state: " + appState);

}

}
}

}

public void printJMS() throws Exception {
ObjectName[] serverRT = getServerRuntimes();

ObjectName JMSRT = (ObjectName) connection.getAttribute(serverRT[0], "JMSRuntime");

ObjectName[] JMSServers = (ObjectName[]) connection.getAttribute(JMSRT, "JMSServers");
int JMSServer_Length = (int) JMSServers.length;

for (int x = 0; x < JMSServer_Length; x++) {
String JMSServer_name = (String) connection.getAttribute(JMSServers[x], "Name");

ObjectName[] JMSDests = (ObjectName[]) connection.getAttribute(JMSServers[x], "Destinations");
int JMSdest_Length = (int) JMSDests.length;

for (int y = 0; y < JMSdest_Length; y++) {
String queue_name = (String) connection.getAttribute(JMSDests[y], "Name");

long pendingmcount = (Long) connection.getAttribute(JMSDests[y], "MessagesPendingCount");
long currentcount = (Long) connection.getAttribute(JMSDests[y], "MessagesCurrentCount");

System.out.println(y + "|jms server name: " + JMSServer_name + " jms name: " + queue_name
+ " pending: " + pendingmcount + " current: " + currentcount);

} //for y

} //for x

}

public void print(String prefix, String content) {
System.out.println(prefix + ": " + content);
}

}
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签: