docs: update

This commit is contained in:
ReaJason
2026-05-24 22:28:22 +08:00
parent 0a9a68ee7f
commit 8b3f285002
4 changed files with 55 additions and 8 deletions
+14
View File
@@ -8,6 +8,20 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## [v2.7.1](https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.1) - 2026-05-24
### Fixed
1. 修复 SpELSpringGzipJDK17 高版本 org.springframework.util.Base64Utils 类被删除导致无法使用
2. 修复 TongWeb 7.0.4.9、BES 11.0.0 回显失效
3. 修复命名错误 struct2 -> struts2
### Changed
1. 依赖更新、文档更新
**Full Changelog:** [v2.7.0...v2.7.1](https://github.com/ReaJason/MemShellParty/compare/v2.7.0...v2.7.1)
## [v2.7.0](https://github.com/ReaJason/MemShellParty/releases/tag/v2.7.0) - 2026-04-26
### Added
+8 -8
View File
@@ -41,7 +41,7 @@ icon: Album
| Listener | Listener |
| FilterManager - Agent | ServletContext - Agent |
| [BES (9.5.x)](/docs/server-intro#bes) | [TongWeb6 ~ 8](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) |
| [BES (9.5.x ~ 11.0.0)](/docs/server-intro#bes) | [TongWeb6 ~ 8](/docs/server-intro#tongweb) | [InforSuite AS (9 ~ 10)](/docs/server-intro#inforsuite) |
| ------------------------------------- | ---------------------------------------------- | ------------------------------------------------------- |
| Filter | Filter | Filter |
| Listener | Listener | Listener |
@@ -49,13 +49,13 @@ icon: Album
| FilterChain - Agent | FilterChain - Agent | FilterChain - Agent |
| ContextValve - Agent | ContextValve - Agent | ContextValve - Agent |
| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton) |
| ----------------------------------------------- | --------------------------------------------- |
| Servlet | Filter |
| Filter | Listener |
| Listener | Valve |
| FilterChain - Agent | FilterChain - Agent |
| | ContextValve - Agent |
| [Apusic AS (9 ~ 10)](/docs/server-intro#apusic) | [Primeton (6.5)](/docs/server-intro#primeton) | [Dubbo Provider](/docs/server-intro#dubbo) |
| ----------------------------------------------- | --------------------------------------------- | --------------------------------------------- |
| Servlet | Filter | DubboService |
| Filter | Listener | |
| Listener | Valve | |
| FilterChain - Agent | FilterChain - Agent | |
| | ContextValve - Agent | |
### 内存马功能
+27
View File
@@ -10,6 +10,8 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs";
### 添加依赖
1. 如果仅需要生成内存马 Base64 格式,仅添加 generator 模块即可
<Tabs items={["Maven", "Gradle"]}>
<Tab>
```xml
@@ -23,6 +25,31 @@ import { Tab, Tabs } from "fumadocs-ui/components/tabs";
<Tab>```groovy implementation 'io.github.reajason:generator:2.2.0' ```</Tab>
</Tabs>
2. 如果需要使用自带的丰富打包方式,需要额外添加 packer 模块
<Tabs items={["Maven", "Gradle"]}>
<Tab>
```xml
<dependency>
<groupId>io.github.reajason</groupId>
<artifactId>generator</artifactId>
<version>2.2.0</version>
</dependency>
<dependency>
<groupId>io.github.reajason</groupId>
<artifactId>packer</artifactId>
<version>2.2.0</version>
</dependency>
```
</Tab>
<Tab>
```groovy
implementation 'io.github.reajason:generator:2.2.0'
implementation 'io.github.reajason:packer:2.2.0'
```
</Tab>
</Tabs>
### 生成 Tomcat Godzilla Filter 内存马示例
```java
+6
View File
@@ -365,3 +365,9 @@ SpringWebFlux 进行内存马生成。
XXL-JOB 是一个分布式任务调度平台,由于 executor 出现过反序列化漏洞,并且弱密码情况下可在 admin 前台下发任务,在 executor 执行任意代码,因此在 MemShellParty 中也提供了 XXL-JOB 内存马的生成,服务类型选择 XXL-JOB 进行内存马生成。
executor 仅支持 Netty Handler 内存马注入。
## Dubbo
> 官网:https://dubbo.apache.org/en/
Dubbo 分为低版本 2.6x Alibaba Dubbo,包名为 `com.alibaba.dubbo.`,后来合并到 Apache 改为了 Apache Dubbo 2.7x 版本和 3.x 版本,包名为 `org.apache.dubbo.`,当前 Dubbo 内存马只针对 Dubbo Provider,对于 Dubbo Consumer 来说直接打对应的内存马即可比如 Spring 框架马。