Awesome
Java memShell
Supported Middleware
- Tomcat <br> Tested on 7.0.34, 7.0.54, 7.0.70, 7.0.96, 7.0.104, 8.0.18, 8.0.32, 8.0.48, 8.5.12, 8.5.30, 8.5.56, 9.0.16, 9.0.33
- Weblogic <br> Tested on 10.3.6.0, 12.1.3.0.0
- JBoss/Wildfly <br> Tested on 8.0.0.Final, 18.0.0.Final, 21.0.0.Beta1
- Jetty <br> Tested on 9.4.30.v20200611, 9.3.28.v20191105, 9.2.29.v20191105, 9.1.6.v20160112, failed on earlier versions
- Websphere <br> Tested on Websphere Applicaton Server v8.5 and v9.0
- Spring (not a middleware but a framework) <br> Tested on SpringMVC 5.2.10.RELEASE, 5.0.8.RELEASE, 4.3.28.RELEASE, 4.0.5.RELEASE, 3.2.3.RELEASE, 3.0.5.RELEASE
Reference
Tomcat源代码调试:看不见的Shell第一式<br>
基于tomcat的内存 Webshell 无文件攻击技术<br>
动态注册之Servlet+Filter+Listener<br>
基于Tomcat无文件Webshell研究<br>
tomcat不出网回显连续剧第六集<br>
tomcat结合shiro无文件webshell的技术研究以及检测方法<br>
冰蝎改造之适配基于tomcat Filter的无文件webshell<br>
<br/><br/>
If you hava any suggestions, feel free to open an issue
or send me email at huangfeihong_cs@163.com