From 6388e79f144b8f904a00f17ac836e3382bf803e9 Mon Sep 17 00:00:00 2001 From: ReaJason Date: Sat, 20 Dec 2025 23:34:24 +0800 Subject: [PATCH] docs: add WIP structure --- .../docs/(packer)/abstract-translet.mdx | 5 ++ web/content/docs/(packer)/agent-jar.mdx | 5 ++ web/content/docs/(packer)/base64.mdx | 5 ++ web/content/docs/(packer)/bcel.mdx | 5 ++ web/content/docs/(packer)/biginteger.mdx | 5 ++ web/content/docs/(packer)/expression.mdx | 5 ++ web/content/docs/(packer)/h2.mdx | 5 ++ .../docs/(packer)/hessian-deserialize.mdx | 5 ++ web/content/docs/(packer)/jar.mdx | 5 ++ .../docs/(packer)/java-deserialize.mdx | 5 ++ web/content/docs/(packer)/jsp.mdx | 5 ++ web/content/docs/(packer)/meta.json | 19 +++++++ web/content/docs/(packer)/script-engine.mdx | 7 +++ web/content/docs/(packer)/ssti.mdx | 5 ++ web/content/docs/(packer)/xml-decoder.mdx | 5 ++ web/content/docs/agent-shell.mdx | 10 ++++ web/content/docs/compatibility.mdx | 51 ++++++++++--------- web/content/docs/memshell-core-config.mdx | 6 +-- web/content/docs/meta.json | 11 +++- web/content/docs/middleware/jetty.mdx | 7 +++ web/content/docs/middleware/meta.json | 7 +++ web/content/docs/middleware/tomcat.mdx | 9 ++++ web/content/docs/probeshell-core-config.mdx | 5 ++ web/content/docs/recommend-tools.mdx | 8 +-- web/content/docs/resbody/apusic.mdx | 5 ++ web/content/docs/resbody/glassfish.mdx | 5 ++ web/content/docs/resbody/jetty.mdx | 5 ++ web/content/docs/resbody/meta.json | 16 ++++++ web/content/docs/resbody/resin.mdx | 5 ++ web/content/docs/resbody/springwebmvc.mdx | 5 ++ web/content/docs/resbody/struct2.mdx | 5 ++ web/content/docs/resbody/tomcat.mdx | 5 ++ web/content/docs/resbody/tongweb.mdx | 5 ++ web/content/docs/resbody/undertow.mdx | 5 ++ web/content/docs/resbody/weblogic.mdx | 5 ++ web/content/docs/resbody/websphere.mdx | 5 ++ web/content/docs/server-intro.mdx | 7 +++ .../docs/servlet/(container)/apusic.mdx | 11 ++++ web/content/docs/servlet/(container)/bes.mdx | 9 ++++ .../docs/servlet/(container)/glassfish.mdx | 9 ++++ .../docs/servlet/(container)/inforsuite.mdx | 11 ++++ .../docs/servlet/(container)/jboss.mdx | 9 ++++ .../docs/servlet/(container)/jetty.mdx | 11 ++++ .../docs/servlet/(container)/meta.json | 16 ++++++ .../docs/servlet/(container)/resin.mdx | 11 ++++ .../docs/servlet/(container)/tomcat.mdx | 11 ++++ .../docs/servlet/(container)/tongweb.mdx | 11 ++++ .../docs/servlet/(container)/undertow.mdx | 9 ++++ .../docs/servlet/(container)/weblogic.mdx | 11 ++++ .../docs/servlet/(container)/websphere.mdx | 11 ++++ web/content/docs/servlet/meta.json | 10 +++- web/content/docs/shelltool/antsword.mdx | 5 ++ web/content/docs/shelltool/behinder.mdx | 5 ++ web/content/docs/shelltool/command.mdx | 5 ++ .../{(shelltool) => shelltool}/godzilla.mdx | 0 web/content/docs/shelltool/meta.json | 11 ++++ web/content/docs/shelltool/neoregeorg.mdx | 5 ++ .../docs/{(shelltool) => shelltool}/suo5.mdx | 0 web/content/docs/struct2-shell.mdx | 5 ++ 59 files changed, 434 insertions(+), 35 deletions(-) create mode 100644 web/content/docs/(packer)/abstract-translet.mdx create mode 100644 web/content/docs/(packer)/agent-jar.mdx create mode 100644 web/content/docs/(packer)/base64.mdx create mode 100644 web/content/docs/(packer)/bcel.mdx create mode 100644 web/content/docs/(packer)/biginteger.mdx create mode 100644 web/content/docs/(packer)/expression.mdx create mode 100644 web/content/docs/(packer)/h2.mdx create mode 100644 web/content/docs/(packer)/hessian-deserialize.mdx create mode 100644 web/content/docs/(packer)/jar.mdx create mode 100644 web/content/docs/(packer)/java-deserialize.mdx create mode 100644 web/content/docs/(packer)/jsp.mdx create mode 100644 web/content/docs/(packer)/meta.json create mode 100644 web/content/docs/(packer)/script-engine.mdx create mode 100644 web/content/docs/(packer)/ssti.mdx create mode 100644 web/content/docs/(packer)/xml-decoder.mdx create mode 100644 web/content/docs/agent-shell.mdx create mode 100644 web/content/docs/middleware/jetty.mdx create mode 100644 web/content/docs/middleware/meta.json create mode 100644 web/content/docs/middleware/tomcat.mdx create mode 100644 web/content/docs/probeshell-core-config.mdx create mode 100644 web/content/docs/resbody/apusic.mdx create mode 100644 web/content/docs/resbody/glassfish.mdx create mode 100644 web/content/docs/resbody/jetty.mdx create mode 100644 web/content/docs/resbody/meta.json create mode 100644 web/content/docs/resbody/resin.mdx create mode 100644 web/content/docs/resbody/springwebmvc.mdx create mode 100644 web/content/docs/resbody/struct2.mdx create mode 100644 web/content/docs/resbody/tomcat.mdx create mode 100644 web/content/docs/resbody/tongweb.mdx create mode 100644 web/content/docs/resbody/undertow.mdx create mode 100644 web/content/docs/resbody/weblogic.mdx create mode 100644 web/content/docs/resbody/websphere.mdx create mode 100644 web/content/docs/servlet/(container)/apusic.mdx create mode 100644 web/content/docs/servlet/(container)/bes.mdx create mode 100644 web/content/docs/servlet/(container)/glassfish.mdx create mode 100644 web/content/docs/servlet/(container)/inforsuite.mdx create mode 100644 web/content/docs/servlet/(container)/jboss.mdx create mode 100644 web/content/docs/servlet/(container)/jetty.mdx create mode 100644 web/content/docs/servlet/(container)/meta.json create mode 100644 web/content/docs/servlet/(container)/resin.mdx create mode 100644 web/content/docs/servlet/(container)/tomcat.mdx create mode 100644 web/content/docs/servlet/(container)/tongweb.mdx create mode 100644 web/content/docs/servlet/(container)/undertow.mdx create mode 100644 web/content/docs/servlet/(container)/weblogic.mdx create mode 100644 web/content/docs/servlet/(container)/websphere.mdx create mode 100644 web/content/docs/shelltool/antsword.mdx create mode 100644 web/content/docs/shelltool/behinder.mdx create mode 100644 web/content/docs/shelltool/command.mdx rename web/content/docs/{(shelltool) => shelltool}/godzilla.mdx (100%) create mode 100644 web/content/docs/shelltool/meta.json create mode 100644 web/content/docs/shelltool/neoregeorg.mdx rename web/content/docs/{(shelltool) => shelltool}/suo5.mdx (100%) create mode 100644 web/content/docs/struct2-shell.mdx diff --git a/web/content/docs/(packer)/abstract-translet.mdx b/web/content/docs/(packer)/abstract-translet.mdx new file mode 100644 index 00000000..5285b5ed --- /dev/null +++ b/web/content/docs/(packer)/abstract-translet.mdx @@ -0,0 +1,5 @@ +--- +title: AbstractTranslet +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/agent-jar.mdx b/web/content/docs/(packer)/agent-jar.mdx new file mode 100644 index 00000000..656ee9a3 --- /dev/null +++ b/web/content/docs/(packer)/agent-jar.mdx @@ -0,0 +1,5 @@ +--- +title: Agent Jar +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/base64.mdx b/web/content/docs/(packer)/base64.mdx new file mode 100644 index 00000000..66e3e0cd --- /dev/null +++ b/web/content/docs/(packer)/base64.mdx @@ -0,0 +1,5 @@ +--- +title: Base64 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/bcel.mdx b/web/content/docs/(packer)/bcel.mdx new file mode 100644 index 00000000..5ce8ee4e --- /dev/null +++ b/web/content/docs/(packer)/bcel.mdx @@ -0,0 +1,5 @@ +--- +title: BCEL +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/biginteger.mdx b/web/content/docs/(packer)/biginteger.mdx new file mode 100644 index 00000000..b2dd1f3f --- /dev/null +++ b/web/content/docs/(packer)/biginteger.mdx @@ -0,0 +1,5 @@ +--- +title: BigInteger +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/expression.mdx b/web/content/docs/(packer)/expression.mdx new file mode 100644 index 00000000..7208daaa --- /dev/null +++ b/web/content/docs/(packer)/expression.mdx @@ -0,0 +1,5 @@ +--- +title: 表达式注入 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/h2.mdx b/web/content/docs/(packer)/h2.mdx new file mode 100644 index 00000000..7a5f88dd --- /dev/null +++ b/web/content/docs/(packer)/h2.mdx @@ -0,0 +1,5 @@ +--- +title: H2 JDBC URL +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/hessian-deserialize.mdx b/web/content/docs/(packer)/hessian-deserialize.mdx new file mode 100644 index 00000000..3bf8169f --- /dev/null +++ b/web/content/docs/(packer)/hessian-deserialize.mdx @@ -0,0 +1,5 @@ +--- +title: Hessian 反序列化 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/jar.mdx b/web/content/docs/(packer)/jar.mdx new file mode 100644 index 00000000..0abae6a9 --- /dev/null +++ b/web/content/docs/(packer)/jar.mdx @@ -0,0 +1,5 @@ +--- +title: Jar +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/java-deserialize.mdx b/web/content/docs/(packer)/java-deserialize.mdx new file mode 100644 index 00000000..917388c9 --- /dev/null +++ b/web/content/docs/(packer)/java-deserialize.mdx @@ -0,0 +1,5 @@ +--- +title: Java 原生反序列化 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/jsp.mdx b/web/content/docs/(packer)/jsp.mdx new file mode 100644 index 00000000..cdf47a65 --- /dev/null +++ b/web/content/docs/(packer)/jsp.mdx @@ -0,0 +1,5 @@ +--- +title: JSP +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/meta.json b/web/content/docs/(packer)/meta.json new file mode 100644 index 00000000..34572424 --- /dev/null +++ b/web/content/docs/(packer)/meta.json @@ -0,0 +1,19 @@ +{ + "title": "打包方式", + "pages": [ + "base64", + "jsp", + "biginteger", + "bcel", + "abstract-translet", + "script-engine", + "expression", + "ssti", + "xml-decoder", + "java-deserialize", + "hessian-deserialize", + "h2", + "jar", + "agent-jar" + ] +} \ No newline at end of file diff --git a/web/content/docs/(packer)/script-engine.mdx b/web/content/docs/(packer)/script-engine.mdx new file mode 100644 index 00000000..e3af8398 --- /dev/null +++ b/web/content/docs/(packer)/script-engine.mdx @@ -0,0 +1,7 @@ +--- +title: 脚本引擎注入 +--- + +### Nashorn ScriptEngine + +### Rhino ScriptEngine \ No newline at end of file diff --git a/web/content/docs/(packer)/ssti.mdx b/web/content/docs/(packer)/ssti.mdx new file mode 100644 index 00000000..e2cc6c66 --- /dev/null +++ b/web/content/docs/(packer)/ssti.mdx @@ -0,0 +1,5 @@ +--- +title: 模板注入 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(packer)/xml-decoder.mdx b/web/content/docs/(packer)/xml-decoder.mdx new file mode 100644 index 00000000..57afeb87 --- /dev/null +++ b/web/content/docs/(packer)/xml-decoder.mdx @@ -0,0 +1,5 @@ +--- +title: XMLDecoder +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/agent-shell.mdx b/web/content/docs/agent-shell.mdx new file mode 100644 index 00000000..ce77c01c --- /dev/null +++ b/web/content/docs/agent-shell.mdx @@ -0,0 +1,10 @@ +--- +title: Java Agent 内存马 +--- + +## Java Agent 原理 + + +## Java Agent 内存马实现方案 + +## 切点选取 diff --git a/web/content/docs/compatibility.mdx b/web/content/docs/compatibility.mdx index 9a658f25..b16e8d0f 100644 --- a/web/content/docs/compatibility.mdx +++ b/web/content/docs/compatibility.mdx @@ -8,7 +8,7 @@ icon: Album ### 中间件以及框架 -| Tomcat（5 ~ 11） | Jetty（6 ~ 12） | GlassFish（3 ~ 7） | Payara（5 ~ 6） | +| [Tomcat（5 ~ 11）](/docs/server-intro#tomcat) | [Jetty（6 ~ 12）](/docs/server-intro#jetty)| [GlassFish（3 ~ 7）](/docs/server-intro#glassfish) | [Payara（5 ~ 6）](/docs/server-intro#payara)| |----------------------|------------------------|----------------------|----------------------| | Servlet | Servlet | Filter | Filter | | Filter | Filter | Listener | Listener | @@ -19,14 +19,14 @@ icon: Album | ContextValve - Agent | | | | | Upgrade | | | | -| Resin（3 ~ 4） | SpringMVC | SpringWebFlux | XXL-JOB | +| [Resin（3 ~ 4）](/docs/server-intro#resin) | [SpringWebMVC](/docs/server-intro#springwebmvc) | [SpringWebFlux](/docs/server-intro#springwebflux) | [XXL-JOB](/docs/server-intro#xxljob) | |---------------------|--------------------------|-----------------|--------------| | Servlet | Interceptor | WebFilter | NettyHandler | | Filter | ControllerHandler | HandlerMethod | | | Listener | FrameworkServlet - Agent | HandlerFunction | | | FilterChain - Agent | | NettyHandler | | -| JBossAS（4 ~ 7） | JBossEAP（6 ~ 8） | WildFly（9 ~ 30） | Undertow | +| [JBossAS（4 ~ 7）](/docs/server-intro#jboss) | [JBossEAP（6 ~ 8）](/docs/server-intro#undertow)| [WildFly（9 ~ 30）](/docs/server-intro#wildfly) | [Undertow](/docs/server-intro#undertow)| |----------------------|----------------------------|------------------------|------------------------| | Filter | Filter | Servlet | Servlet | | Listener | Listener | Filter | Filter | @@ -35,14 +35,14 @@ icon: Album | FilterChain - Agent | ContextValve - Agent (6) | | | | ContextValve - Agent | ServletHandler - Agent (7) | | | -| WebSphere（7 ~ 9） | WebLogic （10.3.6 ~ 14） | +| [WebSphere（7 ~ 9）](/docs/server-intro#websphere)| [WebLogic (10.3.6 ~ 14)](/docs/server-intro#weblogic) | |-----------------------|-------------------------| | Servlet | Servlet | | Filter | Filter | | Listener | Listener | | FilterManager - Agent | ServletContext - Agent | -| BES（9.5.x） | TongWeb（6 ~ 8） | InforSuite AS （9 ~ 10） | +| [BES (9.5.x)](/docs/server-intro#bes)| [TongWeb（6 ~ 8）](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) | |----------------------|----------------------|------------------------| | Filter | Filter | Filter | | Listener | Listener | Listener | @@ -50,7 +50,7 @@ icon: Album | FilterChain - Agent | FilterChain - Agent | FilterChain - Agent | | ContextValve - Agent | ContextValve - Agent | ContextValve - Agent | -| Apusic AS （9 ~ 10） | Primeton（6.5） | +| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton)| |---------------------|----------------------| | Servlet | Filter | | Filter | Listener | @@ -60,27 +60,30 @@ icon: Album ### 内存马功能 -- [x] [Godzilla 哥斯拉](/docs/godzilla) -- [x] [Behinder 冰蝎](https://github.com/rebeyond/Behinder) -- [x] 命令执行 -- [x] [Suo5](/docs/suo5) -- [x] [AntSword 蚁剑](https://github.com/AntSwordProject/antSword) -- [x] [Neo-reGeorg](https://github.com/L-codes/Neo-reGeorg) -- [x] Custom +- [x] [Godzilla 哥斯拉](/docs/shelltool/godzilla) +- [x] [Behinder 冰蝎](/docs/shelltool/behinder) +- [x] [命令执行](/docs/shelltool/command) +- [x] [Suo5](/docs/shelltool/suo5) +- [x] [AntSword 蚁剑](/docs/shelltool/antsword) +- [x] [Neo-reGeorg](/docs/shelltool/neoregeorg) +- [x] [Custom](/docs/custom-memshell) ### 打包方式 -- [x] BASE64/GZIP BASE64 -- [x] JSP/JSPX -- [x] JAR、ScriptEngineJar、GroovyTransformJar -- [x] BCEL -- [x] 内置脚本引擎、Rhino 脚本引擎 -- [x] EL、SpEL、OGNL、Aviator、MVEL、JEXL、Groovy、JXPath、BeanShell -- [x] Velocity、Freemarker、JinJava -- [x] 原生反序列化（CB 和 CC 链） -- [x] Agent +- [x] [BASE64](/docs/base64) +- [x] [JSP/JSPX](/docs/jsp) +- [x] [BigInteger](/docs/biginteger) +- [x] [BCEL](/docs/bcel) +- [x] [AbstractTranslet](/docs/abstract-translet) +- [x] [BCEL](/docs/bcel) +- [x] [内置脚本引擎、Rhino 脚本引擎](/docs/script-engine) +- [x] [表达式注入（EL、SpEL、OGNL、Aviator、MVEL、JEXL、Groovy、JXPath、BeanShell）](/docs/expression) +- [x] [模板注入（Velocity、Freemarker、JinJava）](/docs/ssti) +- [x] [Java 原生反序列化（CB 和 CC 链）](/docs/java-deserialize) +- [x] [Hessian、Hessian2 反序列化（XSLT 链）](/docs/hessian-deserialize) +- [x] [H2](/docs/h2) +- [x] [JAR、ScriptEngineJar、GroovyTransformJar](/docs/jar) +- [x] [Agent](/docs/agent-jar) - [x] XXL-JOB Executor -- [x] Hessian、Hessian2 反序列化（XSLT 链） -- [x] H2 - [ ] JNDI - [ ] 其他常见反序列化 \ No newline at end of file diff --git a/web/content/docs/memshell-core-config.mdx b/web/content/docs/memshell-core-config.mdx index 11d7695c..535753a7 100644 --- a/web/content/docs/memshell-core-config.mdx +++ b/web/content/docs/memshell-core-config.mdx @@ -41,11 +41,11 @@ description: 了解和使用那些可能用到的一键开关 所需要注入内存马工具类型，目前支持以下几种方式： -- [x] [Godzilla](/docs/godzilla) +- [x] [Godzilla](/docs/shelltool/godzilla) - [x] Behinder - [x] Command -- [x] [Suo5](/docs/suo5) -- [x] [Suo5v2](/docs/suo5) +- [x] [Suo5](/docs/shelltool/suo5) +- [x] [Suo5v2](/docs/shelltool/suo5) - [x] AntSword - [x] NeoreGeorg - [x] Custom：自定义内存马，用于上续工具都不是想要的情况下，参考 [实现自定义内存马](/docs/custom-memshell) 进行使用 diff --git a/web/content/docs/meta.json b/web/content/docs/meta.json index d1510c1b..01621ba1 100644 --- a/web/content/docs/meta.json +++ b/web/content/docs/meta.json @@ -11,9 +11,16 @@ "memshell-core-config", "servlet", "springweb", + "struct2-shell", + "middleware", + "shelltool", + "agent-shell", "custom-memshell", - "---内存马工具---", - "...(shelltool)", + "---探测马生成器---", + "probeshell-core-config", + "resbody", + "---打包方式---", + "...(packer)", "---其他---", "recommend-tools" ] diff --git a/web/content/docs/middleware/jetty.mdx b/web/content/docs/middleware/jetty.mdx new file mode 100644 index 00000000..81ce4337 --- /dev/null +++ b/web/content/docs/middleware/jetty.mdx @@ -0,0 +1,7 @@ +--- +title: Jetty +--- + +## Handler 内存马 + +## Customizer 内存马 \ No newline at end of file diff --git a/web/content/docs/middleware/meta.json b/web/content/docs/middleware/meta.json new file mode 100644 index 00000000..03964b29 --- /dev/null +++ b/web/content/docs/middleware/meta.json @@ -0,0 +1,7 @@ +{ + "title": "中间件内存马", + "pages": [ + "tomcat", + "jetty" + ] +} \ No newline at end of file diff --git a/web/content/docs/middleware/tomcat.mdx b/web/content/docs/middleware/tomcat.mdx new file mode 100644 index 00000000..2b2af237 --- /dev/null +++ b/web/content/docs/middleware/tomcat.mdx @@ -0,0 +1,9 @@ +--- +title: Tomcat +--- + +## Valve 内存马 + +## ProxyValve 内存马 + +## Upgrade 内存马 \ No newline at end of file diff --git a/web/content/docs/probeshell-core-config.mdx b/web/content/docs/probeshell-core-config.mdx new file mode 100644 index 00000000..0ee9d362 --- /dev/null +++ b/web/content/docs/probeshell-core-config.mdx @@ -0,0 +1,5 @@ +--- +title: 核心配置项 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/recommend-tools.mdx b/web/content/docs/recommend-tools.mdx index d5e2eb5a..59767ec9 100644 --- a/web/content/docs/recommend-tools.mdx +++ b/web/content/docs/recommend-tools.mdx @@ -1,15 +1,15 @@ --- title: 工具推荐 +description: 工欲善其事必先利其器 --- -> 工欲善其事必先利其器 - ## Arthas Arthas 是阿里云开源的 Java 诊断工具，其本质是一个 Java Agent，它提供了各种各样的命令，能让我们洞察 JVM 各种细节信息。所有的使用姿势 [官方文档](https://arthas.aliyun.com/) 都有，以下会列举一些常见的场景和问题 -JDK8 以上的下载链接，https://arthas.aliyun.com/doc/download.html -JDK6/7 下载链接，https://arthas.aliyun.com/3.x/doc/download.html +JDK8 以上的下载链接：https://arthas.aliyun.com/doc/download.html + +JDK6/7 下载链接：https://arthas.aliyun.com/3.x/doc/download.html ### 启动 Arthas diff --git a/web/content/docs/resbody/apusic.mdx b/web/content/docs/resbody/apusic.mdx new file mode 100644 index 00000000..049e736d --- /dev/null +++ b/web/content/docs/resbody/apusic.mdx @@ -0,0 +1,5 @@ +--- +title: Apusic +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/glassfish.mdx b/web/content/docs/resbody/glassfish.mdx new file mode 100644 index 00000000..61a64372 --- /dev/null +++ b/web/content/docs/resbody/glassfish.mdx @@ -0,0 +1,5 @@ +--- +title: GlassFish +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/jetty.mdx b/web/content/docs/resbody/jetty.mdx new file mode 100644 index 00000000..474f72c0 --- /dev/null +++ b/web/content/docs/resbody/jetty.mdx @@ -0,0 +1,5 @@ +--- +title: Jetty +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/meta.json b/web/content/docs/resbody/meta.json new file mode 100644 index 00000000..6b6e4947 --- /dev/null +++ b/web/content/docs/resbody/meta.json @@ -0,0 +1,16 @@ +{ + "title": "回显马", + "pages": [ + "tomcat", + "jetty", + "undertow", + "resin", + "weblogic", + "websphere", + "glassfish", + "tongweb", + "apusic", + "springwebmvc", + "struct2" + ] +} \ No newline at end of file diff --git a/web/content/docs/resbody/resin.mdx b/web/content/docs/resbody/resin.mdx new file mode 100644 index 00000000..343a39bc --- /dev/null +++ b/web/content/docs/resbody/resin.mdx @@ -0,0 +1,5 @@ +--- +title: Resin +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/springwebmvc.mdx b/web/content/docs/resbody/springwebmvc.mdx new file mode 100644 index 00000000..2e8bac9f --- /dev/null +++ b/web/content/docs/resbody/springwebmvc.mdx @@ -0,0 +1,5 @@ +--- +title: SpringWebMVC +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/struct2.mdx b/web/content/docs/resbody/struct2.mdx new file mode 100644 index 00000000..101c730f --- /dev/null +++ b/web/content/docs/resbody/struct2.mdx @@ -0,0 +1,5 @@ +--- +title: Struct2 +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/tomcat.mdx b/web/content/docs/resbody/tomcat.mdx new file mode 100644 index 00000000..013b035c --- /dev/null +++ b/web/content/docs/resbody/tomcat.mdx @@ -0,0 +1,5 @@ +--- +title: Tomcat +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/tongweb.mdx b/web/content/docs/resbody/tongweb.mdx new file mode 100644 index 00000000..bbac72f8 --- /dev/null +++ b/web/content/docs/resbody/tongweb.mdx @@ -0,0 +1,5 @@ +--- +title: TongWeb +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/undertow.mdx b/web/content/docs/resbody/undertow.mdx new file mode 100644 index 00000000..d56d7e26 --- /dev/null +++ b/web/content/docs/resbody/undertow.mdx @@ -0,0 +1,5 @@ +--- +title: Undertow +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/weblogic.mdx b/web/content/docs/resbody/weblogic.mdx new file mode 100644 index 00000000..9d5e365a --- /dev/null +++ b/web/content/docs/resbody/weblogic.mdx @@ -0,0 +1,5 @@ +--- +title: WebLogic +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/resbody/websphere.mdx b/web/content/docs/resbody/websphere.mdx new file mode 100644 index 00000000..3530c2fa --- /dev/null +++ b/web/content/docs/resbody/websphere.mdx @@ -0,0 +1,5 @@ +--- +title: WebSphere +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/server-intro.mdx b/web/content/docs/server-intro.mdx index 720e94ec..d417140a 100644 --- a/web/content/docs/server-intro.mdx +++ b/web/content/docs/server-intro.mdx @@ -359,3 +359,10 @@ SpringWebMVC 进行内存马生成。 Spring Boot 项目中基于 reactor 异步 IO 模型的服务组件，底层使用的 Netty，一般常见于各种 SpringCloud 项目，例如网关。服务类型选择 SpringWebFlux 进行内存马生成。 + +## XXL-JOB + +> 官网：https://www.xuxueli.com/xxl-job/ + +XXL-JOB 是一个分布式任务调度平台，由于 executor 出现过反序列化漏洞，并且弱密码情况下可在 admin 前台下发任务，在 executor 执行任意代码，因此在 MemShellParty 中也提供了 XXL-JOB 内存马的生成，服务类型选择 XXL-JOB 进行内存马生成。 +executor 仅支持 Netty Handler 内存马注入。 \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/apusic.mdx b/web/content/docs/servlet/(container)/apusic.mdx new file mode 100644 index 00000000..6fc9478c --- /dev/null +++ b/web/content/docs/servlet/(container)/apusic.mdx @@ -0,0 +1,11 @@ +--- +title: Apusic AS +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/bes.mdx b/web/content/docs/servlet/(container)/bes.mdx new file mode 100644 index 00000000..59197e56 --- /dev/null +++ b/web/content/docs/servlet/(container)/bes.mdx @@ -0,0 +1,9 @@ +--- +title: BES +--- + +## 获取 ServletContext + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/glassfish.mdx b/web/content/docs/servlet/(container)/glassfish.mdx new file mode 100644 index 00000000..65d6b85f --- /dev/null +++ b/web/content/docs/servlet/(container)/glassfish.mdx @@ -0,0 +1,9 @@ +--- +title: GlassFish +--- + +## 获取 ServletContext + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/inforsuite.mdx b/web/content/docs/servlet/(container)/inforsuite.mdx new file mode 100644 index 00000000..9e800e7b --- /dev/null +++ b/web/content/docs/servlet/(container)/inforsuite.mdx @@ -0,0 +1,11 @@ +--- +title: InforSuite AS +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/jboss.mdx b/web/content/docs/servlet/(container)/jboss.mdx new file mode 100644 index 00000000..c2145e32 --- /dev/null +++ b/web/content/docs/servlet/(container)/jboss.mdx @@ -0,0 +1,9 @@ +--- +title: JBoss +--- + +## 获取 ServletContext + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/jetty.mdx b/web/content/docs/servlet/(container)/jetty.mdx new file mode 100644 index 00000000..47d9edd7 --- /dev/null +++ b/web/content/docs/servlet/(container)/jetty.mdx @@ -0,0 +1,11 @@ +--- +title: Jetty +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/meta.json b/web/content/docs/servlet/(container)/meta.json new file mode 100644 index 00000000..4226fd43 --- /dev/null +++ b/web/content/docs/servlet/(container)/meta.json @@ -0,0 +1,16 @@ +{ + "pages": [ + "tomcat", + "jetty", + "undertow", + "jboss", + "resin", + "weblogic", + "websphere", + "glassfish", + "tongweb", + "bes", + "inforsuite", + "apusic" + ] +} \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/resin.mdx b/web/content/docs/servlet/(container)/resin.mdx new file mode 100644 index 00000000..4743196e --- /dev/null +++ b/web/content/docs/servlet/(container)/resin.mdx @@ -0,0 +1,11 @@ +--- +title: Resin +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/tomcat.mdx b/web/content/docs/servlet/(container)/tomcat.mdx new file mode 100644 index 00000000..6d207fad --- /dev/null +++ b/web/content/docs/servlet/(container)/tomcat.mdx @@ -0,0 +1,11 @@ +--- +title: Tomcat +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/tongweb.mdx b/web/content/docs/servlet/(container)/tongweb.mdx new file mode 100644 index 00000000..60940bc6 --- /dev/null +++ b/web/content/docs/servlet/(container)/tongweb.mdx @@ -0,0 +1,11 @@ +--- +title: TongWeb +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/undertow.mdx b/web/content/docs/servlet/(container)/undertow.mdx new file mode 100644 index 00000000..f0631ca6 --- /dev/null +++ b/web/content/docs/servlet/(container)/undertow.mdx @@ -0,0 +1,9 @@ +--- +title: Undertow +--- + +## 获取 ServletContext + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/weblogic.mdx b/web/content/docs/servlet/(container)/weblogic.mdx new file mode 100644 index 00000000..41d974fb --- /dev/null +++ b/web/content/docs/servlet/(container)/weblogic.mdx @@ -0,0 +1,11 @@ +--- +title: WebLogic +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/(container)/websphere.mdx b/web/content/docs/servlet/(container)/websphere.mdx new file mode 100644 index 00000000..948997f4 --- /dev/null +++ b/web/content/docs/servlet/(container)/websphere.mdx @@ -0,0 +1,11 @@ +--- +title: WebSphere +--- + +## 获取 ServletContext + +## 动态添加 Servlet + +## 动态添加 Filter + +## 动态添加 Listener \ No newline at end of file diff --git a/web/content/docs/servlet/meta.json b/web/content/docs/servlet/meta.json index b9f747c7..ffdd14c0 100644 --- a/web/content/docs/servlet/meta.json +++ b/web/content/docs/servlet/meta.json @@ -1,4 +1,10 @@ { "title": "Java Servlet 规范内存马", - "pages": ["servlet", "filter", "listener"] -} + "pages": [ + "servlet", + "filter", + "listener", + "---Servlet 容器---", + "...(container)" + ] +} \ No newline at end of file diff --git a/web/content/docs/shelltool/antsword.mdx b/web/content/docs/shelltool/antsword.mdx new file mode 100644 index 00000000..0b481fcf --- /dev/null +++ b/web/content/docs/shelltool/antsword.mdx @@ -0,0 +1,5 @@ +--- +title: AntSword +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/shelltool/behinder.mdx b/web/content/docs/shelltool/behinder.mdx new file mode 100644 index 00000000..027bba83 --- /dev/null +++ b/web/content/docs/shelltool/behinder.mdx @@ -0,0 +1,5 @@ +--- +title: Behinder +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/shelltool/command.mdx b/web/content/docs/shelltool/command.mdx new file mode 100644 index 00000000..0888487b --- /dev/null +++ b/web/content/docs/shelltool/command.mdx @@ -0,0 +1,5 @@ +--- +title: Command +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(shelltool)/godzilla.mdx b/web/content/docs/shelltool/godzilla.mdx similarity index 100% rename from web/content/docs/(shelltool)/godzilla.mdx rename to web/content/docs/shelltool/godzilla.mdx diff --git a/web/content/docs/shelltool/meta.json b/web/content/docs/shelltool/meta.json new file mode 100644 index 00000000..877b194d --- /dev/null +++ b/web/content/docs/shelltool/meta.json @@ -0,0 +1,11 @@ +{ + "title": "内存马工具", + "pages": [ + "godzilla", + "suo5", + "behinder", + "command", + "antsword", + "neoregeorg" + ] +} \ No newline at end of file diff --git a/web/content/docs/shelltool/neoregeorg.mdx b/web/content/docs/shelltool/neoregeorg.mdx new file mode 100644 index 00000000..1e22862e --- /dev/null +++ b/web/content/docs/shelltool/neoregeorg.mdx @@ -0,0 +1,5 @@ +--- +title: Neo-ReGeorg +--- + +WIP \ No newline at end of file diff --git a/web/content/docs/(shelltool)/suo5.mdx b/web/content/docs/shelltool/suo5.mdx similarity index 100% rename from web/content/docs/(shelltool)/suo5.mdx rename to web/content/docs/shelltool/suo5.mdx diff --git a/web/content/docs/struct2-shell.mdx b/web/content/docs/struct2-shell.mdx new file mode 100644 index 00000000..44251f2b --- /dev/null +++ b/web/content/docs/struct2-shell.mdx @@ -0,0 +1,5 @@ +--- +title: Struct2 框架内存马 +--- + +## Action 内存马 \ No newline at end of file