MemShellParty

适配情况

已兼容 Java6 ~ Java8、Java9、Java11、Java17、Java21

中间件以及框架

Tomcat(5 ~ 11)Jetty(6 ~ 12)GlassFish(3 ~ 7)Payara(5 ~ 6)
ServletServletFilterFilter
FilterFilterListenerListener
ListenerListenerValveValve
ValveHandlerFilterChain - AgentFilterChain - Agent
ProxyValveCustomizerContextValve - AgentContextValve - Agent
FilterChain - AgentServletHandler - Agent
ContextValve - Agent
Upgrade
Resin(3 ~ 4)SpringMVCSpringWebFluxXXL-JOB
ServletInterceptorWebFilterNettyHandler
FilterControllerHandlerHandlerMethod
ListenerFrameworkServlet - AgentHandlerFunction
FilterChain - AgentNettyHandler
JBossAS(4 ~ 7)JBossEAP(6 ~ 8)WildFly(9 ~ 30)Undertow
FilterFilterServletServlet
ListenerListenerFilterFilter
ValveValve(6)ListenerListener
ProxyValveFilterChain - Agent (6)ServletHandler - AgentServletHandler - Agent
FilterChain - AgentContextValve - Agent (6)
ContextValve - AgentServletHandler - Agent (7)
WebSphere(7 ~ 9)WebLogic (10.3.6 ~ 14)
ServletServlet
FilterFilter
ListenerListener
FilterManager - AgentServletContext - Agent
BES(9.5.x)TongWeb(6 ~ 8)InforSuite AS (9 ~ 10)
FilterFilterFilter
ListenerListenerListener
ValveValveValve
FilterChain - AgentFilterChain - AgentFilterChain - Agent
ContextValve - AgentContextValve - AgentContextValve - Agent
Apusic AS (9 ~ 10)Primeton(6.5)
ServletFilter
FilterListener
ListenerValve
FilterChain - AgentFilterChain - Agent
ContextValve - Agent

内存马功能

打包方式

  • BASE64
  • GZIP BASE64
  • JSP
  • JSPX
  • JAR、ScriptEngineJar、GroovyTransformJar
  • BCEL
  • 内置脚本引擎、Rhino 脚本引擎
  • EL、SpEL、OGNL、Aviator、MVEL、JEXL、Groovy、JXPath、BeanShell
  • Velocity、Freemarker、JinJava
  • 原生反序列化(CB 和 CC 链)
  • Agent
  • XXL-JOB Executor
  • Hessian、Hessian2 反序列化(XSLT 链)
  • H2
  • JNDI
  • 其他常见反序列化

On this page