VNCTF2022公开赛-easyJ4va

@WebServlet(name = "HelloServlet", urlPatterns = {"/evi1"})
/* loaded from: file(5) */
public class HelloWorldServlet extends HttpServlet {
    private volatile String name = "m4n_q1u_666";
    private volatile String age = "666";
    private volatile String height = "180";
    User user;

    public void init() throws ServletException {
        this.user = new User(this.name, this.age, this.height);
    }

    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        String reqName = req.getParameter("name");
        if (reqName != null) {
            this.name = reqName;
        }
        if (Secr3t.check(this.name)) {
            Response(resp, "no vnctf2022!");
        } else if (Secr3t.check(this.name)) {
            Response(resp, "The Key is " + Secr3t.getKey());
        }
    }

    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        String key = req.getParameter("key");
        String text = req.getParameter("base64");
        if (!Secr3t.getKey().equals(key) || text == null) {
            Response(resp, "KeyError");
            return;
        }
        if (this.user.equals((User) SerAndDe.deserialize(Base64.getDecoder().decode(text)))) {
            Response(resp, "Deserialize…… Flag is " + Secr3t.getFlag().toString());
        }
    }

    private void Response(HttpServletResponse resp, String outStr) throws IOException {
        ServletOutputStream out = resp.getOutputStream();
        out.write(outStr.getBytes());
        out.flush();
        out.close();
    }
}

public class SerAndDe {
    private SerAndDe() {
    }

    public static byte[] serialize(Object object) {
        ObjectOutputStream oos = null;
        ByteArrayOutputStream bos = null;
        try {
            try {
                bos = new ByteArrayOutputStream();
                oos = new ObjectOutputStream(bos);
                oos.writeObject(object);
                byte[] b = bos.toByteArray();
                if (oos != null) {
                    try {
                        oos.close();
                    } catch (IOException ex) {
                        System.out.println("io could not close:" + ex.toString());
                    }
                }
                if (bos != null) {
                    bos.close();
                }
                return b;
            } catch (IOException e) {
                System.out.println("serialize Exception:" + e.toString());
                if (oos != null) {
                    try {
                        oos.close();
                    } catch (IOException ex2) {
                        System.out.println("io could not close:" + ex2.toString());
                        return null;
                    }
                }
                if (bos != null) {
                    bos.close();
                }
                return null;
            }
        } catch (Throwable th) {
            if (oos != null) {
                try {
                    oos.close();
                } catch (IOException ex3) {
                    System.out.println("io could not close:" + ex3.toString());
                    throw th;
                }
            }
            if (bos != null) {
                bos.close();
            }
            throw th;
        }
    }

    public static Object deserialize(byte[] bytes) {
        ByteArrayInputStream bais;
        try {
            bais = null;
            try {
                bais = new ByteArrayInputStream(bytes);
                Object readObject = new ObjectInputStream(bais).readObject();
                if (bais != null) {
                    try {
                        bais.close();
                    } catch (IOException ex) {
                        System.out.println("LogManage Could not serialize:" + ex.toString());
                    }
                }
                return readObject;
            } catch (IOException | ClassNotFoundException e) {
                System.out.println("deserialize Exception:" + e.toString());
                if (bais != null) {
                    try {
                        bais.close();
                    } catch (IOException ex2) {
                        System.out.println("LogManage Could not serialize:" + ex2.toString());
                        return null;
                    }
                }
                return null;
            }
        } catch (Throwable th) {
            if (bais != null) {
                try {
                    bais.close();
                } catch (IOException ex3) {
                    System.out.println("LogManage Could not serialize:" + ex3.toString());
                    throw th;
                }
            }
            throw th;
        }
    }
}

public class User implements Serializable {
    private String name;
    private String age;
    private transient String height;

    public User(String name, String age, String height) {
        this.name = name;
        this.age = age;
        this.height = height;
    }

    public String getName() {
        return this.name;
    }

    public void setName(String name) {
        this.name = name;
    }

    public String getAge() {
        return this.age;
    }

    public void setAge(String age) {
        this.age = age;
    }

    public String getHeight() {
        return this.height;
    }

    public void setHeight(String height) {
        this.height = height;
    }

    private void readObject(ObjectInputStream s) throws IOException, ClassNotFoundException {
        s.defaultReadObject();
        this.height = (String) s.readObject();
    }

    @Override // java.lang.Object
    public boolean equals(Object obj) {
        if (obj == null) {
            return false;
        }
        if (this == obj) {
            return true;
        }
        if (!(obj instanceof User)) {
            return false;
        }
        User user = (User) obj;
        if (!user.getAge().equals(this.age) || !user.getHeight().equals(this.height) || !user.getName().equals(this.name)) {
            return false;
        }
        return true;
    }

    @Override // java.lang.Object
    public String toString() {
        return "User{name='" + this.name + "', age='" + this.age + "', height='" + this.height + "'}";
    }
}

private transient String height;