From 0dd339fa2afa24de881b9630ee867eb0f4227eda Mon Sep 17 00:00:00 2001 From: ReaJason Date: Wed, 14 May 2025 00:47:22 +0800 Subject: [PATCH] docs: update --- CHANGELOG.md | 22 ++++++++++++++++++++++ README.md | 14 +++++++------- docs/README.en.md | 14 +++++++------- 3 files changed, 36 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8d292731..22d663fe 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,28 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [v1.8.0](https://github.com/ReaJason/MemShellParty/releases/tag/v1.8.0) - 2025-05-14 + +### Added + +- 支持普元中间件内存马生成（only 6.5 版本）by @ReaJason（#60） +- 支持哥斯拉 WebSocket 内存马生成与测试 +- 添加 Groovy 通用恶意类加载打包方式（用于测试 Jenkins 脚本执行） +- 命令执行支持加密器，双 Base64 测试绕过 WAF 安全设备 + +### Fixed + +- 修复 Jetty 高版本中 ee8 ~ ee10 无法注入（#61） +- 修复 Spring Boot 下类加载的原因导致的 Tomcat/Jetty/Undertow 部分内存马注入失败 + +### Changed + +- 命令执行改为反射调用 forkAndExec 以绕过 RASP（JDK7+） +- 获取所有线程代码改为 `Thread.getAllStackTraces().keySet()`，高版本 JDK 不再需要 bypass module +- 优化 boot 在启动时即触发 Server 的内存马生成注册，加速第一次请求访问 + +**Full Changelog:** [v1.7.0...v1.8.0](https://github.com/ReaJason/MemShellParty/compare/v1.6.0...v1.7.0) + ## [v1.7.0](https://github.com/ReaJason/MemShellParty/releases/tag/v1.7.0) - 2025-04-06 ### Added diff --git a/README.md b/README.md index b5997728..4849708a 100644 --- a/README.md +++ b/README.md @@ -213,13 +213,13 @@ Files.write(Paths.get("agent.jar"), agentJarBytes); | Listener | Listener | | FilterManager - Agent | ServletContext - Agent | -| BES（9.5.x） | TongWeb（6 ~ 7） | InforSuite AS （9 ~ 10） | Apusic AS （9） | -|----------------------|----------------------|------------------------|---------------| -| Filter | Filter | Filter | Servlet | -| Listener | Listener | Listener | Filter | -| Valve | Valve | Valve | Listener | -| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent | | -| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent | | +| BES（9.5.x） | TongWeb（6 ~ 7） | InforSuite AS （9 ~ 10） | Apusic AS （9） | Primeton（6.5） | +|----------------------|----------------------|------------------------|---------------|----------------------| +| Filter | Filter | Filter | Servlet | Filter | +| Listener | Listener | Listener | Filter | Listener | +| Valve | Valve | Valve | Listener | Valve | +| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent | | FilterChain - Agent | +| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent | | ContextValve - Agent | ### 内存马功能 diff --git a/docs/README.en.md b/docs/README.en.md index ee6e00b4..1a9262ab 100644 --- a/docs/README.en.md +++ b/docs/README.en.md @@ -211,13 +211,13 @@ Compatible with Java6 ~ Java8, Java9, Java11, Java17, Java21 | Listener | Listener | | FilterManager - Agent | ServletContext - Agent | -| BES（9.5.x） | TongWeb（6 ~ 7） | InforSuite AS （9 ~ 10） | Apusic AS （9） | -|----------------------|----------------------|------------------------|---------------| -| Filter | Filter | Filter | Servlet | -| Listener | Listener | Listener | Filter | -| Valve | Valve | Valve | Listener | -| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent | | -| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent | | +| BES（9.5.x） | TongWeb（6 ~ 7） | InforSuite AS （9 ~ 10） | Apusic AS （9） | Primeton（6.5） | +|----------------------|----------------------|------------------------|---------------|----------------------| +| Filter | Filter | Filter | Servlet | Filter | +| Listener | Listener | Listener | Filter | Listener | +| Valve | Valve | Valve | Listener | Valve | +| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent | | FilterChain - Agent | +| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent | | ContextValve - Agent | ### MemShell Functionality