OGNL入门

复现struct2 漏洞的时候看到的东西，先记一下可以学习的博客，以后再学

OGNL（Object-Graph Navigation Language）是对象导航图语言，是应用于java中的一个开源的表达式语言，被集成在strust2中。

Ognl有一个上下文（Context）对象实现了map接口（这个map可以简单理解为C语言的map、python里的字典，拥有键值对关系）

https://www.cnblogs.com/chaos-li/p/12067752.html

http://blog.csdn.net/mmm123lmj/article/details/4527898

package org.ognl.test;
 
import java.util.HashMap;
import java.util.Map;
 
import ognl.Ognl;
import junit.framework.TestCase;
 
/**
 * http://blog.csdn.net/mmm123lmj/article/details/4527898
 * @author Administrator
 *
 */
public class OgnlTest extends TestCase {
 
	/*获得类属性，以及使用root getValue*/
	public void testOgnl_01() throws Exception{
		User user = new User();
		user.setUsername("dirk");
		
		String value = (String) Ognl.getValue("username", user);
		System.out.println(value);
	}
	
	public void testOgnl_02() throws Exception{
		User user = new User();
		Person p = new Person();
		p.setUsername("dallas");
		user.setPerson(p);
		
		String value = (String) Ognl.getValue("person.username", user); 
		System.out.println(value);
	}
 
 
	public void testOgnl_03() throws Exception{
		User user = new User();
		Person p = new Person();
		p.setUsername("dallas");
		user.setPerson(p);
		
		String value = (String) Ognl.getValue("#root.person.username",user); 
		System.out.println(value);
	}
	
	public static void main(String[] args) throws Exception {
		new OgnlTest().testOgnl_01();
	}
	
	//----------------------------------------------------
	//OGNL CONTEXT使用·
	public void testOgnl_04() throws Exception{
		Person p1 = new Person();
		Person p2 = new Person();
		p1.setUsername("dirk");
		p2.setUsername("terri");
		
		Map<String, Person> context = new HashMap<String, Person>();
		context.put("p1", p1);
		context.put("p2", p2);
		
		String value = (String) Ognl.getValue("p1.username +','+p2.username", context,new Object());
		System.out.println(value);
	}
	
	  public void testOgnl_05() throws Exception{   
	        Person p1 = new Person();   
	        Person p2 = new Person();   
	        p1.setUsername("风");   
	        p2.setUsername("云");   
	           
	        Map<String,Person> context = new HashMap<String,Person>();   
	        context.put("p1", p1);   
	        context.put("p2", p2);   
	           
	        User root = new User();   
	        root.setUsername("雨");   
	           
	        String value = (String)Ognl.getValue("#p1.username + ',' + #p2.username + ',' + username", context, root);   
	        System.out.println(value);   
	    }
	  
	  //-------------------------------------
	  //not important : OGNL赋值操作   java的method反射 get set方法
	   public void testOgnl_06() throws Exception{   
	        User user = new User();   
	           
	        //给root对象的属性赋值，相当于调用user.setUsername()   
	        Ognl.setValue("username", user, "暗之幻影");   
	           
	        System.out.println(user.getUsername());   
	    }   
	  
	  
	    public void testOgnl_07() throws Exception{   
	        User user = new User();   
	  
	        Map<String, User> context = new HashMap<String, User>();   
	        context.put("u", user);   
	           
	        //给context中的对象属性赋值，相当于调用user.setUsername()   
	        Ognl.setValue("#u.username", context, new Object(), "暗之幻影");   
	           
	        System.out.println(user.getUsername());   
	    }   
	  
	    public void testOgnl_08() throws Exception{   
	        User user = new User();   
	           
	        Map<String, User> context = new HashMap<String, User>();   
	        context.put("u", user);   
	           
	        //给context中的对象属性赋值，相当于调用user.setUsername()   
	        //在表达式中使用=赋值操作符来赋值   
	        Ognl.getValue("#u.username = '暗之幻影'",context, new Object());   
	           
	        System.out.println(user.getUsername());   
	    }   
	    public void testOgnl_09() throws Exception{   
	        User user = new User();   
	        Person p = new Person();   
	           
	        Map<String,Object> context = new HashMap<String,Object>();   
	        context.put("u", user);   
	        context.put("p", p);   
	           
	        //给context中的对象属性赋值，相当于调用user.setUsername()   
	        //在表达式中使用=赋值操作符来赋值   
	        Ognl.getValue("#u.username = '风',#p.username = '云'",context, new Object());   
	           
	        System.out.println(user.getUsername()+","+p.getUsername());   
	    }   
	    
	  //--------------------------------------
	  //not important 使用OGNL调用对象的方法
	    public void testOgnl_10() throws Exception{   
	        User user = new User();   
	        user.setUsername("暗之幻影");   
	           
	        String value = (String)Ognl.getValue("getUsername()", user);   
	        System.out.println(value);   
	    }   
	       
	    public void testOgnl_11() throws Exception{   
	        User user = new User();   
	           
	        Ognl.getValue("setUsername('暗之幻影')", user);   
	        System.out.println(user.getUsername());   
	    }
}

• 本文作者： Sn1pEr
• 本文链接： https://sn1per-ssd.github.io/2021/03/04/OGNL入门/
• 版权声明： 本博客所有文章除特别声明外，均采用 MIT 许可协议。转载请注明出处！