From f01773f473629090d72799383934048cad6d8d55 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=82=81?= <75202638+qi4L@users.noreply.github.com> Date: Tue, 16 Sep 2025 09:35:04 +0800 Subject: [PATCH] =?UTF-8?q?Updated=205=E3=80=81Java=20Mem=20Shell=20(markd?= =?UTF-8?q?own)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 5、Java-Mem-Shell.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/5、Java-Mem-Shell.md b/5、Java-Mem-Shell.md index f62ba18..9696188 100644 --- a/5、Java-Mem-Shell.md +++ b/5、Java-Mem-Shell.md @@ -90,7 +90,7 @@ java -jar JYso-[version].jar -y -g [Gadget] -p "[EX-MS-MemShellClass]" - `EX-MS-TWSMSFromThread` : `CMD` 命令回显 WebSocket 内存马 - `EX-MS-TEXMSFromThread` : `CMD` 命令回显 Executor 内存马 -- `EX-MS-TUGMSFromJMXuP` : `CMD` 命令回显 Upgrade 内存马 +- `EX-MS-TUGMSFromJMX` : `CMD` 命令回显 Upgrade 内存马 对于一些非常规的环境,本项目还提供了基于 Java 原生的 RMI 内存马及命令回显方式,通过向 RMI 注册中心绑定一个恶意类,可以随时调用执行命令并回显,使用方法例子如下: