mirror of
https://github.com/ReaJason/MemShellParty.git
synced 2026-09-21 22:50:42 +08:00
feat: support ws proxy
This commit is contained in:
Binary file not shown.
|
After Width: | Height: | Size: 127 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 110 KiB |
@@ -1,4 +1,12 @@
|
||||
{
|
||||
"title": "内存马工具",
|
||||
"pages": ["godzilla", "suo5", "behinder", "command", "antsword", "neoregeorg"]
|
||||
"pages": [
|
||||
"godzilla",
|
||||
"suo5",
|
||||
"behinder",
|
||||
"command",
|
||||
"antsword",
|
||||
"neoregeorg",
|
||||
"proxy"
|
||||
]
|
||||
}
|
||||
|
||||
@@ -0,0 +1,101 @@
|
||||
---
|
||||
title: Proxy
|
||||
---
|
||||
import { Step, Steps } from 'fumadocs-ui/components/steps';
|
||||
|
||||
参考地址:https://github.com/veo/wsMemShell/blob/main/static/websocketproxy.md
|
||||
|
||||
## WebSocket 内存马
|
||||
|
||||
<Steps>
|
||||
<Step>
|
||||
### 选择 Proxy
|
||||
|
||||

|
||||
</Step>
|
||||
|
||||
<Step>
|
||||
### 生成并注入
|
||||
|
||||
选取合适的打包方式,并进行内存马的注入。
|
||||
|
||||
</Step>
|
||||
<Step>
|
||||
### 使用 Gost 客户端尝试启动代理
|
||||
|
||||
https://github.com/go-gost/gost
|
||||
|
||||
```bash
|
||||
❯ ./gost -L :1080 -F "ws://127.0.0.1:8082?path=/app/proxy"
|
||||
{"handler":"auto","kind":"service","level":"info","listener":"tcp","msg":"listening on [::]:1080/tcp","service":"service-0","time":"2026-01-16T23:15:55.143+08:00"}
|
||||
```
|
||||
|
||||
尝试使用 curl 命令使用代理访问百度
|
||||
|
||||
```bash
|
||||
> curl -x socks5h://127.0.0.1:1080 https://www.baidu.com
|
||||
```
|
||||
</Step>
|
||||
</Steps>
|
||||
|
||||
## BypassNginxWebSocket 内存马
|
||||
|
||||
<Steps>
|
||||
<Step>
|
||||
### 选择 Proxy 并填写参数
|
||||
|
||||

|
||||
</Step>
|
||||
|
||||
<Step>
|
||||
### 生成并注入
|
||||
|
||||
选取合适的打包方式,并进行内存马的注入。
|
||||
|
||||
</Step>
|
||||
<Step>
|
||||
### 使用 Gost 客户端尝试启动代理
|
||||
|
||||
https://github.com/go-gost/gost
|
||||
|
||||
由于 Gost 自定义请求头只能通过配置文件实现,因此创建一个 `gost.yaml`
|
||||
|
||||
```yaml
|
||||
services:
|
||||
- name: service-0
|
||||
addr: :1080
|
||||
handler:
|
||||
type: auto
|
||||
listener:
|
||||
type: tcp
|
||||
chain: chain-0
|
||||
|
||||
chains:
|
||||
- name: chain-0
|
||||
hops:
|
||||
- name: hop-ws
|
||||
nodes:
|
||||
- name: ws-tunnel
|
||||
addr: 127.0.0.1:80 # 此处填写目标地址,我是用 Nginx 反代所以是 80 端口
|
||||
connector:
|
||||
type: http
|
||||
dialer:
|
||||
type: ws
|
||||
metadata:
|
||||
path: /app/bypass-proxy # 此处填写 WebSocket 路径
|
||||
header:
|
||||
User-Agent: "test" # 此处填写自定义请求头
|
||||
```
|
||||
|
||||
```bash
|
||||
❯ ./gost -C gost.yaml
|
||||
{"handler":"auto","kind":"service","level":"info","listener":"tcp","msg":"listening on [::]:1080/tcp","service":"service-0","time":"2026-01-16T23:30:04.927+08:00"}
|
||||
```
|
||||
|
||||
尝试使用 curl 命令使用代理访问百度
|
||||
|
||||
```bash
|
||||
> curl -x socks5h://127.0.0.1:1080 https://www.baidu.com
|
||||
```
|
||||
</Step>
|
||||
</Steps>
|
||||
Reference in New Issue
Block a user