ognl

执行ognl表达式

从3.0.5版本增加

参数说明

参数名称 参数说明
express 执行的表达式
[c:] 执行表达式的 ClassLoader 的 hashcode,默认值是SystemClassLoader
[x] 结果对象的展开层次,默认值1

使用参考

  1. $ ognl '@java.lang.System@out.println("hello")'
  2. null

获取静态类的静态字段:

  1. $ ognl '@demo.MathGame@random'
  2. @Random[
  3. serialVersionUID=@Long[3905348978240129619],
  4. seed=@AtomicLong[125451474443703],
  5. multiplier=@Long[25214903917],
  6. addend=@Long[11],
  7. mask=@Long[281474976710655],
  8. DOUBLE_UNIT=@Double[1.1102230246251565E-16],
  9. BadBound=@String[bound must be positive],
  10. BadRange=@String[bound must be greater than origin],
  11. BadSize=@String[size must be non-negative],
  12. seedUniquifier=@AtomicLong[-3282039941672302964],
  13. nextNextGaussian=@Double[0.0],
  14. haveNextNextGaussian=@Boolean[false],
  15. serialPersistentFields=@ObjectStreamField[][isEmpty=false;size=3],
  16. unsafe=@Unsafe[sun.misc.Unsafe@28ea5898],
  17. seedOffset=@Long[24],
  18. ]

执行多行表达式,赋值给临时变量,返回一个List:

  1. $ ognl '#value1=@System@getProperty("java.home"), #value2=@System@getProperty("java.runtime.name"), {#value1, #value2}'
  2. @ArrayList[
  3. @String[/opt/java/8.0.181-zulu/jre],
  4. @String[OpenJDK Runtime Environment],
  5. ]

原文: https://alibaba.github.io/arthas/ognl.html