From 8b3f285002f77cffc453b96e7c2b080d32e3c3d9 Mon Sep 17 00:00:00 2001 From: ReaJason Date: Sun, 24 May 2026 21:48:34 +0800 Subject: [PATCH] docs: update --- web/content/docs/changelog.mdx | 14 ++++++++++++++ web/content/docs/compatibility.mdx | 16 ++++++++-------- web/content/docs/sdk.mdx | 27 +++++++++++++++++++++++++++ web/content/docs/server-intro.mdx | 6 ++++++ 4 files changed, 55 insertions(+), 8 deletions(-) diff --git a/web/content/docs/changelog.mdx b/web/content/docs/changelog.mdx index bfea7f4e..bb87c87c 100644 --- a/web/content/docs/changelog.mdx +++ b/web/content/docs/changelog.mdx @@ -8,6 +8,20 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [v2.7.1](https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.1) - 2026-05-24 + +### Fixed + +1. 修复 SpELSpringGzipJDK17 高版本 org.springframework.util.Base64Utils 类被删除导致无法使用 +2. 修复 TongWeb 7.0.4.9、BES 11.0.0 回显失效 +3. 修复命名错误 struct2 -> struts2 + +### Changed + +1. 依赖更新、文档更新 + +**Full Changelog:** [v2.7.0...v2.7.1](https://github.com/ReaJason/MemShellParty/compare/v2.7.0...v2.7.1) + ## [v2.7.0](https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.0) - 2026-04-26 ### Added diff --git a/web/content/docs/compatibility.mdx b/web/content/docs/compatibility.mdx index 029607ee..ea2c04cd 100644 --- a/web/content/docs/compatibility.mdx +++ b/web/content/docs/compatibility.mdx @@ -41,7 +41,7 @@ icon: Album | Listener | Listener | | FilterManager - Agent | ServletContext - Agent | -| [BES (9.5.x)](/docs/server-intro#bes) | [TongWeb（6 ~ 8）](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) | +| [BES (9.5.x ~ 11.0.0)](/docs/server-intro#bes) | [TongWeb（6 ~ 8）](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) | | ------------------------------------- | ---------------------------------------------- | ------------------------------------------------------- | | Filter | Filter | Filter | | Listener | Listener | Listener | @@ -49,13 +49,13 @@ icon: Album | FilterChain - Agent | FilterChain - Agent | FilterChain - Agent | | ContextValve - Agent | ContextValve - Agent | ContextValve - Agent | -| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton) | -| ----------------------------------------------- | --------------------------------------------- | -| Servlet | Filter | -| Filter | Listener | -| Listener | Valve | -| FilterChain - Agent | FilterChain - Agent | -| | ContextValve - Agent | +| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton) | [Dubbo Provider](/docs/server-intro#dubbo) | +| ----------------------------------------------- | --------------------------------------------- | --------------------------------------------- | +| Servlet | Filter | DubboService | +| Filter | Listener | | +| Listener | Valve | | +| FilterChain - Agent | FilterChain - Agent | | +| | ContextValve - Agent | | ### 内存马功能 diff --git a/web/content/docs/sdk.mdx b/web/content/docs/sdk.mdx index 59eb2ea0..633a962f 100644 --- a/web/content/docs/sdk.mdx +++ b/web/content/docs/sdk.mdx @@ -10,6 +10,8 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs"; ### 添加依赖 +1. 如果仅需要生成内存马 Base64 格式，仅添加 generator 模块即可 + ```xml @@ -23,6 +25,31 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs"; ```groovy implementation 'io.github.reajason:generator:2.2.0' ``` +2. 如果需要使用自带的丰富打包方式，需要额外添加 packer 模块 + + + + ```xml + + io.github.reajason + generator + 2.2.0 + + + io.github.reajason + packer + 2.2.0 + + ``` + + + ```groovy + implementation 'io.github.reajason:generator:2.2.0' + implementation 'io.github.reajason:packer:2.2.0' + ``` + + + ### 生成 Tomcat Godzilla Filter 内存马示例 ```java diff --git a/web/content/docs/server-intro.mdx b/web/content/docs/server-intro.mdx index 8f675495..f54be296 100644 --- a/web/content/docs/server-intro.mdx +++ b/web/content/docs/server-intro.mdx @@ -365,3 +365,9 @@ SpringWebFlux 进行内存马生成。 XXL-JOB 是一个分布式任务调度平台，由于 executor 出现过反序列化漏洞，并且弱密码情况下可在 admin 前台下发任务，在 executor 执行任意代码，因此在 MemShellParty 中也提供了 XXL-JOB 内存马的生成，服务类型选择 XXL-JOB 进行内存马生成。 executor 仅支持 Netty Handler 内存马注入。 + +## Dubbo + +> 官网：https://dubbo.apache.org/en/ + +Dubbo 分为低版本 2.6x Alibaba Dubbo，包名为 `com.alibaba.dubbo.`，后来合并到 Apache 改为了 Apache Dubbo 2.7x 版本和 3.x 版本，包名为 `org.apache.dubbo.`，当前 Dubbo 内存马只针对 Dubbo Provider，对于 Dubbo Consumer 来说直接打对应的内存马即可比如 Spring 框架马。